Privacy Policy.

1. Introduction.
 
Protecting your personal data is a priority for Bora Bora Zen Massage.
This Privacy Policy aims to provide you with transparent information on how your data is collected, used, stored, and protected when you use our website.
 
2. Data Controller.
 
The data controller responsible for your personal information is: Caroline Le Carpentier
Address: Bora Bora, Polynésie française
Email: boraborazenmassage@gmail.com
Phone: +689 87 35 34 03
 
3. Data Collected.
 
We collect only the data strictly necessary for the management of our services:
 

• Information submitted via the contact form (name, surname, email, phone, message).

• Information submitted via the booking form (contact details, massage preferences, requested date/time).

• Browsing data (via cookies or analytics tools, e.g., Google Analytics).

We do not collect sensitive data without your explicit consent.
 
4. Purpose of Data Collection.
 
Your personal data is used for the following purposes:
 

• Responding to your contact requests or inquiries.

• Organizing and scheduling massage appointments.

• Improving the quality of our services and your user experience on the site.

• Carrying out anonymous statistical analyses when applicable.

5. Legal Basis for Processing.
 
The collection of your data is based on:
 

• Your consent (contact form, cookies).

• The performance of a contract or pre-contractual measures (massage booking).

• Compliance with legal obligations (invoicing, data retention).

6. Data Retention.
 

• Data collected via forms is retained for a maximum period of three (3) years after the last contact.

• Data required for invoicing is kept for the legal accounting retention period.

7. Data Recipients.
 
Your data is intended exclusively for Bora Bora Zen Massage and will never be sold to third parties.

They may be processed by our technical providers (hosting by Wix, email or analytics tools) in strict compliance with GDPR.
 
8. Data Hosting.
 
The data collected is hosted by: Wix Online Platform Limited.
 
Wix implements security measures in line with international standards to protect your data.
 
9. Your Rights.
 
In accordance with GDPR, you have the following rights:
 

• Right of access to your data.

• Right to rectification if your data is incorrect.

• Right to deletion of your data (right to be forgotten).

• Right to object to or restrict processing.

• Right to data portability.

To exercise your rights, please contact us at: boraborazenmassage@gmail.com
 
10. Cookies and Tracking Tools.
 
We use cookies in order to:
 

• Improve user experience (navigation, display).

• Produce anonymous traffic statistics (via Google Analytics).

You may accept, refuse, or configure the use of cookies through your browser or the settings available on the site.
 
11. Data Security.
 
We implement all necessary technical and organizational measures to protect your data against loss, alteration, disclosure, or unauthorized access.
 
12. Governing Law and Jurisdiction.
 
This Privacy Policy is governed by French law. In the event of a dispute, exclusive jurisdiction is granted to the courts of French Polynesia.