Privacy Policy — Nirvaana SPA

1. Information We Collect

We collect information you provide directly to us and information collected automatically when you use our services or website.

• Personal information: name, phone number, email address, mailing address, date of birth, and billing/payment details.
• Health & treatment information: allergies, medical conditions, skin sensitivities, and other information you share to help safely provide treatments.
• Booking & service data: appointment history, service preferences, notes, and feedback.
• Website & device data: IP address, browser type, device information, pages visited, and cookies (see Cookies).

2. How We Use Your Information

We use personal information for legitimate business purposes including:

• Scheduling, confirming, and managing appointments and payments.
• Customizing treatments and ensuring client safety.
• Sending appointment reminders, receipts, and (with consent) marketing communications such as promotions and newsletters.
• Analyzing and improving our services, website, and customer experience.
• Complying with legal obligations and protecting our rights.

3. How We Protect Your Information

We implement reasonable technical and organizational measures to protect personal data from unauthorized access, disclosure, alteration, and destruction. Access to client records is limited to authorized staff who require the information to perform their duties.

Note: No method of transmission over the internet or electronic storage is completely secure — if you have concerns, please contact us (see Contact).

4. Sharing Your Information

We do not sell or rent your personal information. We may share information with:

• Service providers: third-party vendors (payment processors, booking software, email providers) who help operate our business — they are contractually required to protect your data.
• Legal requests: when required by law, regulation, or legal process, or to protect the safety, rights, or property of individuals or the spa.

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access or receive a copy of personal data we hold about you.
• Request correction or update of inaccurate personal data.
• Request deletion of personal data (subject to legal recordkeeping requirements).
• Opt out of marketing communications at any time.

To exercise these rights, contact us at the information in the Contact section. We will respond to verified requests in accordance with applicable law.

6. Cookies & Online Privacy

We use cookies and similar technologies to operate our website, analyze usage, and support features such as appointment booking. Most browsers allow you to block or delete cookies — doing so may affect website functionality. For details about cookies used, please contact us.

7. Data Retention

We retain personal information as necessary to provide services, fulfill legal obligations, resolve disputes, and enforce agreements. Retention periods vary depending on the type of data and applicable law.

8. Updates to This Policy

We may update this Privacy Policy periodically. When we do, we will post the new policy on our website with an updated Effective Date. For material changes, we will provide more prominent notice where required by law.

9. Contact Us

If you have questions, requests, or concerns regarding this Privacy Policy or our privacy practices, please contact: