1. Introduction
Riya Thai Massage by Kusnirik (“we”, “us”) is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP/revDSG), taking into account the principles of the EU GDPR. The Swiss Federal Data Protection and Information Commissioner (FDPIC) is our supervisory authority.
Data Controller:
Riya Thai Massage by Kusnirik
Schaffhauserstrasse 453, 8052 Zürich, Switzerland
+41 76 227 75 39 · info@riyathaimassage.ch
2. Information We Collect
Booking Information:
• Name, email address, and phone number
• Appointment details (service, date, time, chosen therapist)
• Optional notes you add to your booking
• Booking history related to your visits
Gift Card Orders:
• Buyer name and email address
• Gift card amount and payment reference
• Optional recipient name and personal message
Health Information:
• Only what you voluntarily disclose (e.g. injuries, pregnancy) so we can treat you safely
• Never required for booking
Technical Information:
• IP address, browser type, and device data
• Website usage via cookies and analytics (see Section 8)
3. How We Use Your Information
• Managing appointments: confirmations, reminders, changes, and cancellations
• Issuing and validating gift cards and promotional codes
• Responding to your enquiries
• Complying with legal obligations (e.g. accounting)
• Improving our website and services
• Measuring which of our own online advertisements (Google Ads) lead to bookings, see Section 8
• With your separate consent: using your email address in hashed (pseudonymised) form to show our own Google advertisements to existing guests or to exclude existing guests from them, see Section 8
4. Online Booking System (Zenarion)
Online bookings and gift card orders on our website are processed through Zenarion (zenarion.ch), a Swiss booking platform that acts as our data processor. Zenarion processes booking and gift card data exclusively on our behalf and under our instructions.
What this means for your data:
• Booking and gift card data is stored on servers in the EU
• Email addresses and phone numbers are stored encrypted
• Transactional emails are delivered via Resend (EU infrastructure)
• SMS notifications are delivered via Twilio; message routing may involve processing outside the EU under appropriate safeguards
• Your data is never sold or rented, and no third party may use it for its own advertising
5. Payment Information
In the Salon:
• Payments are made in person: cash, card via SumUp, or TWINT
• Card and TWINT payments are processed by those providers at the point of sale — we never see or store your card details
Online Gift Card Purchases:
• Paid by direct bank transfer to our business account (with a Swiss QR payment code for convenience)
• We receive only the standard transfer information from our bank (payer name, amount, reference)
• No online card payment processing takes place on our website
6. Data Security
• All data transmission is encrypted (HTTPS)
• Contact details in the booking system are encrypted at rest
• Access to personal data is restricted to what is necessary for operating the business
• We use appropriate technical and organisational measures to protect your data
7. Your Rights (Swiss FADP)
You have the right to:
• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Receive your data in a portable format
• Object to processing and withdraw consent at any time
To exercise any of these rights, contact us at info@riyathaimassage.ch. We respond to written requests in writing.
8. Cookies, Analytics and Advertising
Our Website Uses:
• Session cookies necessary for the website to function
• Language preference cookies (WPML)
• Google Analytics cookies to understand website traffic (anonymised where possible)
• Google Ads cookies to measure bookings resulting from our advertisements and, if you consent, for remarketing
Cookie Banner:
• Google Ads measurement cookies and analytics cookies are set unless you switch them off in the cookie banner; the hashed email transfer and ad personalisation described below happen only after you accept
• You can change your choice at any time via the cookie settings link in the footer or in your browser settings
• If you decline, the website and online booking work exactly the same
Google Ads – Conversion Measurement:
We advertise our salon with Google Ads. Unless you have switched off advertising cookies in the cookie banner, our website reports completed bookings and gift card orders to Google as a “conversion”, so that we can see which advertisements lead to bookings. This report contains the service, the amount, a booking reference and – so that the booking can be attributed to an advertisement click – only after you have accepted in the cookie banner, a hashed version of the email address you entered (“enhanced conversions”). Google cannot read your email address from the hash; it only compares it with the hashes of its own signed-in users.
Advertising Audiences (Customer Match):
Only if you have given us your consent, we transmit your email address in hashed form to Google so that we can show our own advertisements to existing guests (for example a reminder after a long time without a visit) or exclude existing guests from advertisements aimed at new customers. Google uses this data solely on our behalf to match it against Google accounts; it does not use it for its own purposes and does not share it with other advertisers. You can withdraw this consent at any time by emailing info@riyathaimassage.ch; we then remove your address from these audiences within 30 days.
Provider and Data Transfer:
Google Analytics and Google Ads are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the USA. Google is certified under the Swiss-US Data Privacy Framework, which the Swiss Federal Council recognises as providing adequate data protection. Further information: Google Privacy Policy and How Google uses data from sites that use its services.
Booking and Gift Card Widgets:
• The booking and gift card sections are provided by Zenarion and set no advertising or tracking cookies
• After a completed booking or order, the widget only signals our website that it took place, so that the conversion described above can be recorded
• Forms are protected against abuse by Cloudflare Turnstile (a privacy-friendly alternative to CAPTCHA)
• When you book, our website also tells the booking system how you reached our site (for example via a Google advertisement, our Google Maps listing or a search engine); this is stored with your booking for our own statistics, contains no personal identifiers and sets no cookies
Google Analytics receives no names, email addresses, or payment information.
9. Appointment Notifications
• Booking confirmations and appointment reminders are sent via email and/or SMS
• These are transactional messages related to your booking, not marketing
• Marketing communication is sent only with your consent, and you can opt out at any time
10. Hosting and Data Location
• This website is hosted on Amazon Web Services (AWS) in Frankfurt, Germany
• Booking and gift card data is processed by Zenarion on servers in the EU
• Your data remains in Switzerland/EU and is not transferred elsewhere unless legally required or noted above (SMS delivery; Google advertising and analytics services, see Section 8)
11. Data Retention
• Personal data is retained only as long as necessary for the purposes described above
• Booking records are kept for the duration of our business relationship
• Accounting-relevant records (e.g. gift card sales) are kept for 10 years as required by Swiss law
• You may request deletion at any time; we delete everything not subject to a legal retention duty
12. Age Restriction
• Our services are available to persons aged 16 and above
• Clients under 18 require written parental consent
• If we learn that data of a minor was collected without the required consent, we delete it
13. Your Controls
• Manage your booking (cancel/reschedule) via the personal link in your confirmation email
• Opt out of reminders and notifications at any time
• Manage cookies in your browser
• Request access to or deletion of your data via info@riyathaimassage.ch
• Change your cookie choices at any time via the cookie settings link in the footer
• Withdraw your consent to the advertising use of your email address at any time via info@riyathaimassage.ch
14. Contact Information
For all privacy matters:
• Email: info@riyathaimassage.ch
• Phone / WhatsApp: +41 76 227 75 39
• Address: Schaffhauserstrasse 453, 8052 Zürich, Switzerland
15. Policy Updates
• This policy may be updated as our services evolve
• Changes are published on this page with an updated effective date
• We encourage you to review this page periodically
