Privacy Policy

1. Introduction & Scope

Spa In NCR ("Spa In NCR", "we", "us" or "our") provides spa, massage and wellness services in Delhi NCR, including Aerocity, Mahipalpur, Delhi, Noida, Greater Noida, Gurgaon and Dwarka, at our outlets and at hotels on request. Our registered contact address is G-12, Worldmark 2, Aerocity, IGI Airport Road, New Delhi – 110037.

This Privacy Policy applies to www.spainncr.com (the "Website"), and to personal information we receive when you contact us by phone, WhatsApp, Telegram or email, book a service, visit one of our outlets, or apply for a job with us. By using the Website or sharing your information with us, you agree to the practices described here. If you do not agree, please do not use the Website or submit your information.

We handle personal information in accordance with applicable Indian law, including the Information Technology Act, 2000 and the rules made under it, and the Digital Personal Data Protection Act, 2023, as they apply to us from time to time.

2. Information We Collect

Information you give us

We collect the information you choose to provide when you use our forms or contact us directly:

• Contact details: your name, mobile or WhatsApp number and email address.
• Booking details: the service or package you want, your preferred date and time, and your city or area.
• Hotel visit details: if you request a service at a hotel, the hotel name and the room number or arrival instructions needed to coordinate the visit.
• Messages: anything you send us by WhatsApp, Telegram, email or phone, including feedback and enquiries.

Health and wellness details (optional)

To deliver a massage or spa treatment safely, our team may ask about allergies, injuries, pregnancy or other health conditions. Sharing this information is always optional. If you choose to share it, we treat it as sensitive and use it only to tailor your service safely.

Information collected automatically

When you visit the Website, our systems and the third-party tools described in Section 6 may automatically receive technical information such as your IP address, browser and device type, pages viewed, the page that referred you, the date and time of your visit, and your approximate location derived from your IP address.

Payments

The Website does not process payments and does not collect card numbers. Services are paid for directly at the time of service using the methods we accept (cash, UPI, or debit or credit card). We may keep a record of the transaction for accounting and legal purposes.

Outlet safety

Some outlets use CCTV for the safety and security of guests and team members. Footage is accessed only by authorised personnel.

3. How We Use Your Information

We use personal information for the following purposes:

• To respond to your enquiries, confirm bookings and coordinate your appointment or hotel visit.
• To deliver and personalise your service, including keeping you safe during treatments.
• To contact you about your booking, such as confirmations, changes, delays or follow-up.
• To maintain the safety and security of our guests, team and outlets, and to prevent fraud and misuse.
• To understand how the Website is used and to improve our pages, content and services.
• To send offers or updates, but only where you have agreed or the law permits. You can opt out at any time.
• To meet our legal, tax, accounting and regulatory obligations.

We process your personal information based on your consent (for example, when you submit a form or message us) and for legitimate uses permitted by law, such as complying with legal obligations and protecting safety. You may withdraw your consent at any time as described in Section 8.

4. Who We Share Information With

We do not sell your personal information. We share it only in the limited ways below.

Our team

Your name, contact details and booking details are shared only with the coordinators and therapists who need them to confirm and deliver your service. Hotel and room details are shared only with the team member assigned to your visit.

Service providers

We use trusted providers to run the Website and communicate with you:

Legal and safety reasons

We may disclose information where required by law, court order or a lawful request from a government authority, or where necessary to protect the rights, safety or property of our guests, team or Spa In NCR.

Business changes

If our business is reorganised, merged or transferred, personal information may be transferred as part of that change, subject to this policy.

5. Data Security & Confidentiality

Discretion is central to our service. We follow reasonable security practices to protect personal information against loss, misuse and unauthorised access, including:

• Serving the Website over an encrypted HTTPS connection, so form submissions are encrypted in transit.
• Limiting access to personal information to authorised team members who need it for their work.
• Expecting our team to keep guest identity, bookings and personal details strictly confidential.
• Choosing service providers that apply their own security safeguards.

No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security. If you suspect your information has been misused, please contact us immediately at info@spainncr.com.

6. Cookies & Tracking Technologies

Cookies are small files stored on your device that help websites remember information about your visit. Here is how they apply to the Website:

• Essential use: The Website works without logging in, and our own code does not set cookies to make pages function.
• Measurement and marketing: We use Google Tag Manager to load tags that help us understand how visitors use the Website and how well our pages and campaigns perform. Depending on how these tags are configured, they may set cookies or similar identifiers and collect information such as pages viewed, clicks and approximate location.
• Third-party content: Fonts, code libraries and images loaded from other providers (see Section 4) receive your IP address and browser information when your browser requests them.

Managing cookies

You can block or delete cookies through your browser settings, and use your browser's private mode or tracking-protection features. Blocking some cookies will not stop the Website from working. You can also use the opt-out tools offered by the relevant providers.

7. How Long We Keep Information

We keep personal information only for as long as needed for the purposes in this policy, including providing your service, handling questions or complaints, and meeting legal, tax and accounting requirements. Job application details are kept for the recruitment process and for a reasonable period afterwards in case a suitable role opens, unless you ask us to delete them. When information is no longer needed, we delete or anonymise it.

8. Your Rights & Choices

Subject to applicable law, you have the right to:

• Access: ask for a summary of the personal information we hold about you and how we use it.
• Correction: ask us to correct or update information that is inaccurate or incomplete.
• Erasure: ask us to delete your information, except where we must keep it by law.
• Withdraw consent: withdraw your consent at any time. This will not affect how we used your information before you withdrew it.
• Opt out of marketing: tell us to stop promotional messages at any time.
• Grievance redressal: raise a concern with our Grievance Officer (see Section 13).
• Nominate: nominate another person to exercise these rights on your behalf if you are unable to.

To make a request, email info@spainncr.com with the subject "Privacy Request", from the email address or phone number you used with us. We may need to verify your identity before acting on the request, and we will respond within a reasonable time. If you are not satisfied with our response, you may approach the Data Protection Board of India or another competent authority as provided under applicable law.

9. Job Applicants

If you apply for a job with us through the Website, WhatsApp, phone or in person, we collect:

• Your name, phone number, email, age, city or preferred location, the position you are applying for, and your experience.
• During verification and onboarding: a valid government photo ID and, for foreign nationals, your passport, Indian employment visa or work permit, and relevant certifications.

We use this information to assess your application, confirm your identity, age and right to work, onboard you and communicate with you. It is shared only with the HR and management members who need it, and with authorities where the law requires it (for example, for work permits).

Stay safe: share identity documents only during the verification step with our HR team, and never with anyone you have not confirmed represents us. You can confirm by calling our official number, +91 8377094710.

10. Children's Privacy

Our services and job openings are for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, please contact us and we will delete it.

11. International Transfers & Third-Party Links

Some of the providers listed in Section 4, such as Formspree and Google, may process information on servers outside India. We use providers that apply their own safeguards, but their handling of data is also governed by their own privacy policies.

The Website links to third-party services such as WhatsApp, Telegram, Facebook and Instagram. We do not control these services and are not responsible for their privacy practices, so please read their policies before sharing information with them.

12. Changes to This Policy

We may update this policy from time to time to reflect changes in our services or the law. The "Last updated" date at the top of this page shows when it was last revised. If we make material changes, we will make that clear on the Website. Continuing to use the Website after an update means you accept the revised policy.

13. Contact Us & Grievance Officer

For questions about this policy, to exercise your rights, or to raise a privacy concern, contact our Grievance Officer. We aim to resolve grievances within one month of receiving them.