Privacy Policy

Introduction

Welcome to Luxury Khusi Thai Spa (“we,” “us,” “our,” or “Company”). We are committed to protecting your privacy and ensuring you have a positive experience on our website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our services. By accessing and using our website, you acknowledge that you have read, understood, and agree to be bound by all the provisions of this Privacy Policy.

Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us, including:

• Booking Information: Name, email address, phone number, appointment date/time, and service preferences
• Payment Information: Credit card details, billing address, and transaction history (processed securely through payment gateways)
• Contact Forms: Any information you submit through our website contact forms
• Health Information: Any health conditions or allergies disclosed for treatment customization (stored securely and confidentially)
• Communication: Emails, messages, and feedback you send us

2.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information:

• Log Data: IP address, browser type, referring URL, pages visited, and time stamps
• Device Information: Device type, operating system, and unique device identifiers
• Location Information: General location data based on IP address
• Usage Analytics: How you interact with our website and services

2.3 Information from Third Parties

We may receive information about you from:

• Payment processors and financial institutions
• Marketing partners and analytics services
• Social media platforms (if you link your accounts)
• Review and feedback platforms

How We Use Your Information

We use the information we collect for various purposes:

3.1 Service Delivery

• Processing and confirming your bookings
• Providing treatments and wellness services
• Sending appointment reminders and confirmations
• Handling customer inquiries and support requests

3.2 Communication

• Responding to your messages and questions
• Sending updates about our services and offerings
• Newsletter subscriptions (with your consent)
• Promotional offers and special deals

3.3 Business Operations

• Improving our website and services
• Analyzing usage patterns and trends
• Ensuring website security and preventing fraud
• Complying with legal obligations

3.4 Marketing

• Creating personalized marketing campaigns
• Targeted advertising (only with your consent)
• Conducting market research and surveys

Data Security

We implement comprehensive security measures to protect your personal information:

4.1 Security Measures

• Encryption: SSL/TLS encryption for all data transmission
• Secure Servers: Protected servers with firewalls and intrusion detection
• Access Controls: Limited access to personal information by authorized personnel only
• Regular Audits: Periodic security assessments and vulnerability testing
• Password Protection: Strong password requirements for staff accounts

4.2 Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill legal obligations. Specific retention periods include:

• Booking Records: 3 years for business and legal purposes
• Payment Information: 7 years for accounting and tax compliance
• Marketing Data: Until you unsubscribe or request deletion
• Website Analytics: Aggregated and anonymized after 90 days

Cookies & Tracking Technologies

5.1 Types of Cookies We Use

• Essential Cookies: Required for basic website functionality (cannot be disabled)
• Analytics Cookies: Google Analytics to understand user behavior and improve services
• Marketing Cookies: For targeted advertising and remarketing (used with your consent)
• Preference Cookies: Remember your settings and preferences

5.2 Managing Cookies

You can control cookie preferences through your browser settings. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Please note that disabling cookies may affect website functionality.

5.3 Third-Party Analytics

We use Google Analytics and similar tools to analyze website traffic. These services may collect information about your browsing habits across multiple websites. You can opt-out through your browser settings or privacy control tools.

Your Rights & Choices

6.1 Access & Transparency

You have the right to know what personal information we hold about you and how we use it. You can request a copy of your data at any time by contacting us.

6.2 Correction & Updates

You can update or correct your personal information by logging into your account or contacting us directly. We will ensure your information is accurate and current.

6.3 Deletion & Right to Be Forgotten

You can request deletion of your personal information, subject to legal and business obligations. Some information may need to be retained for compliance purposes.

6.4 Opt-Out Options

• Marketing Communications: Click “Unsubscribe” in any email or contact us
• Cookies: Manage through browser settings
• Analytics Tracking: Use browser privacy tools or opt-out extensions

6.5 Data Portability

You have the right to receive your data in a structured, commonly used format and transfer it to another service provider if applicable.

Third-Party Links & Services

Our website may contain links to external websites and third-party services. This Privacy Policy applies only to our website. We are not responsible for:

• Privacy practices of third-party websites
• Content on external sites
• Security of linked services

We recommend reviewing the privacy policies of any third-party websites before providing your information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, and other factors. We will notify you of material changes by:

• Posting the updated policy on our website
• Updating the “Last Updated” date at the top of this policy
• Sending an email notification for significant changes

Your continued use of our website following the posting of changes constitutes your acceptance of the updated Privacy Policy.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Data Protection Officer

If you have concerns about how we handle your data or wish to file a complaint, you can contact our Data Protection Officer at luxurykhusithaispa@gmail.com

Regulatory Authority

If you believe we are not complying with this Privacy Policy or applicable laws, you have the right to lodge a complaint with your local data protection authority.

Compliance & Standards

Luxury Khusi Thai Spa complies with applicable privacy laws and regulations, including:

• Information Technology Act, 2000 (India)
• Information Technology Rules, 2011
• General Data Protection Regulation (GDPR) – for EU users
• Consumer Protection Act, 2019

This Privacy Policy is effective as of December 11, 2025. We appreciate your trust in Luxury Khusi Thai Spa and are committed to protecting your privacy.