top of page

Privacy Policy

PDPA Compliance Policy
Effective Date: 26 April 2025

ONBEACH Spa values your privacy and is fully committed to protecting your personal data in accordance with the Thailand Personal Data Protection Act B.E. 2562 (2019) (“PDPA”). This policy outlines how we collect, use, disclose, and protect your personal information when you engage with our spa services, both online and offline.

1. Scope of Policy

This policy applies to all customers, guests, vendors, and website users of ONBEACH Spa, including those who visit our physical location, book appointments, or interact with us through www.onbeachspa.com.

2. Types of Personal Data We Collect

We may collect the following categories of personal data, either directly from you or through our service systems:

  • Identification Data: Name, ID/passport number, date of birth

  • Contact Information: Phone number, email address, mailing address

  • Appointment Records: Service bookings, visit history, therapist preferences

  • Health Information: Relevant medical disclosures for treatment safety (e.g., allergies, pregnancy, injuries)

  • Transaction Data: Payment records, receipts, promotions used

  • Digital Data: IP address, website usage behavior (via cookies), device information

3. Purpose of Data Collection

We only collect and process your personal data for specific and lawful purposes, including but not limited to:

  • Providing and customizing spa and massage treatments

  • Processing bookings, cancellations, and rescheduling

  • Customer service and follow-ups

  • Sending promotional offers, newsletters, and wellness updates (with consent)

  • Internal record keeping, service improvement, and legal compliance

4. Consent and Data Rights

We respect your rights under the PDPA. You may:

  • Access your personal data

  • Correct or update inaccurate data

  • Withdraw consent at any time

  • Request deletion of your data (where legally permissible)

  • Object to direct marketing

You can exercise these rights by contacting us via the details provided below. Please note that withdrawing consent may affect our ability to provide certain services.

5. Disclosure of Personal Data

ONBEACH Spa may share your personal data with:

  • Our staff and trained therapists (as necessary to perform services)

  • Authorized third-party service providers (e.g., booking systems, payment processors)

  • Government authorities or regulators, only if legally required

We will never sell or rent your personal data.

6. Retention of Personal Data

We retain your data only for as long as necessary to fulfill the purposes outlined above, or as required by applicable laws (e.g., spa service records or tax documentation).

7. Data Security Measures

We implement strict physical, technical, and administrative safeguards to ensure your personal data is protected from unauthorized access, loss, or misuse. This includes:

  • Secure servers and encrypted connections

  • Access control and staff training

  • Regular system monitoring and audits

8. Data of Minors

ONBEACH Spa does not knowingly collect personal data from individuals under the age of 20 without parental consent. If you are a parent or guardian and believe your child has provided us with data, please contact us for removal.

9. Use of Cookies

Our website may use cookies to enhance your browsing experience. You can manage or disable cookies in your browser settings. For more details, see our [Cookie Policy].

10. Contact Information

For any questions about this policy or to exercise your data protection rights, please contact:

ONBEACH Spa – Spa Manager
Email: contact@onbeachspa.com
Phone: +66922699640
Address: Onbeach Massage & Spa, 54/8 Bangla Road, Patong, Kathu, Phuket, Thailand 83150

We may update this policy from time to time to comply with legal requirements or to improve clarity. Please check back regularly for any changes.

Last Updated: 26 April 2025

bottom of page