Legal
Privacy Policy
01 Who We Are
This Privacy Policy applies to Global Russian Thai Spa ("we," "our," "us"), a professional massage and wellness centre located at Walk Inn, Calangute–Baga Road, Baga, Calangute, Goa 403516, India.
We operate the website globalrussianthaispa.com and accept appointment bookings via phone, WhatsApp, email, and in-person walk-in at our centre. This policy explains how we collect, use, store, and protect information that identifies or could identify you ("personal data").
By using our website or contacting us to book a service, you agree to the practices described in this policy. If you do not agree, please do not use our website or share personal information with us.
02 What We Collect
Depending on how you interact with us, we may collect the following types of personal data:
Information You Provide Directly
- Your name
- Phone number (including WhatsApp number)
- Email address (if provided)
- Your preferred massage therapy or appointment request
- Any health or physical conditions you choose to share with us for the purpose of customising your session
- Feedback, reviews, or messages you send us
Information Collected Automatically
- IP address and approximate geographic location
- Browser type, version, and operating system
- Pages visited, time spent on each page, and referring website
- Device type (mobile, desktop, tablet)
- Cookies and similar tracking technologies (see Section 06)
Note on health information: If you voluntarily share details about injuries, health conditions, or physical limitations to help us customise your session, we treat this information with heightened care. We do not use it for any purpose other than delivering your requested massage therapy.
03 How We Collect Data
We collect personal data through the following channels:
- Our website: When you fill out our contact form or navigate our pages
- WhatsApp: When you message us to book an appointment or enquire about services
- Phone calls: When you call us to speak with our team
- Email: When you send us an email enquiry
- In person: When you visit our centre and provide information at the reception
- Google Analytics & similar tools: Automated data about how visitors use our website
04 How We Use Your Data
We use the personal data we collect strictly for the following purposes:
Booking and Service Delivery
- To confirm and manage your appointment
- To contact you regarding your booking (timing, confirmation, reminders)
- To customise your massage session based on preferences or health information you share
- To respond to your queries or complaints
Business Operations
- To maintain records of services provided
- To improve our website and service quality
- To analyse how our website is used (in aggregate, anonymised form)
- To comply with applicable Indian laws and regulations
Marketing (with your consent only)
- To send you information about new therapies, offers, or updates via WhatsApp — only if you have opted in
- We will not send you unsolicited marketing messages
- You can unsubscribe at any time by replying "STOP" or by contacting us directly
We do not use your personal data for automated decision-making, profiling, or any purpose that materially affects your legal rights or wellbeing.
05 WhatsApp & Messaging
We use WhatsApp as a primary communication channel for appointment bookings and customer support. When you message us on WhatsApp:
- Your WhatsApp number and message content are visible to our staff who manage bookings
- We do not store WhatsApp conversations on our own servers — messages remain within WhatsApp's platform, subject to WhatsApp's own privacy policy
- We may note your name, phone number, and appointment preference in our internal booking records
- We do not share WhatsApp message content with third parties
WhatsApp is owned by Meta Platforms, Inc. By using WhatsApp to contact us, you are also subject to WhatsApp's Privacy Policy.
08 Data Storage & Security
Your personal data is stored on secure servers located in India or with internationally recognised cloud providers that meet appropriate data protection standards.
We implement reasonable technical and organisational security measures to protect your data from unauthorised access, loss, or disclosure. These include:
- HTTPS encryption on our website
- Access controls limiting which staff can view customer data
- Regular review of our data handling practices
- Secure deletion of data no longer required
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee absolute security.
09 Retention Period
We retain your personal data only for as long as necessary to fulfil the purposes described in this policy or as required by applicable Indian law.
- Booking records: Retained for up to 2 years from the date of service, for the purpose of customer relations and legal compliance
- Website analytics data: Retained in anonymised form for up to 26 months (Google Analytics default)
- Email and message correspondence: Retained for up to 12 months, then deleted unless an ongoing matter requires otherwise
- Marketing consent records: Retained until you withdraw consent, then deleted within 30 days
Upon expiry of the relevant retention period, we securely delete or anonymise your personal data.
10 Your Rights
Under applicable Indian data protection law and principles of fair data handling, you have the following rights regarding your personal data:
- Right to access: Request a copy of the personal data we hold about you
- Right to correction: Request that we correct any inaccurate or incomplete data
- Right to deletion: Request that we delete your personal data, subject to legal obligations that require us to retain certain records
- Right to withdraw consent: Withdraw marketing consent at any time without affecting the lawfulness of prior processing
- Right to object: Object to us processing your data for specific purposes
- Right to lodge a complaint: File a complaint with the relevant Indian data protection authority if you believe your rights have been violated
To exercise any of these rights, please contact us at info@globalrussianthaispa.com or call +91 70586 73245. We will respond within 30 days of receiving your request.
11 Children
Our website and services are intended for adults aged 18 and above. We do not knowingly collect personal data from individuals under the age of 18.
If you believe a minor has provided us with personal data without appropriate consent, please contact us immediately and we will take steps to delete that information.
12 Third-Party Links
Our website may contain links to third-party websites, including Google Maps, WhatsApp, and review platforms. These websites have their own privacy policies which we do not control.
We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policy of any third-party website you visit through links on our site.
13 Policy Changes
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Post the revised policy on our website
- Where appropriate, notify you directly via email or WhatsApp
Your continued use of our website or services after any changes to this policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically.
14 Contact Us
If you have questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact us through any of the following channels:
- Business name: Global Russian Thai Spa
- Address: Walk Inn, Calangute–Baga Road, Baga, Calangute, Goa 403516, India
- Phone / WhatsApp: +91 70586 73245
- Email: info@globalrussianthaispa.com
- Website: globalrussianthaispa.com
- Operating hours: Open 24 hours, 7 days a week
We take privacy queries seriously and aim to respond to all requests within 30 business days. For urgent matters, please call or WhatsApp us directly.