Privacy Policy

1. Data Controller Identification

This Privacy Policy applies to personal data processed by:
Entity Name: Balié Dubai Mobile Wellness LLC ("Balié", "we", "us", or "our")
Jurisdiction: Emirate of Dubai, United Arab Emirates
Commercial Activity: On-demand luxury mobile massage and therapeutic wellness services
Data Protection Officer (DPO) Contact: privacy@baliedubai.com
VIP Concierge WhatsApp: +971 56 980 2597

2. Data Minimization — What We Collect and Why

In accordance with Article 5 of the UAE PDPL, we collect strictly the minimal personal data necessary to provide and manage your mobile spa appointments:

• Identification & Contact Data: Full name and phone/WhatsApp number, used solely to confirm appointment details, dispatch times, therapist arrival, and send appointment reminders.
• Location & Address Data: Your Dubai villa, residential tower, apartment number, or hotel room name, required exclusively for physical therapist navigation and equipment delivery.
• Appointment Preferences: Selected wellness ritual (e.g., Lymphatic Drainage, Wood Therapy), session duration (60, 90, 120 minutes), and requested date/time slot.
• Technical & Session State Data: Functional preferences stored locally on your device (such as your ambient soundscape volume preference and cookie consent flag).

3. Legal Grounds for Processing

Under UAE PDPL (Article 4) and GDPR (Article 6), we process your personal data under the following lawful bases:

• Contractual Necessity: Processing your name, address, and contact number is mandatory to perform our service contract (dispatching the therapist and equipment to your door).
• Explicit Consent: Where you provide consent for optional communications, newsletter updates, or non-essential cookies. You may revoke consent at any time.
• Legal & Regulatory Compliance: Maintaining accounting, tax (UAE VAT law), and commercial records required under Dubai Department of Economy and Tourism (DET) and Federal Tax Authority (FTA) regulations.
• Legitimate Interests: Protecting the safety of our female therapists, preventing fraudulent bookings, and maintaining quality standards.

4. Children & Minors' Data Protection (Age Consent)

Our services and website are intended exclusively for individuals aged 18 years or older. We do not knowingly collect personal information from children or minors under 18 years of age.

If a wellness treatment (such as a gentle teenage relaxation session or mother-daughter package) is requested for a minor aged 12 to 17, the booking must be made directly by a parent or legal guardian, and the parent or guardian must be physically present in the residence throughout the entire treatment duration. If we discover that personal data of a minor has been collected without verified parental consent, it will be deleted immediately.

5. Third-Party Disclosures & SDK Audit

We do not use invasive tracking pixels, cross-app tracking SDKs, or sell user databases. We share minimal data strictly with trusted service providers bound by strict confidentiality:

• Fresha Marketplace Ltd: For verified online calendar scheduling, review verification, and PCI-DSS compliant payment processing.
• WhatsApp / Meta Cloud API: For direct end-to-end client communication, appointment dispatch coordination, and instant concierge support.
• Licensed Female Therapists: Your therapist receives only your first name, service address, and treatment selection 60–90 minutes prior to your scheduled slot. Therapists operate under strict Non-Disclosure Agreements (NDAs).
• Government & Law Enforcement Authorities: Disclosed only if legally required by valid judicial order or UAE security mandate.

6. Data Retention Period

We retain booking records and contact data only as long as necessary to fulfill the purposes outlined in this policy or as mandated by UAE statutory retention laws (such as 5-year retention for VAT accounting invoices). Inactive booking communications that have exceeded retention needs are systematically purged or anonymized.

7. Marketing Communications & Unsubscribe Policy

We respect your inbox and messaging privacy. We do not engage in unsolicited spam. If you opted into seasonal wellness announcements, you have the right to unsubscribe at any time:

• WhatsApp / SMS: Simply reply with the word "STOP" or "UNSUBSCRIBE" to our concierge number at any time to immediately opt out of automated notifications.
• Email: Every promotional email sent by Balié Dubai contains an automated, single-click Unsubscribe link in the footer.

8. Your Rights & Data Deletion Requests (Right to Erasure)

Under Chapter 3 of the UAE PDPL and Articles 15–22 of the GDPR, you possess the following rights:

• Right to Access & Rectification: Request a copy of your personal data or request corrections to inaccurate records.
• Right to Erasure (Data Deletion): Request the permanent deletion of your contact profile and booking history from our active systems.
• Right to Restrict or Object: Restrict or object to specific processing activities, including marketing.
• Right to Data Portability: Request your data in a structured, commonly used digital format.

9. Security Measures & Therapist Discretion

Balié Dubai implements rigorous technical and organizational security controls: SSL/TLS 256-bit encryption in transit, multi-factor authentication for booking dashboards, and strict physical and digital access restrictions. For high-profile residential clients, diplomats, and celebrities across Dubai villas, our therapists maintain absolute discretion and are bound by strict non-disclosure obligations.

10. Updates to This Policy

We may periodically update this policy to reflect statutory modifications or operational developments. Any material updates will be posted here with an updated revision date.