Address
Sco 46, 1st Floor, Sector 7, Panchkula
Legal
Privacy Policy
What we collect when you book with Ayura, why we collect it, who sees it, and the choices you have. Written to be read, not skimmed past.
The short version
- We collect what we need to run your appointment: name, phone, email, what you booked, and any health cautions you tell us about.
- Health notes are shared only with the people looking after you — your therapist, reception, and a manager.
- We never see or store your full card number. Card and UPI payments go through a payment provider.
- We don't sell your data. You can ask us to correct it or delete it, and you can opt out of promotional messages at any time.
01Who we are
This policy is issued by Ayura Healing & Wellness, operated by [legal entity name, e.g. Ayura Wellness Pvt. Ltd. / proprietor name], at SCO 46, Sector 7, Panchkula, Haryana (“Ayura”, “we”, “us”). We decide why and how your personal information is used, which makes us the “data fiduciary” under India's Digital Personal Data Protection Act, 2023.
“You” means anyone who books, visits, or contacts us — including a guest who is booked by someone else.
02What we collect
| Type | What it includes |
|---|---|
| Booking details | Full name, mobile number, email, number of guests, chosen service, date and time, add-ons, preferred therapist, occasion notes, whether it is your first visit, and how you heard about us. |
| Couple bookings | The name of the second guest, as provided by the person who booked. |
| Health cautions | Allergies, injuries, pregnancy, medical conditions and other cautions you choose to tell us. See section 4. |
| Visit history | Past bookings, treatments received, therapist, room, extra time, cancellations, no-shows, package balances, and preferences such as pressure or oils. |
| Payment records | Amount, payment mode (cash, UPI, card, advance), invoice number, discount applied, and a transaction reference from the payment provider. Not your card number. |
| Messages | What you send us by phone, WhatsApp, email or the website contact form. |
| Website data | Basic technical information such as device type, browser, and pages visited. See section 12. |
Optional details — date of birth, anniversary, gender — are collected only if you offer them, and we only ask for gender where it affects who can safely or comfortably perform a treatment.
03How we use it
- To run your appointment: reserving a room or foot station, assigning a therapist, timing each stage of your session, and preparing your bill.
- To confirm and remind: booking confirmations, reminders, and notices if we need to reschedule or you run late.
- To keep you safe: so your therapist can adjust pressure, oils and technique to your health cautions.
- To take payment and keep records: invoices, refunds, advances, and the accounting and tax records we are legally required to maintain.
- To look after returning guests: remembering preferences, package balances and loyalty points.
- To improve the spa: understanding busy hours, which services are popular, and how long sessions actually run. We use summaries for this, not your personal details.
- To protect the business: preventing fraud, handling disputes, and keeping an audit trail of changes to bookings, prices and discounts.
We rely on your consent (given when you book or tick a box) and, where the law allows, on the need to perform the service you asked for and to meet legal obligations. We will not use your information for a new, unrelated purpose without asking you first.
04Health information
Health details are the most sensitive thing we hold, so we treat them more carefully than the rest.
- You decide what to tell us. Sharing a caution is optional, but it helps us treat you safely.
- It is visible only to the therapist assigned to you, reception staff managing your visit, and a manager. Cleaning staff and other therapists do not see it.
- It is used only to deliver and adjust your treatment. We do not use it for marketing and we do not share it outside the spa, except where a medical emergency or the law requires it.
- You can ask us to correct or remove it at any time.
Our therapists are trained in massage and spa treatments. They are not doctors, and nothing we say during a visit is medical advice. If you have a medical condition, check with your doctor before booking.
05Payments
Cash payments are recorded at the front desk. Card, UPI and online payments are handled by [payment provider, e.g. Razorpay / PhonePe / bank POS]. Your card number, CVV, UPI PIN and bank login details are entered with them, not with us, and we never see or store them. We receive a confirmation that the payment succeeded, the amount, and a reference number.
07Messages and marketing
We send service messages — confirmations, reminders, reschedule or cancellation notices, and payment receipts — by SMS, WhatsApp or email. These are part of your booking.
We send promotional messages — offers, new treatments, package reminders, birthday or anniversary greetings — only if you have agreed. You can stop them at any time by replying STOP, using the unsubscribe link, or telling reception. Opting out of promotions does not affect your service messages.
08How long we keep it
| Information | How long |
|---|---|
| Invoices and payment records | For the period required by Indian tax and accounting law, [confirm with your accountant]. |
| Guest profile and visit history | While you remain an active guest, and for [e.g. 3 years] after your last visit, then deleted or anonymised. |
| Health cautions | Kept on your profile so you don't have to repeat them, and removed when you ask or when your profile is deleted. |
| Marketing preferences | Until you withdraw consent. |
| Website technical data | Short-term, for security and performance. |
Some records, such as invoices, must be kept even if you ask for deletion. In that case we keep only what the law requires and remove the rest.
09How we protect it
- Staff sign in with their own accounts, and each role sees only what it needs — a therapist sees their assigned bookings, cleaning staff see rooms awaiting cleaning, and only managers see guest history and financial reports.
- Important actions, such as price changes, discounts, refunds and early completion of a session, are recorded in an audit log with who did it and when.
- Data is transmitted over encrypted connections and stored on [hosting provider / region] with regular backups.
- We give staff guidance on handling guest information and remove access when someone leaves.
No system is perfectly secure. If a breach affecting your personal information occurs, we will notify you and the relevant authority as the law requires.
10Your rights
Under the Digital Personal Data Protection Act, 2023 you may:
- Ask what we hold about you and how it is used.
- Ask us to correct information that is wrong or out of date.
- Ask us to delete your information, subject to the records we must legally keep.
- Withdraw your consent at any time. This does not undo what we did while consent was in place, and we may be unable to continue a booking that depends on that information.
- Nominate someone to exercise these rights on your behalf if you die or become unable to.
- Make a complaint to us first (see section 14), and to the Data Protection Board of India if you are not satisfied.
To make a request, email us or tell reception. We may ask you to confirm your identity first, and we aim to respond within [e.g. 15 working days].
11Children
Our services are for adults. Guests under 18 may be treated only where a parent or legal guardian has given consent and stays on the premises, as set out in our Terms and Conditions. We do not knowingly collect information from a child through the website without a guardian's consent. If you believe we have, contact us and we will remove it.
13Changes to this policy
We may update this policy as our services or the law change. The effective date at the top shows when it was last revised. If a change is significant, we will tell you by email or on the website before it takes effect.
14Contact and grievances
Grievance Officer
[Name and designation]
Ayura Healing & Wellness, SCO 46, Sector 7, Panchkula, Haryana
Email: info@ayurahealing.com · Phone: +91 8284097753
Open daily, 10:00 — 21:00. We acknowledge complaints promptly and aim to resolve them within [e.g. 30 days].