Privacy & Consent
Privacy & Consent
How we collect, use and protect your information.
Data Principles
We collect only what is needed for lead follow-up, booking, service, assessment, membership and records. Name, mobile and email are required for all lead, booking, assessment and membership flows. Health information is sensitive and restricted by role. We do not send detailed health data through open email, LINE or WhatsApp, and we log access to sensitive records.
Consent Types
Consent to Contact
Required
Lead follow-up and booking confirmation.
Consent for Spa Service
Required before service
Permission to provide the chosen spa service.
Consent for Health Data
Required if collecting health data
Health screening and service safety.
Consent for Assessment
Required if doing assessment
Thai/Ayurvedic assessment processing.
Marketing Consent
Optional
News, promotions and remarketing.
Photo Consent
Optional
Only when media is captured.
Marketing consent is optional and separate from service and health consent.
Safety Flag Model
Green
Proceed with therapist discretion
Yellow
Therapist or manager review required
Red
Manager review; change, postpone or decline with reason
Safety flags use rule-based configuration and staff review — not automated decisions. Green means proceed with therapist discretion; Yellow means therapist or spa manager review required; Red means spa manager review, with the option to change, postpone or decline the service with reason.
