1. Introduction

At Shiatsu Privé, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website and services, in compliance with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. Data Controller

Shiatsu Privé is the data controller responsible for your personal information. For any privacy-related inquiries, you can contact us at:

3. Information We Collect

3.1 Personal Information

When you book our services or express interest in hosting, we collect:

• Contact Information: Name, email address, phone number, physical address
• Health Information: Foot conditions, shoe size, pronation type, inflammation status, plantar fasciitis, birth date, dietary requirements
• Service Preferences: Requested treatments, service locations, preferred dates and times
• Communication: Additional requests, concerns, and correspondence with us

3.2 Technical Information

We automatically collect certain technical data:

• IP address and browser information
• Website usage patterns and navigation data
• Device and screen resolution information
• Cookies and similar tracking technologies

3.3 Newsletter Subscriptions

If you subscribe to our newsletter, we collect your email address and track engagement with our communications.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: For marketing communications and non-essential cookies
• Contract Performance: To provide our Shiatsu services and fulfill bookings
• Legitimate Interest: For website analytics, security, and business operations
• Legal Obligation: For tax, accounting, and regulatory compliance

5. How We Use Your Information

We use your personal information to:

• Process and fulfill your service bookings
• Communicate with you about appointments and services
• Customize treatments based on your health profile
• Send newsletters and promotional materials (with your consent)
• Improve our website and services
• Comply with legal obligations
• Protect against fraud and security threats

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Service Providers: Email services, hosting providers, payment processors
• Professional Partners: Certified Shiatsu practitioners and nail artists (when coordinating services)
• Legal Requirements: When required by law or to protect our rights

All third parties are contractually bound to protect your data and use it only for specified purposes.

7. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure adequate protection through appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

8. Data Retention

We retain your personal data for the following periods:

• Booking Data: 7 years for tax and legal compliance
• Health Information: 7 years or as required by healthcare regulations
• Marketing Data: Until you unsubscribe or withdraw consent
• Website Analytics: 26 months maximum

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent for marketing or cookies

To exercise these rights, contact us at privacy@shiatsu-prive.com. We will respond within 30 days.

10. Cookies and Tracking

We use essential cookies for website functionality and, with your consent, analytics cookies to improve our services. You can manage cookie preferences through your browser settings or our cookie consent tool.

11. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including encryption, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure.

12. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal information from children under 16 without parental consent.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or website notice. The "Last Updated" date indicates when the policy was last revised.

14. Contact and Complaints

For privacy questions or complaints, contact us at privacy@shiatsu-prive.com. You also have the right to lodge a complaint with your local data protection authority.