top of page

Privacy Policy for Alchemy Thai Massage

Alchemy Thai Massage (“we,” “our,” or “us”) is committed to protecting your privacy and ensuring that your personal information is handled securely and responsibly. This Privacy Policy outlines how we collect, use, and protect your data in compliance with the General Data Protection Regulation (GDPR) and Belgian privacy laws.

1. Data Controller

Alchemy Thai Massage is the data controller responsible for processing your personal information. If you have any questions regarding this Privacy Policy, please contact us:

Alchemy Thai Massage
Address: nekkerspoelstraat 54/001, 2800 Mechelen
Email: alchemy.thaimassage@gmail.com
Phone: 0472 19 63 37

2. Information We Collect

We may collect and process the following categories of personal data:

  • Identity Information: Name, surname, and date of birth.

  • Contact Information: Email address, phone number, and physical address.

  • Booking Information: Details of your massage appointments, preferences, and communication related to services.

  • Payment Information: Payment card details, billing information, and transaction history.

  • Website Usage Information: IP address, browser type, and cookies to enhance your user experience.

3. How We Collect Your Information

We collect personal data directly from you when you:

  • Book an appointment online, by phone, or in person.

  • Fill out forms on our website or at our studio.

  • Interact with us through email, phone, or social media.

  • Visit our website (via cookies and analytics tools).

4. Purpose of Data Collection

We use your personal data for the following purposes:

  • Service Delivery: To manage bookings, provide massage services, and address inquiries.

  • Payment Processing: To process transactions securely.

  • Customer Support: To communicate with you about your appointments or respond to your questions.

  • Marketing Communications: To send you promotional offers and updates (only with your explicit consent).

  • Legal Compliance: To comply with legal obligations, such as record-keeping and accounting requirements.

5. Legal Basis for Processing

Under GDPR, we process your data based on the following legal grounds:

  • Contractual Necessity: To fulfill our obligations related to your booking and services.

  • Legitimate Interest: To improve our services, prevent fraud, and ensure the security of our operations.

  • Consent: For sending marketing communications (you may withdraw consent at any time).

  • Legal Obligation: To comply with Belgian and EU legal requirements.

6. Data Sharing

We do not sell, rent, or trade your personal data. However, we may share your information with trusted third parties, including:

  • Payment Processors: To securely handle your payments.

  • Service Providers: For website hosting, IT support, or appointment management tools.

  • Legal Authorities: If required by law or to protect our legal rights.

All third parties are contractually bound to process your data securely and only for the purposes we specify.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

  • Booking and service records: Retained for [insert duration, e.g., 3 years] for operational purposes.

  • Financial records: Retained for [insert duration, e.g., 7 years] to comply with legal and tax obligations.

  • Marketing data: Retained until you withdraw your consent.

8. Your Rights

Under GDPR and Belgian privacy laws, you have the following rights:

  • Access: Request a copy of your personal data.

  • Rectification: Correct inaccurate or incomplete data.

  • Erasure: Request deletion of your data (subject to legal obligations).

  • Restriction: Limit the processing of your data in certain circumstances.

  • Portability: Request your data in a structured, commonly used format.

  • Objection: Object to processing based on legitimate interests or for direct marketing.

  • Withdraw Consent: Withdraw your consent for marketing communications at any time.

To exercise these rights, contact us using the details provided in Section 1. We will respond within one month, as required by law.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. These include:

  • SSL encryption for secure website transactions.

  • Restricted access to personal data for authorized personnel only.

  • Regular security audits and updates to our systems.

10. Cookies and Tracking

Our website uses cookies to enhance your browsing experience. For details about how we use cookies and how you can manage them, please refer to our Cookie Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Any updates will be posted on this page, and significant changes will be communicated to you.

12. Complaints

If you believe we have violated your privacy rights, you can file a complaint with the Belgian Data Protection Authority:

Gegevensbeschermingsautoriteit (GBA)
Drukpersstraat 35, 1000 Brussels, Belgium
Website: www.gegevensbeschermingsautoriteit.be

​

Thank you for trusting Alchemy Thai Massage. We are committed to protecting your privacy and ensuring a safe and relaxing experience for all our clients.

bottom of page