Privacy Policy

1. Introduction

moonpetales is committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

By using our services or providing us with your information, you consent to the practices described in this policy. If you have questions about our privacy practices, please contact us at [email protected].

2. Information We Collect

2.1 Information You Provide

When you book a session or contact us, we collect:

• Name and contact information (email address, phone number)
• Health information relevant to massage sessions (areas of concern, medical conditions, pregnancy status)
• Session preferences and practitioner requests
• Communication history with our practice

2.2 Information Collected Automatically

When you visit our website, we automatically collect:

• IP address and device information
• Browser type and version
• Pages visited and time spent on site
• Referring website or source
• Cookie data (see Cookie Policy for details)

3. How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: Schedule and provide massage sessions tailored to your needs
• Communication: Respond to inquiries, send appointment confirmations, and provide session-related information
• Health Records: Maintain session notes to ensure continuity of care across visits
• Website Improvement: Analyze usage patterns to enhance user experience
• Legal Compliance: Meet regulatory requirements and protect our legal rights

4. Legal Basis for Processing

We process your personal data based on:

• Consent: You've agreed to provide information for specific purposes
• Contract Performance: Processing is necessary to deliver services you've requested
• Legitimate Interest: Processing helps us operate our business while respecting your rights
• Legal Obligation: Processing is required by law (tax records, health regulations)

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

• Service Providers: Website hosting, email services, payment processing (all bound by confidentiality)
• Legal Requirements: When required by law, court order, or regulatory authority
• Business Transfers: In connection with merger, sale, or transfer of business assets

We do not share your information with third-party marketers or advertisers.

6. Data Retention

We retain your information for different periods depending on the type:

• Health Records: 7 years from last session (Taiwan medical record requirements)
• Contact Information: Until you request deletion or 2 years after last contact
• Website Analytics: 26 months maximum
• Financial Records: 7 years (tax compliance)

7. Data Security

We implement appropriate security measures to protect your information:

• Encrypted data transmission (SSL/TLS)
• Secure storage systems with access controls
• Regular security assessments and updates
• Staff training on privacy and data protection
• Physical security measures at our location

8. Cookies and Tracking

Our website uses cookies for functionality and analytics. For detailed information about cookie usage, please see our Cookie Policy.

You can manage cookie preferences through your browser settings or our cookie consent tool.

9. Your Privacy Rights

Under Taiwan's Personal Data Protection Act, you have the right to:

• Access: Request a copy of your personal data we hold
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your data (subject to legal retention requirements)
• Data Portability: Receive your data in a structured, commonly used format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw previously given consent at any time

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect information from minors without parental consent. If you believe we have collected information from a minor inappropriately, please contact us immediately.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies before providing any information.

12. International Data Transfers

Your information is primarily stored and processed in Taiwan. If data is transferred internationally, we ensure appropriate safeguards are in place to protect your information according to applicable laws.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Significant changes will be communicated through:

• Email notification to registered users
• Prominent notice on our website
• Updated "Last Updated" date at the top of this policy

Continued use of our services after changes indicates acceptance of the updated policy.

14. Supervisory Authority

If you have concerns about our data practices that we cannot resolve, you may lodge a complaint with:

National Development Council, Department of Cyber Security
Personal Data Protection Commission
Taiwan

15. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal data: