Legal
Privacy Policy
Before you publish this: this policy is a working draft written to be accurate about how Sensa operates. It has not been reviewed by a lawyer, and it must be checked against the data-protection law of every jurisdiction you operate in before it is relied upon.
Two different roles
Sensa handles personal data in two capacities, and the distinction matters.
- On this website, we are the controller of the small amount of data you give us — principally an email address if you write to us.
- In the platform, your spa is the controller of your guests' data and Sensa is a processor acting on your instructions. We do not decide what guest data you collect or why.
What this website collects
This site sets no advertising cookies, embeds no tracking pixels and runs no third-party analytics. It loads a web font from Google Fonts, which means Google receives the request for that font — see Cookies.
If you email us, we hold your message and address so we can reply and keep a record of the conversation. We do not add you to a marketing list you did not ask for.
What the platform holds
Sensa stores what a spa needs to operate: guest identity and contact details, appointment and visit history, preferences, clinical and consultation records where the property records them, transactions, invoices, receipts and staff account information.
Clinical information is treated as a special category. It is separated from ordinary personal data at the permission level so that only roles entitled to see it can.
Legal basis
For website enquiries, our legitimate interest in responding to you. For platform data, the basis is your spa's to determine as controller — normally contract for delivering a booked treatment, and explicit consent for clinical records.
Sharing
We do not sell personal data and we do not share it for advertising. Data is disclosed only to subprocessors necessary to run the service, where required by law, or on your instruction.
Retention
Website enquiries are kept while the conversation is live and for a reasonable period after. Platform data is retained for as long as your spa instructs; clinical records are retained for the period your regulator requires.
Your rights
Depending on where you live, you may have rights of access, correction, erasure, restriction, portability and objection. If you are a guest of a spa that uses Sensa, address your request to that spa: they are the controller, and we will support them in answering it.
Security
Described in full on our Security page, including what we have not yet certified.