Customer Privacy Policy

1. IMPORTANT INFORMATION AND WHO WE ARE

1.1 PURPOSE OF THIS PRIVACY POLICY

Your privacy is important to Mandara Day Spa (“Mandara”, “we”, “us”, or “our”). This Privacy Policy explains how we collect and use personal information through this website, how we protect it, and your rights related to it. This website is operated by Mandara Day Spa, located in Sanur, Bali, Indonesia. Mandara Day Spa is part of the Mandara Spa and OneSpaWorld group.

1.2 CONTACT

If you have any questions about this Privacy Policy or how we handle your personal data, you may contact us through the form on our website or by email at dayspasanur@mandaraspa.com.

2. THE DATA WE COLLECT

When you submit an inquiry or subscribe to updates on our website, we may collect basic personal information such as your name, email address, phone number, and country or city of residence (if included in your message). We only collect the data you voluntarily provide, and no payment or health information is collected on this website.

3. HOW WE USE YOUR PERSONAL DATA

We use your data only to respond to your inquiries or booking requests, provide updates or promotional information about Mandara Day Spa (only if you choose to subscribe), and improve our website and customer communication. You may unsubscribe from marketing emails at any time by clicking the “unsubscribe” link in our messages or by contacting us directly.

4. DISCLOSURES OF YOUR PERSONAL DATA

We do not sell or rent your personal data. We may share it only with our affiliated companies within the Mandara Spa or OneSpaWorld group for operational purposes, and with trusted service providers who assist in website hosting or email delivery under strict confidentiality obligations.

5. DATA SECURITY

We take reasonable technical and organizational steps to protect your personal data from unauthorized access, loss, misuse, or alteration. However, no online system is completely secure, and we cannot guarantee absolute protection.

6. DATA RETENTION

We will retain your personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws.

7. YOUR RIGHTS

In accordance with Indonesian Personal Data Protection Law (Law No. 27 of 2022), you may request to access or correct your personal data, withdraw consent to receive marketing emails, or request deletion of your data from our records. To exercise these rights, please contact us at dayspasanur@mandaraspa.com.

8. CHANGES TO THIS PRIVACY POLICY

Mandara Day Spa may update this Privacy Policy from time to time. The latest version will always be available on this website.

9. GOVERNING LAW

This Privacy Policy is governed by the laws of the Republic of Indonesia.