1. Who We Are
For the purposes of data protection law, the data controller is:
Sun Valley Tan & Massage
Georgiou Papandreou 5, Thessaloniki
Email: s.valley.skg@gmail.com
Phone: 2310 815 353
If you have any questions about this Privacy Policy or how we use your personal data, you can contact us using the details above.
2. What Personal Data We Collect
We may collect and process the following types of personal data:
Information you provide directly
- Full name
- Email address
- Phone number
- Booking details
- Treatment or service preferences
- Messages or enquiries you send to us
- Newsletter subscription details
- Any information you choose to provide through forms, email, phone, or social media
Information collected automatically
When you visit our website, we may collect limited technical information such as:
- IP address
- Browser type and version
- Device type
- Pages visited
- Date and time of visit
- Cookies and similar tracking technologies
Health or treatment-related information
For certain services, we may ask you to provide relevant health or wellness information, such as allergies, injuries, pregnancy status, skin sensitivities, or other details that help us provide a safe and appropriate service.
We only collect this information when necessary and with your knowledge.
3. How We Use Your Personal Data
We use your personal data for the following purposes:
- To respond to your enquiries
- To manage bookings and appointments
- To provide beauty, wellness, massage, tanning, and treatment services
- To send appointment confirmations or reminders
- To personalise your experience and recommend suitable services
- To send newsletters, offers, and marketing communications where you have agreed to receive them
- To improve our website, services, and customer experience
- To comply with legal, tax, accounting, or regulatory obligations
- To protect our business, website, customers, and staff from fraud, misuse, or security risks
4. Legal Basis for Processing
Under the GDPR, we must have a lawful basis for using your personal data. Depending on the situation, we rely on one or more of the following legal bases:
Contract
We process your data when it is necessary to provide a service you have requested, such as making or managing a booking.
Consent
We rely on your consent when you subscribe to our newsletter, agree to receive marketing communications, or provide certain health-related information.
You can withdraw your consent at any time.
Legal obligation
We may process your data when required to comply with legal, tax, accounting, or regulatory obligations.
Legitimate interests
We may process your data where it is necessary for our legitimate business interests, such as improving our services, responding to enquiries, protecting our website, or managing customer relationships, provided your rights and freedoms do not override those interests.
5. Marketing Communications
If you subscribe to our newsletter or agree to receive marketing communications, we may send you emails about Sun Valley Tan & Massage services, offers, wellness campaigns, beauty treatments, tanning, massage, and related updates.
You can unsubscribe at any time by clicking the unsubscribe link in our emails or by contacting us directly.
We do not sell your personal data to third parties.
6. Cookies and Website Tracking
Our website may use cookies and similar technologies to improve functionality, analyse website traffic, and understand how visitors use our website.
Cookies may be used for:
- Website functionality
- Analytics
- Performance monitoring
- Remembering preferences
- Marketing or advertising, where applicable
Where required by law, we will ask for your consent before placing non-essential cookies on your device.
You can control or delete cookies through your browser settings.
7. Third-Party Services
We may use trusted third-party service providers to help us operate our business and website. These may include:
- Website hosting providers
- Booking platforms
- Email marketing platforms, such as EmailOctopus
- Analytics providers
- Payment providers
- IT and security service providers
- Professional advisers, such as accountants or legal consultants
These providers may process personal data only where necessary to provide their services to us and must protect your data appropriately.
8. International Data Transfers
Some of our service providers may process or store personal data outside the European Economic Area.
Where this happens, we will take appropriate steps to ensure your personal data remains protected, such as using approved contractual safeguards or ensuring that the provider operates in a country with adequate data protection standards.
9. How Long We Keep Your Data
We keep your personal data only for as long as necessary for the purposes described in this Privacy Policy.
In general:
- Enquiry data is kept for as long as needed to respond and manage customer communication.
- Booking and customer records are kept for as long as necessary for business, legal, tax, and accounting purposes.
- Marketing data is kept until you unsubscribe or withdraw consent.
- Website analytics data is kept for a limited period according to the settings of the analytics provider.
When personal data is no longer needed, we will delete it or anonymise it securely.
10. How We Protect Your Data
We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, disclosure, alteration, or destruction.
These measures may include:
- Secure website hosting
- Password-protected systems
- Access controls
- Staff confidentiality
- Secure communication tools
- Regular review of data handling practices
However, no method of online transmission or electronic storage is completely secure, and we cannot guarantee absolute security.
11. Your GDPR Rights
Under the GDPR, you have the following rights in relation to your personal data:
- The right to access the personal data we hold about you
- The right to correct inaccurate or incomplete data
- The right to request deletion of your personal data
- The right to restrict processing
- The right to object to processing
- The right to data portability
- The right to withdraw consent at any time
- The right to lodge a complaint with a data protection authority
To exercise your rights, please contact us at:
We may need to verify your identity before responding to your request.
12. Complaints
If you are unhappy with how we handle your personal data, please contact us first so we can try to resolve the matter.
You also have the right to lodge a complaint with your local data protection authority.
In Greece, the relevant authority is:
Hellenic Data Protection Authority
Website: www.dpa.gr
13. Adults Only
Our services are intended only for adults aged 18 and over.
We do not knowingly collect personal data from anyone under the age of 18. If we become aware that we have collected personal data from a person under 18, we will delete it where required.
14. Links to Other Websites
Our website may contain links to third-party websites, social media pages, or booking platforms.
We are not responsible for the privacy practices, content, or security of those third-party websites. We encourage you to read their privacy policies before providing any personal data.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, website, legal obligations, or data protection practices.
The latest version will always be available on our website, with the date of the most recent update shown at the top.
16. Contact Us
For questions about this Privacy Policy or how we handle your personal data, please contact:
Sun Valley Tan & Massage
Georgiou Papandreou 5, Thessaloniki
Email: s.valley.skg@gmail.com
Phone: 2310 815 353