Privacy policy

1. Data controller

The controller of your personal data is Tanapan Promkaew, operating under business certificate No. OU432901-1 (DIMAK Thai Massage studio), Vilniaus g. 43, LT-19118 Širvintos, Lithuania. Contact for data matters: dimakthai@gmail.com, phone +370 689 88395.

2. What data we collect

When you book we collect: first name, last name, phone number, email address, your date of birth (required – we use it to confirm the service is suitable for your age) and your note. The system also keeps your visit history (date, service, duration, amount) – needed for the loyalty programme and service quality.

3. Why we collect it

• To manage bookings: confirmation and reminder messages by SMS and email (performance of contract);
• For the loyalty programme: counting visits and rewards;
• To check age suitability: so that the chosen service matches the age (performance of contract);
• For a birthday greeting with a gift – based on the date of birth you provided; you may opt out at any time.

4. Where the data is stored

Data is stored on a server we control within the European Union. We do not pass it to third parties for marketing. Technical providers (e.g. SMS or email delivery services) receive only the minimum needed to deliver a message.

5. How long we keep it

Client data is kept while you use our services. On your request personal data is deleted or anonymised without delay (statistics remain without personal identity).

6. Your rights

You have the right to: access your data, correct it, request deletion ("right to be forgotten"), and withdraw consent at any time. Contact dimakthai@gmail.com or call the salon – we will comply within 30 days.

7. Cookies

The website uses only essential cookies (e.g. to remember your language). We use no tracking or marketing cookies.

8. Purchase of gift vouchers

When you buy a gift voucher we additionally process the buyer's email address (to send the voucher and the purchase confirmation) and, if provided, the name of the gift recipient (printed on the voucher). The payment is handled by a payment provider acting as a separate data recipient – only the information necessary for the payment is passed on; we neither receive nor store card details. Purchase data is kept for as long as needed for accounting and for the validity of the voucher.

9. Children's data

When booking a children's massage we additionally ask for the child's date of birth (required) and, if you wish, the child's name. The date of birth is needed to confirm that the service is suitable for the child's age and to let the therapist prepare an appropriate massage; the name is used only so that the therapist can address the child by name. This information is provided by the booking parent or guardian, who confirms they are entitled to do so. The child's data is stored with that booking, not on the client record: visit history, the loyalty programme and birthday greetings belong to the adult who made the booking. We do not use children's data for marketing and do not pass it to third parties. The same retention periods and the rights listed in section 6 apply – please contact us at the same email address.

Updated: 2026-08-24