Privacy Policy

1. Information Collected

The following information may be collected:

• Full name
• Email address
• Phone number / WhatsApp number
• Booking information submitted through Fresha
• Messages sent via contact forms or WhatsApp
• Messages and conversation history submitted to the website assistant
• Website usage data (IP address, browser type, device, cookies)

2. Purpose of Data Processing

Personal information is used to:

• Confirm and manage bookings
• Respond to inquiries
• Provide customer support
• Improve website performance
• Analyze traffic through Google Analytics 4
• Send service-related communications
• Provide automated assistance through the website chatbot

Personal data is never sold to third parties.

3. Third-Party Services

The website integrates trusted third-party services including:

• Google Analytics 4 and Google Tag Manager (analytics, only after consent)
• Fresha (booking system)
• WhatsApp (communication platform)
• Make (lead delivery automation)
• Google Sheets and Gmail (lead storage and notifications)
• Google Gemini (website assistant)
• Website hosting and infrastructure providers

These providers may process information outside Colombia under their own privacy terms and applicable data-transfer safeguards. Spa Lleras does not sell personal data.

4. Cookies

Essential storage is used for language, privacy preferences, security, and the chatbot session. Analytics storage and Google tags remain disabled unless you expressly accept analytics.

You may accept, reject, or withdraw analytics consent at any time through Privacy preferences in the footer.

5. Retention, transfers and security

Inquiries and leads that do not become a booking are retained for a maximum of twelve (12) months from the last interaction. Customer and booking data is retained during the commercial relationship and for any additional period required by legal, accounting, tax, or contractual obligations. When the processing purpose ends, data is securely deleted or anonymized unless a legal retention duty applies. Appropriate technical and organizational safeguards are applied. Some providers may process data in other countries as described above.

6. User Rights

Users may:

• Access your personal data
• Request corrections
• Request deletion
• Withdraw consent

The data controller is SPA LLERAS GROUP S.A.S., NIT 901778977-8, located at Carrera 38 #9A-26 Local 215, Medellín, Colombia. Requests to access, correct, delete, or withdraw authorization may be sent to spallerasmedellin@gmail.com.

Telephone: +57 322 890 1000.

7. Policy Updates

This policy may be updated periodically. The most recent version will always be available on this page.