Privacy Policy & Data Protection
Mapalad Massage & Spa ("Mapalad Spa", "we", "us", or "our") respects your privacy and is fully committed to protecting your personal data in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations (IRR), and other issuances of the National Privacy Commission (NPC).
1. Personal Information We Collect
To provide you with a safe, relaxing, and personalized sanctuary experience, we collect the following personal and sensitive information:
- Basic Personal Details: Full name, mobile number, email address, and home address for booking and billing purposes.
- Sensitive Personal Information (Health Profile): Existing medical conditions, recent surgeries, pregnancies, allergies, skin sensitivities, and preferred massage pressure. This is strictly collected to ensure your physical safety and well-being during our spa treatments.
- Transaction Data: Payment method details, appointment history, and service preferences..
2. Purpose of Data Collection
Your data is exclusively collected and processed for the following legitimate purposes:
- To process, confirm, and manage your spa appointments and reservations.
- To customize our massage and wellness therapies according to your specific health needs and safety requirements.
- To communicate with you regarding your bookings, including reminders and post-treatment care.
- To notify you of exclusive promo packages, sanctuary highlights, and updates (only if you have explicitly opted in to our marketing communications).
- To comply with government and legal obligations.
3. Data Security and Protection
Mapalad Spa implements strict organizational, physical, and technical security measures to protect your data against unauthorized access, accidental loss, or unlawful processing.
- Restricted Access: Only authorized spa management and your designated massage therapists have access to your health profile, strictly on a need-to-know basis.
- Secure Storage: Physical health intake forms are kept in locked cabinets, while digital records are secured within our encrypted booking database and Content Management System.
4. Data Sharing and Disclosure
We do not sell, trade, or rent your personal data to third parties. We will only share your information if:
- Required by law, court order, or a valid legal process.
- Necessary to protect the life and health of the guest (e.g., during medical emergencies).
- Facilitated through trusted third-party service providers (e.g., secure payment gateways) who are bound by strict non-disclosure and confidentiality agreements.
5. Data Retention and Disposal
We will retain your personal information only for as long as you maintain an active client profile with us, or as required for legal and tax purposes (typically one to five years from your last visit). Once the retention period expires, physical records will be securely shredded, and digital data will be permanently and securely deleted from our systems.
6. Your Rights as a Data Subject
Under RA 10173, you hold the following data privacy rights:
- Right to be Informed: To know how your personal data is collected and processed.
- Right to Access: To request a copy of the personal information we hold about you.
- Right to Rectify: To update or correct any inaccurate details in your guest profile.
- Right to Object & Erase: To withdraw your consent, or request the suspension, blocking, or permanent removal of your personal data from our systems.
- Right to Damages & File a Complaint: To seek indemnification for damages sustained due to inaccurate, incomplete, or unlawfully processed data.
7. Contact Our Data Protection Officer (DPO)
If you have any questions, requests to exercise your rights, or concerns regarding your privacy, please reach out to our designated Data Protection Officer at:
Email: sales@mapaladmassagespacorp.com
Phone No. 09214369764
Address: 2nd Floor Panganiban Building, P. Torres St. Brgy 6, Lipa City, Batangas
