Effective Date: January 1, 2025
Website: https://samyaspa.com
At Samya Spa, we are dedicated to safeguarding your privacy and ensuring that your personal information is protected. This Privacy Policy outlines how we collect, use, disclose, store, and protect your information when you interact with our services, visit our website, or engage with us in any form. We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable privacy laws in Canada.
By using our website or booking our services, you consent to the practices described in this Privacy Policy.
1. Information We Collect
We collect personal and non-personal information to provide services effectively, enhance your experience, and comply with legal obligations.
a. Personal Information
Personal information refers to data that can be used to identify an individual. We collect the following types of personal data:
- Full name
- Email address
- Phone number
- Billing and/or shipping address
- Health information you voluntarily provide related to treatments
- Payment details (if purchasing gift cards or prepaying services)
- Any other information you choose to provide through contact forms or bookings
b. Non-Personal Information
Non-personal data is collected automatically when you visit our website, such as:
- Browser type and operating system
- IP address
- Device type
- Geographic location (approximate)
- Pages viewed
- Time and date of visit
- Referring URLs
We may use cookies, tracking pixels, and similar technologies to gather this data for analytics and improvement purposes.
2. How We Collect Information
Your information may be collected in the following ways:
- When you fill out a contact, booking, or consultation form
- When you subscribe to our newsletter or mailing list
- When you call, email, or interact with our staff
- When you purchase a gift card or service online
- Through cookies and similar technologies as you browse our website
We will always obtain your consent before collecting personal data, either implicitly through your continued use of the website or explicitly via checkboxes and agreement prompts.
3. Purpose of Collection
We use your information for several business-related and customer-focused purposes, including:
- To schedule appointments and provide spa services
- To confirm bookings and send appointment reminders
- To process transactions securely
- To respond to inquiries or customer service requests
- To send promotional offers, spa updates, and newsletters (with consent)
- To personalize your experience on our website
- To improve our website content and service offerings
- To comply with legal obligations or respond to lawful requests
We will not use your personal information for purposes other than those listed without first obtaining your consent.
4. Sharing and Disclosure of Information
We value your trust and do not sell or rent your personal data to third parties. However, we may share information with the following entities under strict confidentiality:
a. Service Providers
We may disclose your information to trusted third-party providers who assist us with:
- Payment processing (e.g., Stripe, Square)
- Email marketing services
- Website hosting and IT support
- Scheduling and booking software
- Analytics tools (e.g., Google Analytics)
These third parties only access the data necessary to perform their tasks and are required to keep your information secure.
b. Legal Compliance
We may disclose your information when required by law, regulation, subpoena, or if we believe such action is necessary to:
- Comply with a legal obligation
- Protect and defend the rights or property of Samya Spa
- Prevent or investigate possible wrongdoing in connection with the site or services
- Protect the personal safety of users or the public
5. Data Security and Protection
We take reasonable and appropriate technical, administrative, and physical measures to safeguard your personal data against unauthorized access, disclosure, or destruction. These include:
- SSL encryption on our website
- Secure password protocols
- Restricted access to sensitive data
- Regular monitoring and updates to security tools and systems
While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will act swiftly in the event of a breach.
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements.
- Booking and transaction records may be kept for up to 7 years for tax and audit purposes.
- Contact form submissions are stored for up to 12 months unless further consent is given.
- Email marketing preferences are maintained until you unsubscribe.
You may request deletion of your personal data by contacting us using the information below.
7. Your Rights
Under Canadian privacy law, you have the following rights:
- Right to access: You can request a copy of the personal information we hold about you.
- Right to correction: You can ask us to correct inaccuracies or update your information.
- Right to withdraw consent: You may withdraw consent to the use of your information at any time.
- Right to deletion: You may request that we delete your data when it is no longer necessary.
- Right to complain: You can lodge a complaint with the Office of the Privacy Commissioner of Canada if you feel your rights have been violated.
To exercise any of these rights, contact us at:
📧 [email protected] (update with your actual email)
8. Cookies and Tracking Technologies
Cookies are small data files stored on your device. They help us enhance your browsing experience and collect analytics. We use:
- Essential cookies – Required for core site functionality
- Performance cookies – To analyze how users interact with our website
- Functionality cookies – To remember user preferences
- Marketing cookies – For ad tracking and remarketing (if used)
You can control cookie preferences through your browser settings. Disabling cookies may affect the usability of some website features.
9. Third-Party Links
Our website may contain links to third-party websites or services not operated by Samya Spa. We are not responsible for the content or privacy practices of those sites. We recommend reviewing the privacy policies of every external site you visit.
10. Children’s Privacy
Our services are not intended for children under the age of 13. We do not knowingly collect or solicit personal information from minors. If you believe a child has provided us with personal data without parental consent, please contact us immediately, and we will delete the data.
11. International Users
Samya Spa is based in Canada. If you are accessing the website from outside Canada, please be aware that your information may be transferred to, stored, and processed in Canada. By using our site, you consent to this transfer.
12. Updates to This Privacy Policy
We may revise this Privacy Policy from time to time. Updates will be posted on this page, and the “Effective Date” will reflect the most recent version. Continued use of our website and services after changes are posted constitutes your acceptance of the revised policy.
13. Contact Us
If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:
Samya Spa
1016 Broad St, Victoria, BC V8W 1Z9
(250) 382-3253
[email protected]
https://samyaspa.com
