PRIVACY POLICY
Last Updated: 24 January 2026
This Privacy Policy (“Policy”) describes how Xela Information Technology LLC, License No. 1003357, a company registered and operating in Dubai, United Arab Emirates (“we”, “us”, or “Company”), collects, uses, discloses, stores, and protects personal data when you access or use www.spa-massage.ae and any affiliated mobile or online services (collectively, the “Site”).
Your access to or use of the Site constitutes your acceptance of this Policy and the associated data practices described below. If you do not agree with any part of this Policy, please discontinue use of the Site.
This Policy is intended to comply with applicable UAE laws including Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL) and other applicable regulations.
1. Scope & Applicability
This Policy applies to all personal data collected or processed by the Company when you:
• Visit, browse, or interact with the Site;
• Create or manage an account on the Site;
• Make bookings or communicate with Service Providers via the Site;
• Otherwise provide personal data through forms, messages, or other interfaces.
“Personal data” means any information that identifies you or by which you may be identified.
2. Categories of Personal Data We Collect
We may collect the following categories of personal data:
2.1 Identity & Contact Data
• Full name
• Email address
• Phone number
• Billing and invoicing information
• Account username and password
2.2 Booking & Service Data
• Appointment details
• Service preferences
• Payment transaction data (only via third-party payment providers)
2.3 Technical & Usage Data
• IP address
• Device identifiers
• Browser type, operating system
• Page views, clicks, and browsing activity
2.4 Location Data
With your explicit consent, we may collect geolocation data to improve bookings or match services.
3. How We Collect Personal Data
We collect personal data in several ways:
-
Directly from you when you enter information on the Site;
-
Automatically through cookies and tracking technologies as you browse;
-
From third-party systems, such as payment service providers;
-
From Service Providers as necessary to deliver booking services.
4. Legal Bases for Processing (UAE PDPL)
We process personal data based on one or more of the following legal grounds:
a) Consent.
Where you have provided clear and informed consent for specific processing purposes.
b) Contractual necessity.
Where processing is necessary to perform our contractual obligations, such as booking facilitation.
c) Legitimate interests.
For purposes such as fraud prevention, platform improvement, analytics, and security.
d) Legal compliance.
To comply with our legal obligations under UAE law.
5. Purposes of Processing Personal Data
We use personal data for the following purposes:
• To operate, maintain, and improve the Site;
• To facilitate bookings between you and Service Providers;
• To verify your identity and process payments;
• To communicate with you regarding your account, bookings, or updates;
• To analyze usage trends and optimize user experience;
• To detect and prevent fraud or misuse of the Site.
6. Sharing, Disclosure & Third Parties
We may share your personal data with:
6.1 Service Providers
To complete bookings and related services, we share relevant personal data with the selected Service Provider you book through our Site.
6.2 Data Processors
Third-party vendors who support operations, payment processing, analytics, hosting, and customer support.
6.3 Legal Obligations
Government authorities, courts, or law enforcement when required by applicable law or legal process.
We do not sell your personal data to third parties.
7. International Data Transfers
Your personal data may be processed or stored outside the UAE where our service providers or partners operate. Where data is transferred internationally, we will take reasonable steps to ensure it is protected in a manner consistent with UAE PDPL requirements.
8. Data Retention
We retain personal data only for as long as necessary to:
• Fulfill the purpose for which it was collected;
• Comply with legal or regulatory requirements;
• Resolve disputes, enforce agreements, and maintain records.
Once data is no longer needed, we securely delete or anonymize it.
9. Cookies, Tracking & Similar Technologies
We use cookies and similar technologies such as web beacons, tags, and scripts to:
• Enable essential Site functionality;
• Analyse site usage, performance, and user trends;
• Personalize content and improve user experience.
You may disable cookies through your browser settings; however, this may affect Site functionality.
10. Your Rights (UAE PDPL)
Subject to applicable law, you have the right to:
a) Access. Request a copy of personal data we hold about you;
b) Rectification. Request correction of inaccurate personal data;
c) Deletion. Request erasure of personal data where permitted;
d) Withdraw Consent. Withdraw previously given consent to processing;
e) Object. Object to certain types of processing where permitted.
To exercise your rights, contact us at:
📧 support@spa-massage.ae
We may require verification of identity before processing your request, and we will respond within reasonable timeframes under the law.
11. Security of Personal Data
We implement reasonable administrative, technical, and organizational measures designed to protect personal data from unauthorized access, disclosure, alteration, or destruction.
However, no internet transmission or storage system is entirely secure and we cannot guarantee absolute protection of your data.
12. Children’s Privacy
The Site is not intended for use by individuals under the age of 18.
We do not knowingly collect or process personal data of children under this age. If you believe we have inadvertently collected data on a minor, please contact us so we can promptly delete it.
13. Links to Third-Party Websites
The Site may contain links to third-party websites or services that are not operated by us. We have no control over, and are not responsible for, the content or privacy practices of any external sites. When you leave our Site, we encourage you to review the privacy policies of every site you visit.
14. Changes to This Policy
We may update this Policy from time to time. All changes will be published on this page with an updated “Last Updated” date. Your continued use of the Site after changes have been posted constitutes acceptance of those changes.
15. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:
Xela Information Technology LLC
License No.: 1003357
Dubai, United Arab Emirates
Website: www.spa-massage.ae
Email: support@spa-massage.ae
