Privacy Policy

1. Introduction

Natura Thai Spa & Beauty (“Natura”, “we”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website, make a booking, or otherwise interact with our services.

This policy applies to customers and website visitors in Germany, the European Union, and elsewhere who use our online booking services.

2. Information We Collect

Depending on how you use our website, we may collect the following categories of personal information:

• Full name
• Email address
• Telephone or mobile number
• Booking date and time
• Selected massage, cosmetic, or wellness service
• Service duration
• Booking notes or other information you voluntarily provide
• Service address details required for mobile/home visits (street, city, postal code)
• Payment-related information required to process a transaction (such as payment method selection and transaction status)
• Technical and usage information such as IP address, browser type, device information, and cookies where applicable

3. How We Use Your Information

We use personal information for the following purposes:

• Processing and managing bookings and appointments
• Confirming appointments and sending booking-related communications
• Sending booking confirmation emails and administrative notifications
• Processing payments and recording payment status
• Responding to customer inquiries and providing customer support
• Managing appointments and business operations
• Improving website functionality, security, and customer experience
• Complying with applicable legal, tax, and accounting obligations

4. Payment Information

Our website supports payment at the appointment, card payments processed through Stripe (Visa and Mastercard), and PayPal where configured.

Payment card details are entered directly into the secure payment interface of the applicable payment provider. Natura does not store complete credit or debit card numbers, CVV codes, or full payment credentials on its own servers.

We may receive and store limited payment-related information such as payment method, payment status, transaction reference, and amount paid in order to manage bookings and business records.

We do not claim PCI certification or any specific security certification beyond what is provided by our payment partners.

5. PayPal

Where PayPal is enabled on our website, payments may be processed by PayPal. PayPal processes payment information according to its own privacy policy and terms.

Natura does not receive or store your PayPal login credentials. We may receive payment confirmation details necessary to complete and record your booking.

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies for essential functionality, security, and user preferences.

We use a cookie consent banner that allows you to accept all cookies or limit storage to necessary cookies. Your choice is stored locally in your browser.

We may use cookies or similar storage related to website sessions, authentication for the admin area, and payment processing when you choose online payment methods.

We do not currently use Google Analytics or similar third-party analytics tools on this website. If this changes, we will update this Privacy Policy accordingly.

7. Data Sharing

We do not sell your personal information. We may share personal information only where reasonably necessary with:

• Payment service providers (such as Stripe and PayPal)
• Email and notification service providers (such as Resend)
• Hosting and infrastructure providers (such as Vercel)
• Database and backend service providers (such as Supabase)
• Professional advisers or authorities where required by law

8. Data Security

We implement reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, or alteration.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

• Booking and appointment management
• Customer service and communication
• Business, tax, and accounting records
• Resolving disputes and enforcing our agreements

10. Your Privacy Rights

Depending on applicable law, including the GDPR where relevant, you may have the right to:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion where legally permitted
• Request restriction of processing in certain circumstances
• Object to processing where applicable
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority

11. Third-Party Services

Our website relies on third-party services that may process personal information according to their own privacy policies. These may include payment providers, hosting providers, email services, and database infrastructure providers.

We encourage you to review the privacy policies of those third parties where relevant.

12. Children's Privacy

Our website and booking services are not intentionally directed at children. We do not knowingly collect personal information from children without appropriate consent where required by law.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will be published on this page with an updated “Last Updated” date.

Where required by law, we may provide additional notice of material changes.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us using the business contact details shown on this page.