Privacy Policy
Last updated: 20 July 2026
Spaholics Home Wellness ("Spaholics", "we", "us", or "our") operates www.spaholicsuae.com and provides in-home massage and wellness services in the United Arab Emirates. This Privacy Policy explains how we collect, use, store, and protect your personal data when you browse our website, create an account, book a session, or pay online.
We process personal data in line with applicable UAE laws, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), and good practice aligned with GDPR principles where relevant to our online services and marketing tools.
1. Who we are
Controller: Spaholics Home Wellness, Dubai, United Arab Emirates.
Contact for privacy requests: contact@spaholicsuae.com
2. Information we collect
- Identity & contact: name, email, phone number, and account credentials if you register.
- Booking details: service type, date, time, address / community, landmarks, and special requests needed to deliver an in-home session.
- Payment data: we do not store full card numbers. Payments are processed by Stripe and/or Tabby. We may receive payment status, transaction references, amount, and limited billing metadata needed to confirm your booking.
- Technical data: IP address, device/browser type, pages visited, and approximate location derived from IP (when cookies or analytics are enabled).
- Marketing & cookies: if you consent, tools such as Google Ads and Meta Pixel may collect usage and advertising identifiers. See Section 7.
3. How we use your information
- To take bookings, assign therapists, and deliver in-home services
- To process payments via Stripe or Tabby and send confirmations
- To manage your account, membership/subscription enquiries, and customer support
- To improve our website, prevent fraud, and maintain security
- With your consent, to measure advertising performance and remarketing
- To meet legal, accounting, and regulatory obligations in the UAE
4. Legal bases
We process personal data where necessary to:
- Perform a contract (booking and payment)
- Comply with legal obligations
- Pursue legitimate interests (secure operations, service improvement) balanced against your rights
- Obtain consent (non-essential cookies / marketing pixels)
5. Payment providers (Stripe & Tabby)
Online payments are handled by independent payment providers. When you pay by card, Apple Pay, or similar methods, Stripe processes your payment data under their privacy terms. When you choose Pay later with Tabby, Tabby processes eligibility and installment data under their privacy terms. We only receive what is needed to confirm payment and fulfill your booking.
- Stripe: stripe.com/privacy
- Tabby: tabby.ai privacy
6. Sharing your information
We may share data with:
- Therapists and operations staff solely to deliver your booked session
- Payment processors (Stripe, Tabby)
- Infrastructure and communication providers (e.g. hosting, email delivery)
- Analytics/advertising partners only if you consent to marketing cookies
- Authorities when required by UAE law
We do not sell your personal data.
7. Cookies and similar technologies
We use essential cookies to run the site (security, session, preferences). With your consent, we also use marketing/analytics cookies and pixels (including Google Ads and Meta). You can accept or decline non-essential cookies via our cookie banner and change your choice later from the footer link "Cookie preferences".
See also our Terms of Service for website use rules.
8. International transfers
Some providers (for example payment or hosting platforms) may process data outside the UAE. Where that happens, we take reasonable steps to ensure appropriate safeguards consistent with applicable law.
9. Retention
We keep booking and payment records for as long as needed to deliver services, handle disputes, and meet legal/accounting requirements, then delete or anonymise them when no longer required.
10. Your rights
Subject to UAE PDPL and applicable exceptions, you may request to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion or restriction in certain cases
- Withdraw consent for marketing cookies at any time
- Object to certain processing where applicable
Email contact@spaholicsuae.com to exercise these rights. We may need to verify your identity before responding.
11. Children
Our services are intended for adults (18+). We do not knowingly collect personal data from children. If you believe a minor has provided data, contact us and we will delete it.
12. Security
We use administrative and technical measures appropriate to the sensitivity of the data. No method of transmission or storage is completely secure; please use strong passwords for your account.
13. Changes
We may update this policy from time to time. The "Last updated" date at the top will change when we do. Continued use of the site after updates constitutes awareness of the revised policy.
14. Contact
Privacy questions: contact@spaholicsuae.com
WhatsApp / phone: +971 56 125 2474
