Privacy Policy

1. Information We Collect

We may collect the following types of personal information:

Personal Information

• Full name
• Contact number
• Email address
• Gender (where applicable)
• Date of birth (optional)
• Nationality (if required)

Booking Information

• Appointment date and time
• Selected treatments
• Preferred therapist (if requested)
• Special requests or preferences

Health Information

For your safety, we may ask you to disclose relevant health information such as:

• Pregnancy
• Allergies
• Medical conditions
• Recent surgeries
• Skin sensitivities
• Injuries

This information is collected solely to ensure treatments are provided safely and appropriately.

Payment Information

Payments are processed through secure third-party payment providers. Sayang Sayang Spa does not store your full credit or debit card details on our systems.

Website Information

When you visit our website, we may automatically collect:

• IP address
• Browser type
• Device information
• Operating system
• Website usage data
• Cookies and analytics information

2. How We Use Your Information

Your personal information may be used to:

• Process appointments and reservations.
• Confirm, modify, or cancel bookings.
• Provide requested spa treatments.
• Respond to enquiries.
• Process payments.
• Improve our services.
• Personalize your customer experience.
• Send booking reminders.
• Send promotional offers and newsletters (only where you have agreed to receive them).
• Comply with legal obligations.

3. Sharing Your Information

We respect your privacy and do not sell or rent your personal information.

We may share your information only with:

• Payment service providers.
• Online booking platform providers.
• Website hosting providers.
• IT service providers.
• Government authorities where required by law.
• Professional advisers where legally necessary.

All third-party providers are expected to protect your information appropriately.

4. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information against:

• Unauthorized access
• Loss
• Misuse
• Alteration
• Disclosure
• Destruction

While we take appropriate security measures, no online system can be guaranteed to be completely secure.

5. Data Retention

We retain your personal information only for as long as necessary to:

• Manage your appointments.
• Maintain customer records.
• Meet legal, accounting, and tax obligations.
• Resolve disputes.
• Enforce our agreements.

When personal information is no longer required, it will be securely deleted or anonymized where appropriate.

6. Cookies

Our website may use cookies to:

• Improve website performance.
• Remember user preferences.
• Analyse website traffic.
• Enhance the user experience.

You may disable cookies through your browser settings; however, some website features may not function properly.

7. Marketing Communications

With your consent, we may send:

• Promotional offers
• Special discounts
• New treatment announcements
• Holiday promotions
• Spa packages
• Event invitations

You may unsubscribe from marketing communications at any time by following the unsubscribe instructions in our emails or by contacting us directly.

8. Your Rights

Subject to applicable law, including the Malaysian Personal Data Protection Act 2010 (PDPA), you may have the right to:

• Access your personal information.
• Request correction of inaccurate or incomplete information.
• Withdraw your consent to the processing of your personal information (where applicable).
• Request that we stop using your personal information for direct marketing.
• Make enquiries regarding how your information is handled.

To exercise these rights, please contact us using the details below.

9. Third-Party Links

Our website may contain links to third-party websites such as social media platforms or online booking services.

We are not responsible for the privacy practices or content of these external websites. We encourage you to review their respective privacy policies before providing any personal information.

10. Children’s Privacy

Our services are intended for individuals aged 18 years and above.

If a guest under the age of 18 receives treatment, it must be with the consent and supervision of a parent or legal guardian where appropriate.

We do not knowingly collect personal information from children without the necessary consent.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, or legal requirements.

The latest version will always be published on our website and will take effect immediately upon publication.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us:

Sayang Sayang Spa
Langkawi, Kedah, Malaysia

Email: booking@sayangsayangspa.com
Phone / WhatsApp: +6013-7720 745

We are committed to protecting your privacy and handling your personal information responsibly in accordance with applicable laws, including the Personal Data Protection Act 2010 (PDPA) of Malaysia.