Privacy Policy

Who controls your personal information?

For the purposes of this Privacy Policy, the organisation responsible for determining how your personal information is processed is:

• Business name: Les Bains de Dubai
• Website: lesbainsdedubai.com
• Address: Kuwait Road, Al Mankhool, Bur Dubai, Dubai, United Arab Emirates
• Email: contact@lesbainsdedubai.com
• Telephone: +971 4 627 1826

Information we may collect

The information collected depends on how you interact with our website and services.

Information you provide directly

When you complete a booking form, send an enquiry or contact our team, we may receive:

• Your first and last name.
• Your email address.
• Your telephone or WhatsApp number.
• Your preferred appointment date and time.
• Your selected spa treatment or service.
• The number of guests included in a booking.
• Your preferences, questions or special requests.
• The content of messages sent to our team.
• Any information you voluntarily provide.

Technical information

When you visit our website, technical data may be collected automatically by our website hosting, security or analytics systems. This may include:

• Your Internet Protocol address.
• Your browser type and version.
• Your device type and operating system.
• Your approximate country or city.
• The pages you visit.
• The date and time of your visit.
• The website or search engine that referred you to us.
• Information about errors, security events and website usage.
• Cookie or similar technology identifiers.

How we collect information

Personal information may be collected when you:

• Complete a contact or booking form on our website.
• Request information about a treatment or spa package.
• Contact us by email, telephone or WhatsApp.
• Make, change or cancel an appointment.
• Visit and interact with our website.
• Provide feedback or communicate with our staff.

We may also receive limited information from technology providers that help us host, secure, maintain or understand the performance of our website.

How we use your information

We may process personal information to:

• Respond to questions and service enquiries.
• Check appointment availability.
• Create, confirm and manage spa reservations.
• Contact you regarding your booking.
• Provide information about treatments, prices and packages.
• Personalise your experience where appropriate.
• Provide customer support.
• Maintain necessary business and transaction records.
• Improve the content and performance of our website.
• Protect our website from fraud, spam and security threats.
• Investigate technical issues or misuse of our services.
• Comply with applicable legal and regulatory obligations.
• Send promotional communications when you have agreed to receive them or when otherwise permitted by applicable law.

We aim to use personal information only for the purposes communicated to you or for compatible purposes reasonably connected with your interaction with Les Bains de Dubai.

Legal grounds for processing

Depending on the circumstances and the applicable law, we may process personal information on one or more of the following grounds:

• Your consent: when you have voluntarily agreed to a specific use of your information.
• Contractual necessity: when processing is necessary to respond to a booking request, arrange an appointment or provide a requested service.
• Legal obligations: when information must be retained or disclosed to comply with applicable law.
• Legitimate business interests: when processing is reasonably necessary to operate, secure and improve our business without overriding your privacy rights.
• Protection of rights and safety: when processing is necessary to prevent fraud, address security risks or protect individuals and property.

Cookies and similar technologies

Cookies are small files that websites may store on a visitor’s browser or device. They can support website functionality, security, preferences and performance measurement.

Strictly necessary cookies

These cookies may be required for essential website functions, security, form operation, session management and fraud prevention. Disabling them may prevent parts of the website from working correctly.

Preference cookies

These cookies may remember choices such as language, display preferences or previous interactions.

Analytics cookies

Where analytics tools are enabled, cookies or similar technologies may help us understand how visitors find and use the website. This information may include page visits, device type, referral source and general interaction patterns.

Third-party content

Embedded maps, videos, social media features, booking widgets or other external content may allow third-party providers to place cookies or receive technical information when the content is loaded.

You can manage or delete cookies through your browser settings. Where a cookie consent tool is displayed, you can also use it to manage non-essential cookies.

WhatsApp, email and telephone communications

When you contact Les Bains de Dubai through WhatsApp, email or telephone, we may use the information you provide to respond to your enquiry, arrange your booking and provide customer support.

