Privacy Policy

1. Data Controller

This website is operated by:

Business name: Bunchu Thai Spa Massage

Legal form: Sole trader 

Registered address: 10 Rue André Duchscher L-1424 Luxembourg 

Email: info@bunchu.lu

Phone: 691 606 321

RCS Luxembourg: A46749

VAT number: LU37287857

 

For the purposes of the General Data Protection Regulation (EU) 2016/679 (“GDPR”), we act as the data controller of your personal data.

​

2. Personal Data We Collect

We may collect and process the following personal data:

​

Booking Information

• Full name

• Email address

• Phone number

• Appointment details (date, time, selected treatment)

​

Communication Data

Messages sent via contact forms, email, or phone

​

Technical Data

• IP address

• Browser type

• Website usage data

• Cookies

 

3. How We Collect Your Data

We collect your personal data when you:

• Make an online booking via our website

• Contact us directly (email, phone, form)

• Browse or interact with our website

 

4. Purpose of Processing

Your personal data is used to:

• Manage and confirm appointments

• Contact you regarding your booking

• Provide our servicesImprove our website and customer experience

• Comply with legal obligations

​

​

5. Legal Basis

We process your data based on:

• Performance of a contract (appointments/services)

• Legitimate interests (business management)

• Consent (cookies and optional features)

• Legal obligations (e.g. accounting requirements)

 

6. Sharing of Personal Data

We do not sell your personal data.

​

We may share your data with:

• Website hosting and IT service providers

• Booking system providers

• Legal or regulatory authorities when required

​

Wix Booking Services

We use Wix to manage online bookings.

Your personal data (such as name, email, and phone number) may be processed and stored by Wix.com Ltd. to provide booking functionality.

Wix acts as a data processor on our behalf and processes your data in accordance with applicable data protection laws.

More information: https://www.wix.com/about/privacy

 

7. Data Retention

We retain personal data only as long as necessary:

• Booking data: 12–24 months

• Communication data: up to 12 months

• Legal/accounting data: as required by law

​

After this period, data will be securely deleted or anonymised.

 

8. Your Rights

Under GDPR, you have the right to:

• Access your personal data

• Request correctionRequest deletion

• Restrict processing

• Object to processing

• Request data portability

• Withdraw consent at any time

​

To exercise your rights, contact: info@bunchu.lu

You also have the right to lodge a complaint with the National Data Protection Commission (CNPD):

15, Boulevard du Jazz, L-4370 Belvaux

Website: https://cnpd.public.lu

 

9. Cookies

Our website uses cookies to ensure proper functionality and improve user experience.

​

Where required, we request your consent before placing non-essential cookies.

You can manage your preferences through the cookie banner on our website.

 

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Secure hosting

• Restricted access

• Industry-standard protections

​

11. International Data Transfers

Personal data may be processed outside the European Economic Area (EEA) by Wix and its partners.

​

In such cases, appropriate safeguards are applied in accordance with GDPR (e.g. Standard Contractual Clauses).

 

12. Mandatory

InformationProviding personal data (such as email and phone number) is necessary to make a booking.

If you do not provide this information, we may not be able to offer our services.

 

13. Updates to This Policy

We may update this Privacy Policy from time to time.

The latest version will always be available on this page.