Privacy Policy

At Himalayan Beauty & Spa("we", "us", "our"), your trust matters as much as your comfort. This policy explains what personal data we collect, why we collect it, how we keep it safe, and the rights you have over it. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Finnish data protection law.

Who is responsible for your data

The data controller is Himalayan Beauty & Spa, located at Veturitie 24, A65, 3rd Floor, 00520 Helsinki, Finland. For any privacy question or request, you can reach us at himalayanbeautyspa.helsinki@gmail.com or by phone at +358 45 787 05946.

What we collect

We only collect what we need to care for you well. Depending on how you interact with us, this may include:

• Contact details — your name, email address and phone number, provided through our booking or contact forms.
• Booking details — the treatment or package you choose and your preferred date and time.
• Health and wellness notes — any information you share so we can treat you safely, such as pregnancy, allergies, injuries or relevant medical conditions. This is special-category data and is handled with particular care.
• Messages — the content of enquiries you send us by form, email, phone or messaging apps.
• Technical data — basic, anonymised information your browser shares when visiting our website (see Cookies below).

Why we use it

We use your personal data to:

• Confirm, manage and prepare for your appointments.
• Adapt treatments to your health needs and keep you safe during your visit.
• Respond to your enquiries and provide customer care.
• Meet our legal, accounting and tax obligations.

Our lawful bases are the performance of our service to you (contract), your consent (particularly for health information), our legitimate interest in running and improving the spa, and compliance with legal obligations.

How long we keep it

We keep your data only as long as necessary for the purposes above. Booking and contact records are generally retained for the duration of our relationship and for a reasonable period afterwards; records required for accounting and tax purposes are kept for the statutory period required under Finnish law. Health notes are kept no longer than needed to provide safe, continuous care, and are deleted on request where we are not legally required to retain them.

Who we share it with

We do not sell your personal data. We share it only with trusted service providers who help us operate — for example booking, communication or payment tools — and only to the extent they need it to perform their service, under appropriate confidentiality and data-processing safeguards. We may disclose data where required by law.

Cookies

Our website uses a minimal set of cookies and similar technologies necessary for the site to function and to understand, in aggregate, how it is used. We do not use cookies to build advertising profiles. You can control or block cookies through your browser settings; disabling some cookies may affect how the site works.

How we protect your data

We apply appropriate technical and organisational measures to keep your information secure, and we limit access to those who genuinely need it to serve you. Health information in particular is treated as confidential.

Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Ask us to delete your data where there is no legal reason to keep it.
• Restrict or object to certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at himalayanbeautyspa.helsinki@gmail.com. We will respond within the timeframe required by law. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).

Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision.