Privacy Policy

1. Introduction

This Privacy Policy explains how SpaPeep ("SpaPeep", "we", "us", "our") collects, uses, shares and protects information when you visit spapeep.com (the "Site"), submit an enquiry, leave a review, or list a business with us.

SpaPeep is an independent online directory of spa, massage and wellness businesses in India. We are not affiliated with, endorsed by, or officially connected to the businesses listed on the Site unless expressly stated.

By using the Site you agree to this Policy. If you do not agree, please do not use the Site.

2. Scope of this Policy

This Policy applies to information collected through the Site and its associated forms and dashboards. It does not apply to:

• Information you give directly to a spa or wellness business after we connect you — that is governed by their own policies;
• Third-party websites we link to, which have their own privacy practices;
• Information handled by advertising or analytics vendors under their own policies, described in sections 7 and 8.

3. Information We Collect

a. Information you give us

• Enquiry details — your name, mobile number and the area or service you are interested in, submitted through our enquiry form.
• Review content — the name you choose to display, your star rating and the text of any review you post.
• Support messages — your name, contact details and the content of any message sent through our support or contact forms.
• Business listing information — for business owners: business name, address, contact numbers, email, opening hours, pricing, services, photographs and descriptions.

b. Information collected automatically

• Usage data — pages viewed, listings opened, and interactions such as clicking a "Call" or "WhatsApp" button. These are recorded so we can report performance to the listed business.
• Device and connection data — browser type, device type, approximate location derived from your IP address, referring page and the date and time of your visit.
• Campaign data — UTM parameters in the link you arrived through, so we can understand which channels bring visitors.
• Cookies and similar technologies — described in section 6.

c. Information from public sources

Many directory listings are compiled from publicly available sources, including business websites, public business listings and publicly posted contact details. We do not collect sensitive personal data in this way.

d. What we do not collect

We do not ask for or store payment card details, bank details, government identity numbers, health records, or any special category of sensitive personal data. Payments for treatments are made by you directly to the business.

4. How We Use Your Information

• To pass your enquiry to relevant spa or wellness businesses so they can respond to you;
• To display reviews and ratings on listing pages;
• To operate, maintain, secure and improve the Site;
• To provide listed businesses with aggregate performance information about their listing;
• To detect, investigate and prevent fraud, abuse, spam and misuse of the Site;
• To show advertising, including personalised advertising where permitted — see section 7;
• To respond to your questions, complaints and removal requests;
• To comply with applicable law and respond to lawful requests from authorities.

5. Consent and Legal Basis

Where Indian law requires consent, we rely on the consent you give when you voluntarily submit an enquiry, post a review, or continue using the Site after being informed about cookies. Where you are located in a region with additional data protection rules, we may also rely on our legitimate interest in operating and securing a directory service, and on compliance with legal obligations.

You may withdraw your consent at any time using the contact details in section 18. Withdrawal does not affect processing already carried out.

6. Cookies and Similar Technologies

Cookies are small files stored on your device. We and our partners use them for the following purposes:

• Strictly necessary — to keep the Site working, remember basic preferences, and protect against abuse. Local storage is also used to remember, for example, whether you have already been shown an enquiry prompt.
• Analytics — to understand how the Site is used so we can improve it.
• Advertising — to serve advertisements and, where applicable, to make them more relevant to you.

Most browsers let you block or delete cookies through their settings. Blocking cookies may affect how parts of the Site work. You can also manage advertising cookies using the controls described in section 7.

8. Analytics

We use Google Analytics and similar measurement tools to understand how visitors use the Site. These tools may set cookies and collect information such as pages visited, time on page, device type and approximate location. This information is used in aggregate to improve the Site.

You can prevent Google Analytics from collecting your data by installing the Google Analytics Opt-out Browser Add-on.

9. How We Share Information

We do not sell your personal information. We share it only as follows:

• With listed businesses — when you submit an enquiry, the details you provide (name, mobile number, area and message) are shared with one or more relevant businesses so they can respond. This is the purpose of the enquiry form and is the whole reason it exists.
• With service providers — hosting, database, email delivery, analytics and advertising providers who process data on our behalf. Our Site is hosted on Google Firebase infrastructure.
• For legal reasons — where required by law, court order, or a lawful request from a government authority, or to protect the rights, safety or property of SpaPeep, our users or the public.
• In a business transfer — if SpaPeep is involved in a merger, acquisition or sale of assets, information may be transferred as part of that transaction.

Once your enquiry is shared with a business, that business becomes independently responsible for how it uses your information. We ask partners to use enquiry details only to respond to you, but we do not control their systems.

10. Data Retention

• Enquiries — retained while needed to service the enquiry and for our records, and deleted on request.
• Reviews — retained while the listing is active, unless you ask us to remove your review.
• Listing information — retained while the listing is published, and removed when a business asks us to delist.
• Usage and analytics data — retained in aggregate for as long as it is useful for reporting and Site improvement.

We may retain limited information for longer where required to comply with law, resolve disputes, or enforce our agreements.

11. Your Rights

Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you may:

• Ask what personal information we hold about you;
• Ask us to correct information that is inaccurate or incomplete;
• Ask us to delete your personal information, including an enquiry or a review you submitted;
• Withdraw a consent you previously gave;
• Object to or restrict certain processing;
• Raise a grievance with our Grievance Officer (section 17).

To exercise any of these, email us using the details in section 18. We may need to verify your identity before acting. We aim to respond within 30 days.

13. Security

We use reasonable technical and organisational measures to protect information, including encrypted connections (HTTPS), access controls on administrative tools, and hosting on managed Google Firebase infrastructure. However, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

14. Children's Privacy

The Site is intended for adults. It is not directed at children under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

15. Third-Party Links and Services

The Site links to third-party websites, maps, messaging services and telephone numbers. We do not control those services and are not responsible for their content or privacy practices. Please review their policies before providing information to them.

16. International Transfers

Our hosting, analytics and advertising providers may store and process information on servers located outside India. Where that happens, we rely on those providers' contractual and technical safeguards for such transfers.

18. Changes to this Policy and Contact

We may update this Policy from time to time. The "Last updated" date at the top shows when it was last revised. Material changes will be highlighted on the Site. Continuing to use the Site after a change means you accept the updated Policy.

Questions, requests or complaints about this Policy:

Read our Terms of Service →