Cloud Spa Privacy Policy

Last updated: August 28, 2026

This Privacy Policy describes how Cloud Spa ("we", "us", or "our") collects, uses, and protects the personal information of users of the Cloud Spa mobile application and related services (collectively, the "Service"). By using the Service, you agree to the practices described in this policy.

1. Information We Collect

Account information: name, email address, phone number, password (stored securely as a hashed value), and preferred language.
Profile information: for service providers (merchants), business name, business number, GST/HST number, professional credentials, and business address.
Booking information: massage service selections, appointment dates and times, and booking history.
Location information: approximate location used to find nearby service providers when you use the search feature. We do not continuously track your location.
Payment information: we do not store full credit card details. Payments are processed by third-party providers (such as Stripe) under their own privacy policies.
Device information: device push notification tokens used to deliver notifications.
Health-related information: you may voluntarily provide information relevant to massage services (such as health conditions or preferences) to ensure safe service.

2. How We Use Your Information

To provide, operate, and maintain the Service, including processing bookings and sending confirmations.
To connect you with service providers and enable them to manage their schedules.
To send you service notifications, reminders, and invoices.
To generate tax-compliant receipts for insurance claim purposes.
To improve our Service, prevent fraud, and ensure security.
To comply with applicable laws and regulations.

3. How We Share Your Information

With service providers: when you make a booking, the relevant service provider receives your name, contact details, and booking information.
With payment processors: payment transactions are handled by trusted third-party providers.
With email/SMS providers: to deliver notifications you have opted into.
As required by law: when disclosure is required by law, regulation, or legal process.

4. Data Retention

We retain personal information only for as long as necessary to provide the Service, fulfill tax and legal obligations, and resolve disputes. You may request deletion of your account and associated data at any time.

5. Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal information, and to withdraw consent. To exercise these rights, contact us using the details below.

6. Security

We use appropriate technical and organizational measures to protect your information, including encryption in transit and secure storage of sensitive data.

7. Children's Privacy

The Service is not intended for children under 13, and we do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page.

9. Contact Us

If you have any questions about this Privacy Policy or your personal information, please contact us at:

service@cloud-spa.com