Privacy policy

Who we are

Sontaya Massage & Spa is run by [BUSINESS NAME], Bangkok, Thailand. We are the data controller for the information you give us on this website, under Thailand's Personal Data Protection Act (PDPA).

What we collect

When you book: your name, the chat app and number or ID you want us to use, your email if you give it, the hotel or address and room number, the date and time, the massage you chose, and any notes you write (which may include health information such as injuries or pregnancy).

We also keep a one-way hash of your IP address to stop spam bookings. We never store the IP address itself.

Why we use it

Only to arrange and deliver your massage: to confirm the booking, send a therapist to the right place, and contact you about it. Health notes are used only so the therapist can adjust the massage safely. We don't use your data for advertising and we don't sell it.

Who sees it

Our staff who handle bookings and the therapist who visits you. Messages go through the service you chose (WhatsApp, LINE or WeChat), which handle data under their own policies. Our website and database are hosted in Thailand.

How long we keep it

We keep booking records for 12 months after the booking date, then delete them.

Your rights

You can ask to see, correct or delete your data, or withdraw consent, by contacting us (WhatsApp, LINE or WeChat) with your booking number. We reply within 30 days. You can also complain to Thailand's Personal Data Protection Committee.

Visit statistics and cookies

We count visits to improve the site: which pages are opened, which buttons and links are clicked and where on the page, how far people scroll, the device type, language, and the website that sent you. We don't use cookies for this and don't store your IP address; each visitor gets an anonymous code that changes every day. Nothing typed into forms is recorded. These statistics are kept for 13 months.

We may also use Google Analytics in cookieless mode, which sends Google anonymous page-view data without setting cookies.

If you choose Accept in the cookie banner, we also switch on Google Ads, TikTok and Microsoft Clarity. They set cookies to tell us which ads bring guests and how the site is used, and receive your IP address and browser details under their own privacy policies. If you choose Only necessary, none of them load. You can change your choice any time with Cookie settings at the bottom of every page.

When you book, we save which website or ad sent you (campaign name and ad click id) with the booking, so we know which advertising works. If you accepted ad cookies, we tell Google Ads and TikTok that a booking happened, without your name or contact details.