Privacy Policy

Desert Bloom Spa Ltd ("Desert Bloom Spa", "we", "us" or "our"), Company No. 513947280, registered in Israel at Coral Beach Rd 12, Eilat 8855301, operates the website desertbloomspa.pro and spa services at the above address. This Privacy Policy describes how we collect, use and protect your personal data in accordance with the Israeli Privacy Protection Law, 5741–1981, its associated regulations, and mirroring the data-subject rights standards of the European Union's GDPR where applicable.

1. Data Controller

Desert Bloom Spa Ltd
Coral Beach Rd 12, Eilat 8855301, Israel
Email: relax@desertbloomspa.pro
Phone: +972 8-555-0202

2. Data We Collect

Identity data: full name and, for certain treatments, date of birth.
Contact data: email address, phone number and home address (for invoicing).
Health data: medical information disclosed voluntarily during pre-treatment consultations (e.g. skin conditions, allergies, pregnancy). This is treated as sensitive personal data and collected only with explicit consent.
Booking data: treatment preferences, appointment history and any special requests.
Payment data: payment method type and billing information (full card numbers are not stored by us and are handled by our payment processor).
Technical data: IP address, browser, device type and website usage data collected via cookies.

3. How We Use Your Data

To process bookings, prepare for your treatment and provide aftercare recommendations.
To send appointment confirmations, reminders and follow-up surveys.
To send promotional offers and seasonal newsletters (only with your consent).
To maintain health and safety records as required by Israeli regulations.
To improve our services and website through anonymised analytics.
To comply with applicable Israeli financial and consumer protection laws.

4. Sensitive Health Data

Health information shared during your consultation is used solely to personalise your treatment and ensure your safety. It is stored in our encrypted client management system, is accessible only to your treating therapist and the spa director, and is never sold or shared with third parties except where legally required. We retain health consultation records for five years as required under Israeli health and safety regulations.

5. Cookies

We use essential, analytics and marketing cookies on our website. You can manage your preferences through the cookie consent banner. Declining non-essential cookies will not affect your ability to make a booking. We do not use cookies to collect sensitive health information.

6. Sharing Your Data

We share data only where necessary:

With our payment processor (Stripe or equivalent) to process bookings securely.
With our booking software provider under a data processing agreement.
With email service providers for transactional and marketing communications.
With Israeli authorities when legally required.

7. Data Retention

Client profiles are retained for 5 years after your last visit. Health consultation records are retained for 5 years. Marketing consent records are retained until withdrawn. Anonymised analytics data may be kept indefinitely.

8. Your Rights

Under the Israeli Privacy Protection Law (5741–1981) and consistent with GDPR principles, you have the right to:

Access and receive a copy of your personal data.
Correct any inaccurate information.
Request deletion of your data (subject to legal retention obligations).
Withdraw consent to marketing or non-essential cookies at any time.
Object to processing based on legitimate interests.
Request data portability in a structured, machine-readable format.
File a complaint with the Israeli Privacy Protection Authority.

To exercise your rights, email relax@desertbloomspa.pro with the subject "Privacy Rights Request". We will respond within 30 days.

9. Security

We maintain physical, electronic and administrative safeguards to protect your information, including TLS encryption, access controls and staff privacy training. Treatment rooms are private and client records are kept separate from public areas of our facility.

10. Children

Our website is not directed at children under 13. Spa treatments are offered to minors aged 14–17 only with a parent's written consent and in the presence of a guardian for certain treatments. We do not knowingly collect data from children under 13.

11. Policy Updates

We may update this policy from time to time. The revision date is shown at the top. Continued use of our website or services after changes constitutes acceptance.

12. Contact

Desert Bloom Spa Ltd
Coral Beach Rd 12, Eilat 8855301, Israel
relax@desertbloomspa.pro | +972 8-555-0202