Privacy Policy

Data controller & contact

SpaTreats is the brand of Abel Santos Correia Unipessoal Lda, Portuguese tax/company no. 516891472, the controller for personal data processed in connection with its website and services, including treatment bookings, service purchases, customer contact and marketing. Registered office: Rua dos Ramos, Lote 13, 3.º Dto., 8200-647 Albufeira, Portugal. Contact info@spatreats.me or +351 961 297 167 (operator call charges apply). SpaTreats.me remains our main website.

Scope & information collected

This policy follows the SpaTreats Privacy Policy last updated on 19 May 2026. Processing is governed by the General Data Protection Regulation (EU) 2016/679, Portuguese Law no. 58/2019 and applicable electronic communications rules, including the ePrivacy Directive and Law no. 41/2004. Data is supplied directly when you book, complete forms, contact us by email or WhatsApp, or use the website. It may include your name, email, telephone number, purchased services, booking history and, where relevant, health information needed to provide wellness treatments safely.

Purposes & legal bases

Personal data is used to perform contracted services, manage bookings, provide treatments, process payments and support customers. It may also be used to meet legal and tax obligations, improve service quality and, with consent, send marketing about SpaTreats. The legal basis varies by purpose: contract performance, legal obligations, legitimate interests in improving services, or consent where applicable. Health data is a special category under Article 9 GDPR and is processed only with explicit consent to ensure treatment suitability and safety.

Recipients & international transfers

Personal data may be shared with service providers acting as processors, including technology suppliers, booking platforms, payment processors such as Stripe or IfThenPay, and digital analytics or marketing tools. SpaTreats requires compliance with applicable data protection obligations. Where data is transferred outside the European Economic Area, appropriate lawful safeguards are used, including European Commission standard contractual clauses or other legally recognised mechanisms. Fresha’s own processing is also governed by its separate privacy policy.

Retention & security

Data is retained only for as long as needed for its purposes and applicable legal periods. Tax records may be kept for up to ten years. Data processed on consent is retained until consent is withdrawn, subject to any separate lawful retention obligation. SpaTreats adopts appropriate technical and organisational security measures, including access controls, protection against unauthorised access and internal data management procedures. Please use private channels for health information and avoid posting it in public comments.

Your rights & consent

You have rights of access, rectification, erasure, restriction, objection and portability under applicable law. Send requests to info@spatreats.me. You may withdraw consent at any time without affecting processing lawfully undertaken before withdrawal. Use an unsubscribe option where available or contact us to stop consent-based marketing. Requests are normally answered within one month, subject to lawful extensions. You may complain to the Portuguese data protection authority, CNPD. These rights are subject to the conditions and exceptions provided by law.

Fresha privacy & cookies

This website and its booking journey use Fresha infrastructure. Fresha’s privacy policy and cookie notice explain its processing, cookies, similar technologies and available controls. Browser settings can also manage cookies; restricting essential technologies may affect functionality. Following a link to spatreats.me opens SpaTreats’ Shopify website with separate privacy information and cookie controls. Choices made on one site should not be assumed to apply to the other. Fresha Privacy Policy: terms.fresha.com/privacy-policy. Fresha Cookie Policy: terms.fresha.com/cookies.
Fresha Privacy Policy

Updates & customer support

SpaTreats may update its Privacy Policy and publish changes on its website. This English version presents the policy dated 19 May 2026, with practical information about exercising rights and the Fresha platform. For questions about SpaTreats data processing, contact info@spatreats.me. For bookings and vouchers, consult Terms & Conditions. SpaTreats.me is our main website for spa information and voucher purchases; Fresha supports service discovery and appointments.