Privacy Policy

Introduction

orchidmisteq is committed to protecting the privacy of individuals who use our services. This Privacy Policy explains how we collect, use, store, and protect your personal information when you interact with our website, book appointments, or receive massage therapy services.

By using our website or services, you agree to the collection and use of information in accordance with this policy. If you have questions or concerns about our privacy practices, please contact us at [email protected].

Information We Collect

Personal Information

When you book a session or contact us, we may collect the following personal information:

• Full name
• Email address
• Phone number
• Health history relevant to massage therapy
• Session preferences and notes
• Payment information (processed through secure third-party providers)

Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and browsing behavior, including:

• IP address and approximate geographic location
• Browser type and version
• Pages visited and time spent on each page
• Referring website or source
• Device type and operating system

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. For detailed information about our use of cookies, please refer to our Cookie Policy.

How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide massage therapy services, schedule appointments, and maintain session records
• Communication: To respond to inquiries, send appointment confirmations, and provide session-related information
• Health and Safety: To ensure sessions are safe and appropriate based on your health history
• Payment Processing: To process transactions and maintain financial records
• Service Improvement: To analyze usage patterns and improve our website and services
• Legal Compliance: To comply with applicable laws and regulations in Taiwan
• Marketing: To send information about our services (only with your consent, and you may opt out at any time)

Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: You have given clear consent for us to process your personal information for specific purposes
• Contract: Processing is necessary to fulfill our service agreement with you
• Legal Obligation: Processing is necessary to comply with legal requirements
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided these do not override your rights

Data Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: We work with trusted third parties who assist with payment processing, email communications, and website hosting. These providers are contractually obligated to protect your information.
• Healthcare Providers: With your explicit consent, we may share relevant health information with your healthcare providers for coordinated care
• Legal Requirements: We may disclose information if required by law, court order, or government regulation
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Secure servers with encryption for data transmission
• Access controls limiting who can view personal information
• Regular security audits and updates
• Secure physical storage for paper records
• Staff training on data protection procedures

While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but will notify you of any breach that may affect your rights.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:

• Session Records: Maintained for 7 years as required by Taiwan healthcare record-keeping regulations
• Contact Information: Retained while you remain an active client and for 2 years after your last session
• Marketing Data: Retained until you withdraw consent or request deletion
• Financial Records: Maintained for 7 years as required by Taiwan tax law

After the retention period expires, we securely delete or anonymize your information.

Your Rights

Under Taiwan's Personal Data Protection Act and applicable privacy laws, you have the following rights:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information (subject to legal retention requirements)
• Right to Restriction: Request limitation on how we process your information
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw your consent at any time where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

Children's Privacy

Our services are intended for individuals aged 18 and over. We do not knowingly collect personal information from children under 18 without parental consent. If you believe we have inadvertently collected information from a minor, please contact us immediately, and we will take steps to delete the information.

Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the new policy on our website and updating the "Last Updated" date. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.