Privacy policy

Data controller

  • Controller: Sukan Business Systems, S.L. (Ritual Thai Spa)
  • Tax ID (CIF): B-67289462
  • Registered office: C/ Casanova, 118, 1º B izq., 08036 Barcelona, Spain
  • Spa: Carrer de Còrsega, 281, 08008 Barcelona, Spain
  • Email: info@ritualthaispa.live
  • Phone: +34 93 771 49 09

What data we process and why

  • Purchase of gift cards and experiences: name, surname, email, phone, delivery or pick-up address, dedication and order details. We use them to manage the purchase, payment, delivery of the voucher, its redemption and any incidents, and to meet our tax and accounting obligations.
  • Enquiries by form, email, phone or WhatsApp: the data you provide, to reply to you and handle your request.
  • Bookings: bookings are managed through the Fresha platform. The data you provide there is processed by Fresha under its own privacy policy, and we use it to manage your appointment.
  • Marketing communications: only with your express consent, to send you news and offers. You can withdraw it at any time.
  • Browsing: technical and usage data of the website through cookies, as described in the Cookie Policy.

Legal basis

  • Performance of the purchase contract and handling of your requests.
  • Compliance with legal obligations, such as tax and accounting obligations.
  • Your consent, for marketing communications and non-essential cookies.
  • Our legitimate interest in keeping the website secure and preventing fraud.

Retention

We keep your data for as long as the relationship lasts and, afterwards, for the legally required periods (for example, six years for accounting records). Enquiry data is kept for as long as needed to handle them. Data processed on the basis of your consent is kept until you withdraw it.

Recipients

We do not sell or transfer your data to third parties for commercial purposes. We only share it with providers of necessary services, who act on our instructions and with the appropriate legal safeguards: payment gateway (Stripe), web hosting and email, booking platform (Fresha) and, where applicable, courier companies for delivering vouchers. We also share it with public authorities when required by law.

Some of these providers, as well as the analytics and advertising services described in the Cookie Policy (such as Google or Meta), may process data outside the European Economic Area. In such cases, transfers are based on European Commission adequacy decisions or standard contractual clauses.

Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, by writing to info@ritualthaispa.live and stating the right you wish to exercise.

If you believe your request has not been properly handled, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es).

Security

We apply technical and organisational measures to protect your data. Payments are processed through a secure gateway and Ritual Thai Spa does not store your full card details.