Privacy policy

Who we are

The controller of your data is SPA SAINT TROPEZ UNIPESSOAL LTDA, CNPJ 56.066.869/0001-93, Rua Indiana, 1350, Brooklin Paulista, São Paulo, Brazil. For any matter regarding personal data, write to spasainttropez@gmail.com.

What data we process

• When you visit the site: technical access data, such as IP address, date, time and pages visited, logged by the hosting company.
• When you book on WhatsApp: your name, your phone number and what you write in the conversation.
• During your visit: the data needed for payment and, if necessary, a check of a photo ID to confirm you are of age.

Why we use it

To book and provide your treatment, reply to your messages, keep the site secure and meet legal and tax obligations. We do not sell data or use it for advertising.

Intimate information

The choice of a treatment may reveal intimate information. That is why we ask only for what is needed to book, never share the content of conversations, never take screenshots and delete conversations periodically.

Who we share it with

Only with companies that keep the site and our service running: the website host (Netlify), WhatsApp (Meta) and Google Maps, when you click our address. Each handles data under its own policy.

Data outside Brazil

Some of these companies are based outside Brazil, mainly in the United States. This transfer follows the rules of the LGPD.

How long we keep it

Website access logs are kept for 6 months, as required by Brazil’s Internet Civil Framework. Booking conversations are kept only as long as needed for your visit. Tax data, for the period required by law.

Your rights

You may ask at any time, free of charge, for confirmation that we process your data, access to it, correction, deletion and withdrawal of consent. Just write to spasainttropez@gmail.com. We reply within 15 days.

Cookies

The site currently uses no cookies and stores nothing in your browser. If we ever start measuring visits, you will see a notice to accept or refuse, and nothing will be measured without your consent.

Age requirement

Our treatments are for adults over 18 only, and the site is not intended for minors.

Security

The site uses a secure connection (HTTPS), and access to booking conversations is restricted to the people who manage the schedule.

Changes to this policy

This policy may change. The version and date are shown at the top of the page.