USH Spa Mobile App Privacy Policy

Welcome to USH Spa (“we,” “us,” or “our”), operated by Quiet Ush Thai Spa Health Institute for Women, registered in the State of Kuwait at Al-Shuhada Street, Block 04, Building 32, Nasser Ahmed Abdul Latif Al-Othman, Kuwait city, Sharq 15300, Kuwait. We are committed to honoring the trust you place in us when using our mobile application (the “App”) and associated web and online booking services.

This Privacy Policy applies to personal data collected through:

• The USH Spa Mobile Application for iOS (Apple App Store ID: 6771279814) and Android (Google Play Store Package: com.spaush.ushspa).
• Digital appointment bookings, therapist scheduling, and consultation preferences.
• Digital gift vouchers, gift cards, and order tracking services delivered through our web and mobile platforms.
• Direct customer service interactions via phone, WhatsApp, email, or in-app support.

By downloading, accessing, or using the USH Spa mobile app, you acknowledge that you have read and understood this Privacy Policy and agree to our processing of your information in accordance with its provisions.

To provide a seamless, luxurious, and personalized spa booking experience, we collect certain categories of personal data. We only collect information that is strictly necessary for our services:

We process your personal data exclusively for lawful and legitimate purposes connected with the spa services you solicit:

Under applicable data protection principles, we rely on the following legal grounds to process your personal data:

• Performance of a Contract: When you book a spa appointment or purchase a gift voucher, processing your name, phone number, and service selections is necessary to execute the contract and deliver the requested treatment.
• Consent: For optional features such as device push notifications, camera permissions, and marketing updates, we ask for your explicit consent, which you may withdraw at any time via your device settings.
• Legitimate Interests: To protect the security of our application, prevent fraudulent bookings, and continuously improve user experience.
• Legal Obligations: Retaining invoices and transaction histories as required by commercial and taxation authorities.

The USH Spa mobile app requests only those operating system permissions strictly needed to enable specific app capabilities. Permissions are requested dynamically at runtime:

You can grant or revoke these permissions at any time through your device settings (Settings > USH Spa on iOS or Settings > Apps > USH Spa > Permissions on Android).

When you pay for appointments, deposits, or gift cards through the app:

We share personal information strictly with vetted third-party service providers (subprocessors) that enable our core operations, subject to contractual confidentiality agreements:

• Cloud Infrastructure & Databases: Hosted in secure enterprise cloud environments to store your encrypted booking records and account tokens.
• SMS & Telecommunication Gateways: To transmit automated OTP verification codes and appointment SMS notifications.
• Push Notification Services: Apple Push Notification service (APNs) and Google Firebase Cloud Messaging (FCM) to deliver appointment alerts to your device.
• Legal Authorities: If required by law, subpoena, or competent judicial or government order in the State of Kuwait.

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable laws:

• Active Accounts: Maintained for the duration of your active account so you can view past appointments and redeem valid gift vouchers.
• Financial & Invoicing Records: Preserved for the duration required by Kuwaiti commercial and tax laws (typically up to 5 years).
• Upon Account Deletion: Personal identifiers (name, email, phone number, push tokens, avatars) are permanently purged or anonymized within 14 business days, except where statutory retention applies.

We implement comprehensive administrative, technical, and physical safeguards designed to protect personal data against accidental loss, unauthorized access, alteration, and misuse:

Depending on your jurisdiction and in line with our privacy commitment, you have the following rights regarding your personal data:

• Right of Access: You may request a summary of the personal data we hold about your account.
• Right to Rectification: You can update or correct inaccurate profile details (e.g. updated phone number, email address) directly in the app profile section or by contacting us.
• Right to Erasure (Right to be Forgotten): You have the absolute right to delete your account and all associated personal data (see Section 11).
• Right to Withdraw Consent: You can disable push notifications or location permissions at any time via your smartphone settings without affecting your ability to book appointments in person or by phone.

The USH Spa mobile app is designed and marketed exclusively for adult clients and individuals aged 16 years and older. We do not knowingly collect, solicit, or maintain personal information from children under 16.

If we learn that an account has been registered by a minor without parental consent, we will promptly delete all associated data from our servers. Parents or guardians who believe their child has submitted personal data to us may contact us at info@ushspa.co.

We may periodically update this Privacy Policy to reflect modifications in our spa services, mobile app functionality, or evolving legal and regulatory requirements.

When material changes occur, we will notify you through an in-app notice, a push notification, or by updating the “Last Updated” date at the top of this page. Your continued use of the USH Spa mobile app following the posting of an updated version constitutes your acceptance of the revised terms.

If you have questions, inquiries, feedback, or grievances regarding this Privacy Policy or our data handling practices, please contact our designated privacy desk: