Privacy Policy

How we collect, use, and protect your information at Serenity Spa & Wellness — written in plain language, no clauses you have to read three times.

Overview

At Serenity Spa & Wellness we hold ourselves to two simple rules. We collect only the information we genuinely need to serve you well, and we never sell that information to a third party — no exceptions, no fine print exceptions.

This document explains exactly what we collect, why, who can see it, and how long we keep it. If anything here is unclear, write to our Data Protection Officer at privacy@quikdin.com — we reply within two business days.

What we collect

The information we collect falls into four categories, listed from most to least sensitive:

• Health-related information you share — allergies, sensitivities, pregnancy status, recent injuries, medications relevant to treatment. Only collected if you choose to share it during intake.
• Booking & account information — name, email, phone, preferred therapist, service history, payment method (tokenised, we never store full card numbers).
• Visit information — appointment dates, durations, no-shows, products purchased, gift cards used.
• Technical information — IP address, browser type, device type, pages viewed. Used only to keep the site secure and improve usability.

How we use your information

We use the information described above for the following purposes — and no others:

1. To deliver the service you've booked (your therapist needs to know about your allergies).
2. To contact you about your booking — confirmations, reminders, the rare cancellation.
3. To process payment for your visit and store a payment method for future bookings (if you opt in).
4. To send you marketing communications — but only if you explicitly opt in, and you can opt out from every email with one click.
5. To improve our service — anonymised usage data and the feedback you choose to share.

Who we share information with

Recipient	What they receive	Why
Our therapists	Health intake, booking notes	Safe, personalised treatment
Stripe (payment processor)	Tokenised card & charge amount	To process payment securely
Booksy (booking platform)	Name, email, appointment times	To manage the booking system
Postmark (email delivery)	Email address, message content	To send you confirmations
Third-party advertisers	Nothing. Ever.	—

Health information — special protection

Information you share during a wellness intake is held to a higher standard than the rest. It is visible only to the therapist treating you and the duty manager. It is never used for marketing. It is purged from our active systems 36 months after your last visit unless you ask us to keep it on file longer.

Your rights

You have the right to access, correct, export, or delete any information we hold about you. You can also object to processing or withdraw consent for marketing at any time. To exercise any of these, write to privacy@quikdin.com. We respond within 30 days — usually within 48 hours.

How long we keep your data

Booking history is retained for 7 years for tax and accounting purposes. Marketing contact preferences are retained until you opt out. Health intake records are retained for 36 months from your last visit. All technical logs are rotated out after 90 days.

Cookies & tracking

We use a small number of strictly necessary and analytics cookies — never advertising cookies. See our Cookie Policy for the full list, what each one does, and how to opt out.

Contact our Data Protection Officer

Our DPO is reachable at privacy@quikdin.com for any privacy-related question, request or complaint. You may also write to us at 312 W. 2nd St, Casper, WY, USA, marked "DPO". For unresolved complaints you may contact your local data protection authority.