WhatsApp and other communication platforms are operated by independent providers. Those providers may process technical and account information under their own privacy terms.

Please do not send highly sensitive or confidential information through WhatsApp or ordinary email unless it is necessary and an appropriate secure method has been agreed.

You can review WhatsApp’s privacy information on its official website: WhatsApp Privacy Policy .

When information may be shared

Personal information may be shared only when reasonably necessary for the purposes described in this policy, including with:

• Website hosting, maintenance and security providers.
• Email, telephone and communication service providers.
• Booking, form or customer-management service providers.
• Analytics or performance providers, where enabled.
• Professional advisers such as accountants, auditors or legal advisers where necessary.
• Government bodies, courts, regulators or law-enforcement authorities where disclosure is legally required.
• A buyer, investor or successor in connection with a genuine business sale, restructuring or transfer, subject to appropriate confidentiality safeguards.

Service providers are expected to process information only for the services they provide and to apply appropriate confidentiality and security measures.

International data transfers

Some website hosting, cloud, analytics, email or communication providers may store or process information outside the United Arab Emirates.

Where personal information is transferred internationally, we aim to use providers and safeguards appropriate to the nature of the information and the requirements of applicable data protection law.

These safeguards may include contractual protections, provider security commitments and transfers to jurisdictions offering an appropriate level of protection.

How long information is retained

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, including:

• Responding to an enquiry.
• Managing and completing a reservation.
• Providing customer support.
• Maintaining required financial or operational records.
• Resolving complaints or disputes.
• Preventing fraud or misuse.
• Complying with legal requirements.

The appropriate retention period depends on the type of information, the reason it was collected, legal obligations and whether the information is needed to establish or defend legal rights.

When information is no longer required, it may be securely deleted, anonymised or otherwise removed from active systems, subject to technical backup cycles and legal retention requirements.

How we protect information

We use reasonable organisational and technical measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or misuse.

These measures may include:

• Secure website connections using HTTPS.
• Access controls and password protection.
• Website, hosting and software security updates.
• Spam, malware and unauthorised-access protections.
• Restricted access to information based on business need.
• Careful selection of technology service providers.
• Backups and operational security procedures.

No internet transmission or storage system can be guaranteed to be completely secure. Visitors should therefore avoid sending unnecessary sensitive information through public forms or ordinary email.

Your privacy rights

Subject to applicable law and any relevant exceptions, you may have the right to request information about how your personal data is processed and to exercise the following rights:

How to submit a request

To exercise a privacy right, email contact@lesbainsdedubai.com with the subject line “Privacy Request”.

Please explain your request clearly. We may need to request reasonable information to confirm your identity and protect your data from unauthorised access.

A request may be limited or refused where permitted or required by applicable law. Where appropriate, we will explain the reason.

Marketing communications

We may send news, special offers or promotional information when you have requested it, consented to receive it or where such communication is otherwise permitted by applicable law.

You can ask us to stop sending promotional communications at any time by:

• Using an unsubscribe option included in the message.
• Replying and requesting removal.
• Emailing contact@lesbainsdedubai.com .

Service-related messages, such as appointment confirmations or responses to an enquiry, are not promotional communications and may still be sent when necessary.

Children’s privacy

Our website and booking services are not designed to collect personal information directly from children without the involvement of a parent or legal guardian.

A parent or guardian who believes that a child has provided personal information without appropriate permission may contact us to request review or deletion of the information.

External websites and services

Our website may contain links to external websites, maps, communication services or social media platforms.

Les Bains de Dubai does not control the privacy, security or content practices of independent third-party websites. You should review the privacy policy of the external service before providing personal information to it.

Changes to this Privacy Policy

We may update this Privacy Policy when our website, services, technology providers or legal obligations change.

The latest version will be published on this page with an updated revision date. Material changes may also be communicated through an appropriate notice on the website or through another suitable method.

We encourage visitors to review this page periodically.

Legal framework