Privacy Policy

Last updated: January 31, 2026

1. Introduction

Vanessa Bali Massage (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website vanessabalimassage.com and use our massage services.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Full name
• Email address
• Phone number (for WhatsApp communication)
• Physical address (if provided)
• Date of birth (if provided)
• Health information relevant to massage treatments

2.2 Booking Information

• Service preferences
• Appointment dates and times
• Special requests or requirements
• Payment information (processed securely)

2.3 Technical Information

• IP address
• Browser type and version
• Device information
• Cookies and similar tracking technologies
• Pages visited and time spent on our website

3. How We Use Your Information

We use your information for the following purposes:

• To process and confirm your bookings
• To communicate with you about appointments
• To provide personalized massage services
• To send appointment reminders via WhatsApp
• To respond to your inquiries and requests
• To improve our services and website functionality
• To send promotional communications (with your consent)
• To comply with legal obligations

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your information based on:

• Contractual Necessity: To fulfill our service agreement with you
• Legitimate Interest: To improve our services and communicate with clients
• Consent: When you explicitly consent to specific processing activities
• Legal Obligation: To comply with applicable laws and regulations

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Third-party services that help us operate our business (WhatsApp API, payment processors, booking systems)
• Healthcare Providers: With your explicit consent, for coordinated care
• Legal Authorities: When required by law or to protect our rights

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include:

• SSL encryption for data transmission
• Secure server infrastructure
• Regular security audits and updates
• Employee training on data protection
• Access controls and authentication systems

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Transfer your data to another service
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Revoke consent at any time

8. Cookies and Tracking

We use cookies to enhance your website experience. Cookies are small text files stored on your device. We use:

• Essential Cookies: Required for basic website functionality
• Analytics Cookies: To understand how visitors use our site
• Marketing Cookies: To personalize content and advertisements

9. Data Retention

We retain your personal information only as long as necessary for the purposes outlined in this policy, or as required by law. Typically:

• Booking records: 2 years after your last appointment
• Communication records: 1 year
• Website analytics: 26 months
• Financial records: 7 years (as required by tax law)

10. International Data Transfers

Your personal information may be transferred to and processed in countries other than Indonesia. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses, to protect your data in accordance with GDPR requirements.

11. Children’s Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a minor, we will take steps to delete it immediately.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on our website and updating the “Last updated” date. Significant changes will be communicated via email or WhatsApp.

13. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

14. Complaints

If you believe we have violated your privacy rights, you have the right to lodge a complaint with the relevant data protection authority. In Indonesia, you may contact the Ministry of Communication and Information Technology.