Privacy policy

01Who we are

Kanita Nail Lounge is responsible for the personal information we use to manage our customer relationships, provide treatments, fulfil purchases and answer enquiries. This policy covers our website and your interactions with our lounge, including bookings and consultation information handled through Fresha on our behalf.

We handle personal information in accordance with Thailand’s Personal Data Protection Act and other applicable requirements. For privacy questions or to exercise your rights, contact us:

02Information we collect

We collect information you provide directly, information shared through our booking and payment providers, and limited technical information generated when you use the website. Depending on how you interact with us, this may include:

• Your name, email address, phone number and preferred contact method.
• Booking details, attendance, selected treatments, preferences and correspondence.
• Consultation answers about relevant allergies, sensitivities, skin or nail conditions, recent procedures and medication.
• Purchase and payment records, gift card or package balances, and loyalty or referral activity.
• Photographs or feedback you choose to share, together with any permission you give for their use.
• Technical information such as IP address, browser or device details and security logs.

We ask only for information relevant to the purpose. If information is necessary to confirm a booking, assess treatment suitability or fulfil a purchase, we will explain this; without it, we may be unable to provide the requested service. Optional information is your choice.

03Why we use your information

We use personal information for the following purposes and legal bases:

• Bookings and purchases: to arrange appointments, provide services, take payment and manage gift cards or packages. This is necessary to enter into or fulfil our agreement with you.
• Customer service and business operations: to answer enquiries, resolve concerns, maintain customer records, administer rewards and protect our systems. We rely on our legitimate interests where these do not override your rights.
• Legal and accounting requirements: to keep required transaction records, respond to lawful requests and meet our legal obligations.
• Health-related consultation information: to personalise a treatment and assess its suitability, based on your explicit consent unless a specific legal exception applies.
• Optional marketing and identifiable photographs: to send promotional messages or publish images with the appropriate permission. We seek consent where required, separately from booking a service.

Appointment confirmations, reminders and messages about a purchase are service communications, rather than permission to send marketing.

04Consultation information

Some treatments require a short consultation. Information about health, allergies or medication is sensitive personal information. We request explicit consent for its collection and use where required and limit access to people who need it to support your treatment or manage a related concern.

Please provide only relevant details. You can withdraw consent by contacting us. Withdrawal does not affect processing already carried out lawfully, but we may be unable to provide a treatment if essential consultation information cannot be used.

Do not send medical records, payment card details or other sensitive information through our general website contact form. Contact us to discuss the appropriate way to provide treatment information.

05Service providers and sharing

We share information only as needed for the purposes described in this policy, including with:

• Fresha: for bookings, customer records, consultation forms, payments and the management of gift cards, packages and rewards. Fresha processes some information for us and is separately responsible for information it uses for its own platform and account services. Read Fresha’s Privacy policy.
• FormSubmit and our email provider: our contact form sends your name, email address, optional phone number and message through FormSubmit to the lounge’s email inbox. Read FormSubmit’s Privacy policy.
• Website hosting, technical and payment providers: to deliver the website, protect it from misuse, process payments and maintain necessary transaction records.
• Professional advisers and authorities: where necessary for accounting, legal advice, a legal obligation or the establishment, exercise or defence of legal claims.

We do not sell customer personal information. Staff and providers receive access appropriate to their role. Third-party platforms may also process information under their own policies when you use their services.

06International processing

Some providers operate outside Thailand, so information may be stored or processed in another country. Where we transfer personal information overseas, we use the protections or permitted transfer arrangements required by applicable data protection law. A provider’s privacy policy explains its own international processing arrangements.

07Cookies, maps and external links

Our website and hosting services may use cookies or similar technologies needed to deliver pages and maintain security. You can manage cookies through your browser settings; restricting them may affect some features.

The contact page includes an embedded Google Map. Loading or interacting with it may send information such as your IP address and device details to Google and may involve Google cookies. This is covered by Google’s Privacy policy.

Booking links and links to LINE, social networks and other websites take you to services with their own privacy practices. Information you provide there is also subject to the relevant provider’s policy.

08Marketing, photographs and children

If you choose to receive marketing, you can opt out using the message’s unsubscribe option or by contacting us. Declining marketing does not affect your ability to book a treatment. We may retain a minimal record of your opt-out so we can respect it.

We seek permission before using identifiable treatment photographs for publicity. Giving permission is optional, and you can contact us to withdraw it for future use. Reviews posted on third-party platforms are subject to those platforms’ rules. If you have a concern about a review or image featured on our website, please contact us.

For children’s services, a parent or guardian should arrange the booking and provide any required consent. We collect only information needed to provide the service. Where the law requires parental or guardian consent for a child’s personal information, we obtain it.

09How long we keep information

We retain information for as long as reasonably necessary for its purpose, taking account of legal record-keeping requirements, the nature of the information and any outstanding complaint or claim.

• Enquiries and correspondence are kept while we handle your request and for any necessary follow-up or dispute.
• Booking and consultation records are kept while relevant to your customer relationship, treatment history and any applicable legal claims period.
• Gift card, package and rewards records are kept while benefits remain available and for the accounting or dispute requirements that follow.
• Transaction and tax records are kept for the periods required by law.
• Marketing permissions and opt-out records are kept as needed to demonstrate and respect your choices.

When information is no longer needed, we delete or anonymise it, subject to necessary backup cycles and legal retention requirements.

10Protecting your information

We use appropriate organisational and technical measures to protect personal information against unauthorised access, loss or misuse, including restricting access to people who need it. No online system is completely secure. If a personal data breach occurs, we will assess it and notify the relevant authority and affected individuals where the law requires.

Keep your Fresha account details and gift card information secure. Please let us know if you believe information relating to your lounge account or booking has been misused.

11Your privacy rights

Subject to the conditions and exceptions in applicable law, you may request access to and a copy of your information, correction of inaccurate information, deletion, restriction of use, or transfer of eligible information. You may also object to certain processing and withdraw consent where we rely on it.

To make a request, email info@kanitanaillounge.com. Please explain what you would like us to do. We may need to verify your identity before responding. We respond without undue delay and within applicable legal deadlines, and explain any lawful reason why a request cannot be fully met.

For information Fresha controls independently, you can also use your account settings or contact Fresha directly. You have the right to lodge a complaint with Thailand’s Personal Data Protection Committee. You do not have to contact us first to exercise that right.

12Updates to this policy

We may update this policy when our services or legal requirements change. The latest version appears on this page. Where a change requires a new notice or consent, we will provide it before using your information for that new purpose.