Data Privacy Act of 2012 (RA 10173)

Privacy notice

Last updated 24 September 2026.

Who we are

This notice explains how the spa named at the top of this page ("we") handles your personal data under the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules. Our contact details are in the footer.

What we collect

When you book: your name, mobile number, email (optional), the treatment, branch or home-service address, and any notes you give us.

At the spa: a short health form (conditions, allergies, pregnancy) so your therapist can keep you safe. Health information is sensitive personal information and is kept apart from your other details.

When you send a form: what you write in it. When you leave a review: your name, rating and words, and your email if you give it.

We do not use advertising trackers or third-party analytics on this website.

Why we use it

To take, confirm and remind you of your booking; to carry out your treatment safely; to answer your enquiry; to issue receipts as the tax rules require; and, if you agree, to tell you about offers. You may withdraw consent to offers at any time.

Who sees it

Our front desk and your therapist, and the people who run our systems for us under a written agreement. We do not sell your data. We share it only when the law requires, for example with the BIR for receipts that carry a senior citizen or PWD ID number.

How long we keep it

Booking and receipt records for as long as the tax rules require. Health forms for as long as you remain a guest, then three years. Enquiries for one year.

Your rights

You have the right to be informed, to access, to object, to correct, to erasure or blocking, to data portability, and to damages; and you may complain to the National Privacy Commission (privacy.gov.ph).

To use any of these rights, write to our Data Protection Officer at the email in the footer.

Contact our Data Protection Officer

Supr., 123 Example Street, Sample City. Email info@example.com with “Data privacy” in the subject line.