Privacy Policy — LuckySpaCare
Last updated: September 2025
Welcome to LuckySpaCare. Your privacy matters to us. This Privacy Policy explains what information we collect, why we collect it, how we use it, and the choices you have about your information when you use our website https://luckyspacare.com/ and our booking services.
If anything below is unclear or you want us to change or remove information about you, contact us at privacy@luckyspacare.com. (Replace this email with your real contact email before publishing.)
1. Information we collect
1.1 Information you give us
When you interact with our site and services (for example, creating a booking, contacting us, signing up for newsletters), we may collect:
-
Contact information: name, email address, phone number.
-
Booking details: service selected, staff or location chosen, date/time, special requests, appointment notes.
-
Payment information: when you pay through the site we collect billing details required to process payments (we do not store full card numbers on our servers — see “Payments” below).
-
Profile and communication data: any messages you send us or notes you add to your profile.
1.2 Location data
If you use features that request your device location (for example, “Use current location” to help find the nearest branch), we may collect latitude and longitude and, if you allow, a derived address. Location data is collected only when you explicitly grant permission in your browser or device. You may deny location access at any time.
1.3 Technical and usage information
We automatically collect technical data about your device and how you use the site, such as:
-
IP address, device type and operating system,
-
Browser type and settings,
-
Pages and features you visit and how you interact with them,
-
Log data, error reports, and performance metrics.
1.4 Cookies and similar technologies
We use cookies and similar tracking technologies to operate the site, remember preferences, and analyze usage. See our Cookie Policy (link) for details and how to manage cookies in your browser.
2. How we use your information
We use your data for the following purposes:
-
To provide and manage bookings, appointments, and related customer support.
-
To process payments, invoices, and refunds.
-
To communicate important information about your bookings, changes, confirmations, or reminders.
-
To personalize your experience (recommended services, saved preferences).
-
For security, fraud prevention, and to maintain the integrity of the site.
-
For analytics, performance improvement, and to understand how users interact with the site.
-
To send marketing messages only if you have opted in; you may opt out at any time.
We rely on lawful reasons such as your consent, contract performance (fulfilling bookings), and our legitimate business interests (improving services and preventing fraud).
3. Sharing and third parties
We may share personal data with:
-
Service providers who perform functions on our behalf (e.g., payment processors, booking platform providers, hosting providers, email or SMS services, analytics providers). These providers are contractually required to keep your data secure and only use it for the purposes we authorize.
-
Payment processors to charge and reconcile payments. We do not store full credit card numbers on our servers; card data is processed by secure third-party payment providers.
-
Legal or regulatory authorities if required by law, or to protect our rights, property, or safety, or that of others.
-
With your explicit consent, we may share data with marketing partners.
We will never sell your personal data.
4. Data retention
We keep your personal data only as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. Booking records and transaction data are typically retained for tax, accounting, and legal purposes for a period required by law (commonly 3–7 years depending on your jurisdiction). You can request deletion of your personal data subject to our legal obligations to retain certain records.
5. Your rights and choices
Depending on your jurisdiction, you may have the right to:
-
Access the personal data we hold about you.
-
Correct or update inaccurate or incomplete data.
-
Request deletion of your personal data (subject to legal and contractual restrictions).
-
Object to or restrict certain processing (for example, direct marketing).
-
Request a copy of your data in a portable format.
-
Withdraw consent where we rely on it.
To exercise these rights, contact privacy@luckyspacare.com. We may request proof of identity before fulfilling requests. We will respond in accordance with applicable law.
6. Security
We take reasonable measures to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include access controls, encryption where appropriate, and regular security reviews. No internet transmission or storage is completely secure — if you suspect your account has been compromised contact us immediately.
7. Payments and card data
When you pay on our site we use trusted third-party payment processors (for example, Stripe, PayPal, or local payment gateways). These providers handle card data and are responsible for PCI compliance. We receive payment confirmations and limited billing details necessary to fulfill your booking, but we do not store full card numbers on our systems.
8. Children
Our services are not directed at children under 16. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete it.
9. International transfers
Your data may be processed or stored in countries outside your own. When we transfer personal data internationally we use appropriate safeguards (standard contractual clauses, vendor contracts) as required by law.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes we will post a prominent notice on our website and update the “Last updated” date. Continued use of the site after changes constitutes acceptance of the updated policy.
11. Contact us
Questions, requests, or complaints? Reach out to:
Privacy Officer
LuckySpaCare
Email: privacy@luckyspacare.com
Address: [insert postal address if applicable]
If you are in the EU or UK and remain unsatisfied after contacting us, you may also lodge a complaint with your local data protection authority.
12. Legal notices (optional inserts)
-
GDPR (EU residents): We are committed to complying with the EU General Data Protection Regulation. If you are an EU resident, you have the rights listed above and may contact us to exercise them.
-
CCPA (California residents): California residents have certain rights regarding access to and deletion of personal information. To submit a request, contact privacy@luckyspacare.com and include “CCPA Request” in the subject line.
Final notes
-
Replace the placeholder contact details and address with your official contact information before publishing.
-
If you use third-party services such as Google Maps, Stripe, PayPal, Mailchimp, or analytics tools, consider adding a short paragraph naming those services and linking to their privacy notices.
-
If you want, I can also generate a short Cookie Policy and a Consent banner text to comply with EU cookie rules.
Do you want me to:
-
Insert your business address and email into this policy and produce a ready-to-publish HTML page, or
-
Create a separate Cookie Policy and a short GDPR consent banner text?