Privacy Policy

This Privacy Policy explains how SUNBABY Spa & Massage (“SUNBABY Spa”, “we”, “us” or “our”) collects, uses and protects personal information when you visit this website, contact us, or book and receive a treatment at our spa in Da Nang, Vietnam.

1. Who we are

SUNBABY Spa & Massage is a day spa offering massage, hair washing, eyelash, nail, earwax, skincare and sauna services. Our premises and correspondence address is:

• 222 Trần Bạch Đằng, Bắc Mỹ Phú, Ngũ Hành Sơn, Đà Nẵng 55000, Vietnam
• WhatsApp (our main contact channel): WhatsApp +84 966 286 255
• Telephone: +84 382 335 588
• Facebook: SunBaby Spa & Massage

We are the controller of the personal information described in this policy.

2. Information we collect

We only collect information that we need in order to serve you. Depending on how you interact with us, this may include:

Information you give us directly

• Contact details — your name, phone number, and the messaging account you contact us from. Most guests reach us on WhatsApp, which is our main contact channel; we also take enquiries by phone and through LINE, KakaoTalk and Facebook Messenger.
• Booking details — the treatment you request, your preferred date and time, therapist preference, and the number of guests.
• Health and comfort information — if you choose to tell us about injuries, allergies, skin sensitivities, pregnancy, recent surgery or medical conditions so that we can adapt a treatment safely. You are never obliged to share this, but withholding it may mean we cannot deliver a treatment safely.
• Feedback — comments, complaints or reviews you send to us.

Information collected automatically

• Technical data — your IP address, browser type, device type, referring page and the pages you view on this website. This is standard web-server information used to keep the site secure and working.
• Embedded content — our contact section embeds a Google Maps frame. When it loads, Google may receive your IP address and set cookies according to its own privacy policy.

Information we receive from payment providers

When you pay by card or NFC mobile payment, the transaction is handled by our payment terminal provider and your bank. We receive confirmation that a payment succeeded and a partial card reference on the receipt. We do not store your full card number, PIN or CVV.

3. How we use your information

• To take, confirm, change and honour your booking.
• To contact you about your appointment, including reminders and changes.
• To deliver your treatment safely and to record any preferences or sensitivities you have told us about.
• To take payment and issue receipts.
• To answer questions you send us by phone, messaging app or social media.
• To send you offers and news about our services — only where you have asked us to.
• To keep records required by Vietnamese tax and accounting rules.
• To protect the security of our premises, our staff and our guests.

We do not sell your personal information, and we do not share it for third-party advertising.

4. Legal basis for processing

Where the law requires us to identify a legal basis, we rely on:

• Performance of a contract — to provide the treatment you booked.
• Consent — for marketing messages and for any health information you volunteer. You can withdraw consent at any time.
• Legal obligation — to keep financial and tax records.
• Legitimate interests — to run and secure our business, prevent fraud, and improve our services, balanced against your rights.

5. Sharing your information

We share personal information only where it is necessary, and only with:

• Our therapists and reception staff, so far as they need it to serve you.
• Payment processors and banks, to complete card and mobile payments.
• Our accountant and, where required, the Vietnamese tax authorities.
• Professional advisers, or a regulator or court, where we are legally required to disclose.

Some of the services we use (messaging apps, Google Maps) are operated outside Vietnam, which means information you send through them may be processed abroad under those providers’ own safeguards.

6. Messaging apps and social media

You can reach us through WhatsApp, LINE, KakaoTalk and Facebook. When you do, your message is also processed by that platform under its privacy policy, which we do not control. We use these conversations only to answer you and manage your booking. Please do not send payment card details, identity documents or sensitive medical records through a messaging app.

7. Cookies and website analytics

This website does not set advertising or tracking cookies of its own. Cookies may still be set by embedded third-party content, specifically the Google Maps frame in our contact section, and by Google Fonts when your browser requests our typeface. You can block or delete cookies in your browser settings; the site will continue to work, though the map may not display.

8. How long we keep your information

• Booking and contact records — kept while you remain a customer and for a reasonable period afterwards so we can honour follow-up requests.
• Payment and accounting records — kept for the period required by Vietnamese tax law.
• Marketing consents — kept until you unsubscribe or ask us to stop.
• Messaging conversations — kept for as long as the thread remains open on the platform, unless you ask us to delete it.

When information is no longer needed, we delete it or render it anonymous.

9. How we protect your information

We limit access to customer information to staff who need it, keep paper records in secured areas, use password-protected devices and accounts, and require our payment provider to handle card data on our behalf. No method of transmission or storage is completely secure, but we take reasonable steps to guard against loss, misuse and unauthorised access.

10. Your rights

Subject to local law, you may ask us to:

• Confirm what personal information we hold about you and give you a copy.
• Correct information that is wrong or out of date.
• Delete information we no longer need to keep.
• Stop sending you marketing messages.
• Restrict or object to certain uses of your information.

To exercise any of these rights, contact us using the details in section 13. We may ask you to verify your identity before we act, and we will respond within a reasonable time.

11. Children’s privacy

Our services are suitable for children when they are accompanied by a parent or guardian, but this website is not directed at children and we do not knowingly collect information from a child online. Bookings for a minor are made and consented to by the accompanying adult. If you believe a child has given us information directly, please contact us and we will delete it.

12. Changes to this policy

We may update this policy as our services or the law change. The revised version will be posted on this page with a new “last updated” date. Where a change is significant, we will make that clear at the spa or in our communications with you.

13. How to contact us