Privacy Policy | DE MILAN SPA

At De Milan Spa we take your privacy seriously. This privacy policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable laws. By using our services, you agree to the collection and processing of your personal data as described in this policy.

1. What data do we collect? We collect the following personal data:* **Personal identification data:** such as your name, address, phone number, email address, date of birth, and, where applicable, gender.* **Payment data:** such as credit card information or other payment methods, but only to the extent necessary for processing payments.* **Health information:** if applicable, such as medical data necessary for treatments (e.g., allergies or certain conditions).* **Communication data:** such as messages and feedback you share with us.**

2. Purposes of data processing**We collect and use your data for the following purposes:* To provide our spa services and process appointments or reservations.* To provide information about our services and offers, provided you have given consent.* To handle payments and invoicing.* To improve our customer service and experience.* To comply with legal obligations, such as tax and health regulations.**

3. How do we protect your data?**We take the protection of your data seriously and implement technical and organizational measures to secure it against unauthorized access, loss, or damage. This includes encryption, secure servers, and access control.**

4. Sharing of data**We will not share your personal data with third parties, except in the following cases:* When necessary for the provision of our services, such as payment processing or when working with external partners (e.g., product suppliers).* When we are legally obligated to share data, for example, in the case of a court order.**

5. Your rights**As a data subject, you have several rights regarding your personal data, including:* **Right of access:** You have the right to access the personal data we hold about you.* **Right to correction:** You can request the correction of any inaccurate data.* **Right to erasure:** You can request that your data be deleted, except when we are legally required to retain it.* **Right to object:** You can object to certain types of data processing.* **Right to data portability:** You can request your data in a structured, commonly used, and machine-readable format.For any questions or to exercise your rights, you can contact us using the details below.**

6. Data retention period**We will retain your data for as long as necessary for the purpose for which it was collected or as long as required by law. For example, health data may be retained for longer due to legal obligations.**

7. Changes to this Privacy Policy**We may update this privacy policy from time to time. We recommend that you check this page regularly for the latest version. We will inform you of significant changes.**

8. Contact details**If you have any questions about this privacy policy or the processing of your personal data, you can contact us at:De Milan Spa Email: komangwini43103@gmail.comPhone: +62 85954040228