Privacy Policy

1. Introduction

Whispervale is committed to protecting your privacy and handling your personal information with care and respect. This Privacy Policy explains how we collect, use, store, and protect information about individuals who use our Thai bodywork services, visit our website, or contact us for information.

By using our services or providing us with your personal information, you consent to the practices described in this policy. If you have questions or concerns about how we handle your data, please contact us at [email protected].

2. Information We Collect

We collect information that you provide directly to us and information that is automatically collected through your use of our website.

Information You Provide:

• Name and contact information (email address, phone number)
• Session preferences and scheduling information
• Health information relevant to bodywork (injuries, conditions, areas of concern)
• Payment information processed through secure third-party services
• Communication preferences and feedback

Automatically Collected Information:

• Device and browser information
• IP address and general location data
• Website usage patterns through cookies and similar technologies
• Pages visited and time spent on our website

3. How We Use Your Information

We use the information we collect for the following purposes:

• To schedule and deliver bodywork sessions tailored to your needs
• To communicate with you about appointments, changes, or inquiries
• To maintain session notes that help practitioners provide continuity of care
• To process payments and maintain financial records
• To send service updates or information you have requested
• To improve our services based on client feedback and usage patterns
• To comply with legal obligations and protect our rights

4. Legal Basis for Processing

Under Taiwan's Personal Information Protection Act, we process your personal information based on:

• Consent: You have explicitly agreed to our collection and use of your information
• Contract Performance: Processing is necessary to provide the services you have requested
• Legitimate Interest: We have a valid business reason for processing that does not override your rights
• Legal Compliance: We are required by law to retain certain information

5. Data Retention

We retain different types of information for varying periods:

• Session notes and health information: Retained for 3 years after your last appointment to support continuity of care
• Contact and scheduling information: Retained while you remain an active client, then archived for 2 years
• Financial records: Retained for 7 years as required by Taiwan tax regulations
• Marketing communications data: Retained until you opt out or request deletion

After these periods, information is either securely deleted or anonymized so it can no longer identify you.

6. Data Sharing and Third Parties

We do not sell your personal information. We may share information with third parties only in these limited circumstances:

• Service Providers: Payment processors, scheduling software, and email services that help us operate our business. These providers are contractually obligated to protect your data.
• Legal Requirements: When required by law, court order, or government regulation
• Protection of Rights: To protect our rights, property, or safety, or that of our clients or the public
• With Your Consent: When you have explicitly agreed to share information with a specific third party

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Secure storage of physical client records in locked, access-controlled locations
• Encrypted transmission of data through our website using SSL/TLS protocols
• Access controls limiting who can view client information
• Regular staff training on privacy and data protection practices
• Secure disposal of records when retention periods expire

While we strive to protect your information, no method of transmission or storage is completely secure. We cannot guarantee absolute security but maintain commercially reasonable protections.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your browsing experience and understand how visitors use our site. For detailed information about our cookie practices, please see our Cookie Policy.

You can control cookie preferences through your browser settings. Note that disabling certain cookies may limit website functionality.

9. Your Rights and Choices

Under Taiwan's Personal Information Protection Act, you have the following rights:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information, subject to legal retention requirements
• Right to Restrict Processing: Request limitation on how we use your information
• Right to Data Portability: Receive your information in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw previously given consent at any time

To exercise these rights, contact us at [email protected]. We will respond to valid requests within 30 days.

10. Marketing Communications

We may send you information about our services, special offerings, or wellness topics if you have:

• Explicitly opted in to receive marketing communications
• Provided your email or phone number while booking services

You can opt out of marketing communications at any time by clicking the unsubscribe link in emails, replying STOP to text messages, or contacting us directly. Opting out of marketing does not affect service-related communications necessary for your appointments.

11. Children's Privacy

Our services are intended for adults aged 18 and over. We do not knowingly collect personal information from individuals under 18. If you are a parent or guardian and believe we have collected information about a minor, please contact us immediately so we can delete it.

12. International Data Transfers

Your information is primarily stored and processed in Taiwan. If we transfer information outside Taiwan, we ensure appropriate safeguards are in place to protect your data in accordance with Taiwan's Personal Information Protection Act.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or business operations. When we make changes, we will update the "Last Updated" date at the top of this policy. Significant changes will be communicated through email or prominent notice on our website. Continued use of our services after changes indicates acceptance of the updated policy.

14. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us:

15. Supervisory Authority

If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with Taiwan's National Development Council, which oversees personal information protection in Taiwan.