Privacy Policy – Salathai Spa

Last Updated: March 31, 2026

Effective Date: March 31, 2026

1. Introduction

Salathai Spa ("we," "us," or "our") is committed to protecting and respecting your privacy. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by us.

This policy applies to information collected through our website at salathai.co.il, our social media pages, advertising campaigns (including Meta/Facebook and Google Ads), online booking systems, and any other service we provide.

2. Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of the State of Israel, specifically:

The Protection of Privacy Law, 5741-1981 (as amended by Amendment No. 13, effective August 14, 2025)
The Privacy Protection Regulations (Data Security), 5777-2017
The Basic Law: Human Dignity and Freedom, 5752-1992

Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the competent courts in Tel Aviv-Jaffa, Israel.

3. Definitions

Personal Data — any information relating to an identified or identifiable individual, including name, phone number, email address, IP address, location data, and online identifiers.

Processing — any operation performed on Personal Data, including collection, recording, storage, retrieval, use, disclosure, transfer, deletion, or destruction.

Service — the Salathai Spa website, online booking system, advertising campaigns, and any related digital services.

Service Provider — any third-party company or individual engaged by us to facilitate or provide services on our behalf, including analytics, advertising, hosting, and payment processing.

You / Data Subject — the individual accessing or using the Service.

4. Information We Collect

4.1 Personal Data You Provide

When you interact with our services, you may voluntarily provide us with the following information:

Full name
Email address
Phone number
Physical address, city, or country
Appointment preferences and service requests
Any comments, messages, or feedback you submit

4.2 Data Collected Automatically

When you visit our website, we automatically collect certain technical information through cookies and similar technologies:

IP address and approximate geographic location
Browser type and version, operating system, and device type
Pages visited, time spent on pages, and navigation patterns
Referring website or advertising source
Language preferences

4.3 Data from Third Parties

We may receive limited information about you from third-party advertising platforms (such as Meta/Facebook and Google) when you interact with our advertisements, including ad interaction data and audience demographics.

5. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience and help us understand how our services are used.

You can manage or disable cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our website. For more information on how Google and Meta handle data, please refer to their respective privacy policies.

6. How We Use Your Personal Data

We process your personal data for the following purposes, each based on a lawful basis:

To provide and maintain our services, including scheduling appointments and processing bookings via our external booking system (EasyBizy)
To communicate with you regarding your appointments, inquiries, and customer support requests
To send you marketing communications about our services, promotions, and special offers (only with your consent, and you may opt out at any time)
To analyze website traffic and usage patterns to improve our website and services

To measure the effectiveness of our advertising campaigns
To comply with legal obligations under Israeli law
To protect the rights, property, or safety of our business, our customers, and others

7. Legal Basis for Processing

Under the Israeli Protection of Privacy Law (as amended), we process your personal data based on one or more of the following legal grounds:

Consent: Where you have given clear and informed consent for a specific processing purpose (e.g., marketing communications)
Contractual necessity: Where processing is necessary for the performance of a contract with you (e.g., booking a treatment)
Legitimate interest: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights
Legal obligation: Where processing is required to comply with Israeli law

8. Sharing Your Personal Data

We do not sell your personal data. We may share your information in the following limited circumstances:

With Service Providers: We engage third-party providers (such as Google, Meta, our hosting provider, and our booking system provider EasyBizy) who process data on our behalf, subject to contractual data protection obligations
For legal compliance: We may disclose data if required by law, regulation, legal process, or enforceable governmental request
Business transfers: In the event of a merger, acquisition, or sale of business assets, your data may be transferred as part of that transaction, subject to equivalent privacy protections
With your explicit consent: We may share data for other purposes only with your informed and specific consent

9. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, unless a longer retention period is required or permitted by law. Specifically:

Appointment and booking records: Retained for up to 7 years, as required by Israeli tax and business record-keeping regulations
Marketing contact information: Retained until you withdraw consent or opt out of communications
Website analytics data: Retained per the default retention periods of Google Analytics (up to 26 months) and Meta Pixel (up to 180 days)
Customer inquiries and correspondence: Retained for up to 3 years after the last interaction

When personal data is no longer needed, we will securely delete or anonymize it.

10. Your Rights as a Data Subject

Under the Israeli Protection of Privacy Law (Amendment No. 13), you have the following rights regarding your personal data.

To exercise any of these rights, please contact us at salathai777@gmail.com. We will respond to your request within 30 days, as required by law.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

SSL/TLS encryption for data transmitted through our website
Access controls limiting data access to authorized personnel only
Regular review of our data collection, storage, and processing practices
Secure hosting infrastructure with reputable service providers

While we strive to protect your personal data, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

12. International Data Transfers

Some of our Service Providers (such as Google and Meta) may process your data outside of Israel. In such cases, we ensure that appropriate safeguards are in place, including transfers to countries recognized as providing an adequate level of data protection under Israeli law, or reliance on contractual clauses that ensure equivalent protections. Israel recognizes the adequacy of data protection in the EU/EEA and countries approved under the GDPR framework.

13. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us immediately.

14. Links to Third-Party Websites

Our website and services may contain links to third-party websites and services (including our booking platform, social media profiles, and payment processors). We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policy of every third-party website you visit.

15. Direct Marketing

We may send you promotional messages about our services, offers, and events via email, SMS, or other electronic communication channels, but only with your prior consent. In accordance with Israeli law:

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails, replying "STOP" to SMS messages, or contacting us directly
We will process your opt-out request promptly and without delay
Opting out of marketing does not affect service-related communications (such as appointment confirmations)

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will:

Post the updated policy on our website with a revised "Last Updated" date
Notify you through reasonable means if the changes significantly affect how we process your data

We encourage you to review this policy periodically. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us:

Salathai Spa

Email: salathai777@gmail.com

Phone: 054-997-6622

Address: 2 Ben Zvi Road, Tel Aviv-Yafo

You may also file a complaint with the Israeli Privacy Protection Authority (PPA):

Privacy Protection Authority — 66 Kanfei Nesharim Street, Jerusalem, Israel

This document was prepared for informational purposes and does not constitute legal advice.