Legal
Privacy Policy
Last updated: 2026 (update with real date on launch)
Zen Harmony ("we", "us") respects your privacy. This policy explains how we collect, use, and protect information when you use our website booking system and contact forms.
Information We Collect
- Booking details: name, phone, email, appointment time, service choice, notes (pressure/focus areas), and any add-ons.
- Contact inquiries: name, email, phone (optional), message.
- Technical: basic server logs for security and rate-limiting (IP used only for abuse prevention, not stored long-term with personal data).
How We Use Information
- To confirm and manage your appointment in our Google Calendar (the only system of record).
- To respond to inquiries.
- For internal operations and legal compliance. We never sell your data.
Privacy by Design (Our Booking System)
Our online booking is deliberately private:
- Visitors see only open time slots. No other client's name, time details beyond availability, or data is exposed.
- Availability uses Google's privacy-safe free/busy API (returns time ranges only).
- Full client details are stored only inside the private description of a calendar event that only the spa owner can see.
- No third-party booking platform shares your data.
Your Policies (from our site)
Arrival: Arrive 10 minutes early for your first visit so we can welcome you and review your preferences.
Cancellation: Please call us at least 4 hours before your appointment to reschedule or cancel.
Privacy on site: Your booking details are private. Only available times are shown publicly — all other appointments are completely hidden, and your name, contact info, and notes are visible only to the spa.
(These are pulled from our live config and should be kept in sync.)
Data Retention & Security
Appointment records live in your Google Calendar (under your control). We recommend you apply standard Google security. Website forms transmit over HTTPS. We apply rate limiting and security headers.
Your Rights
Contact us to request access, correction, or deletion of your information. For bookings, you may also manage via direct communication with the spa.
Contact
Questions? Use the contact form on the main site or call our number listed there.
This is a starter policy for the Claude-built booking site. Customize with your attorney for production use. No analytics or advertising pixels are included by default.