Privacy Policy

Last updated: 15 September 2026  |  Effective from: 15 September 2026

1. Who we are

This website, bluemoonspapaharganj.in ("Blue Moon Spa", "we", "us"), is operated from A-32, 2nd & 3rd Floor, Ganesh Nagar, Tilak Nagar, near Canara Bank, New Delhi 110018, India. We provide relaxation and wellness massage, steam and hydrotherapy services.

This policy explains how we handle personal information under the Information Technology Act, 2000 and the rules made under it, and the Digital Personal Data Protection Act, 2023, as applicable to us.

2. Information we collect

Category	Examples	Why we need it
Booking details	Name, mobile number, preferred date, time, treatment and number of guests	To reserve your room and confirm your slot
Health notes	Allergies, pregnancy, injuries, heat sensitivity, pressure preference	To adapt oils, pressure and heat so your session is safe
Visit record	Treatment taken, duration, therapist, date and amount paid	To honour packages, keep accounts, and remember your preferences next time
Communication	WhatsApp messages, call notes and emails about your booking	To answer questions and resolve any issue about a visit
Technical data	Browser and device type, pages viewed, approximate region	Collected only if website analytics is enabled, to see which pages are useful

We do not ask for your bank password, card PIN, CVV or any OTP over phone, WhatsApp or email. If someone claiming to be from Blue Moon Spa asks for these, it is a fraud — please report it to us on 85060 03389.

3. How we use it

• To take, confirm and reschedule your booking.
• To prepare the right room, therapist and treatment for you.
• To deliver the session safely, based on the health notes you share.
• To take payment and issue a receipt, and to track prepaid package sessions.
• To answer your questions and resolve complaints.
• To send occasional offers — only if you have asked for them. Reply STOP any time.

We rely on your consent, and on the necessity of processing to deliver the service you booked. We do not use guest data for automated decision-making or profiling.

4. Health information

Health notes you give us — allergies, pregnancy, injuries, conditions — are sensitive personal data and are treated accordingly. They are recorded only so your therapist can adapt the session safely, are seen only by the staff involved in your treatment, and are never used for marketing or shared outside the spa.

5. Guest confidentiality

We treat the fact of your visit as confidential. We do not confirm to any third party — including someone calling to ask — whether a named person has visited, booked, or is currently in the spa. Staff are instructed accordingly, and we do not photograph or record guests anywhere inside the treatment areas.

6. This website

This is a static website. The booking form does not post to a Blue Moon Spa database — when you submit it, your browser opens WhatsApp with the details pre-filled and you choose whether to send. If we later enable a hosted form service, this policy will be updated before that change takes effect.

We embed Google Maps so you can find us, and load fonts from Google Fonts. Google may set cookies and receive your IP address when those load, under Google's own privacy policy. We set no advertising or tracking cookies of our own.

7. Sharing and disclosure

We do not sell, rent or trade guest data. We share it only with:

• Our therapists and reception staff — the minimum needed to deliver your session.
• Payment providers and banks — to process a UPI or card payment.
• Our accountant and tax authorities — transaction records, as required by Indian law.
• Law enforcement — only where we receive a lawful, properly authorised request.

All data is stored and processed in India.

8. How long we keep data

Record	Retention
Enquiries that do not become a booking	3 months, then deleted
Booking and visit history	2 years from your last visit
Health notes	2 years from your last visit, or immediately on request
Invoices and payment records	8 years, as required by tax law
Prepaid package records	Validity period plus 1 year
Marketing contact list	Until you opt out

9. Security

• Paper booking registers are kept out of public view and locked when reception is unattended.
• Digital records sit on password-protected devices, accessible only to staff who need them.
• Staff are instructed on guest confidentiality as a condition of employment.
• We collect the minimum data needed and delete it when the retention period ends.

No method of storage is completely secure. If a breach occurs that is likely to affect you, we will inform you and the relevant authority as required by law.

10. Your rights and deletion

Subject to applicable law you may ask us to: tell you what data we hold about you; correct anything inaccurate; delete your details (except records we must keep by law, listed in section 8); stop sending you offers; or nominate someone to exercise these rights on your behalf.

To do any of these, call 85060 03389 or write to us at the address below. We respond within 30 days and may ask you to verify your identity first. If you are not satisfied, you may approach the Data Protection Board of India.

11. Children

Our services are for adults. We do not knowingly provide treatments to, or collect personal data from, anyone under 18.

12. Changes and contact

We may update this policy as our services or the law change; the "Last updated" date above always shows the current version.

Grievance Officer	The Manager, Blue Moon Spa
Address	A-32, 2nd & 3rd Floor, Ganesh Nagar, Tilak Nagar, Near Canara Bank, New Delhi 110018
Phone	85060 03389
Hours	Monday to Sunday, 10:00 AM – 9:00 PM IST

We acknowledge every grievance within 24 hours and aim to resolve it within 30 days.

---

This policy is provided for transparency and is not legal advice. Have the final text reviewed by a lawyer before publishing, and confirm that the retention periods and officer details match your actual practice.