1. Introduction
Riya Thai Massage by Kusnirik (“we”, “us”) is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights. We process personal data in accordance with the Swiss Federal Act on Data Protection (FADP/revDSG), taking into account the principles of the EU GDPR. The Swiss Federal Data Protection and Information Commissioner (FDPIC) is our supervisory authority.
Data Controller:
Riya Thai Massage by Kusnirik
Schaffhauserstrasse 453, 8052 Zürich, Switzerland
+41 76 227 75 39 · info@riyathaimassage.ch
2. Information We Collect
Booking Information:
• Name, email address, and phone number
• Appointment details (service, date, time, chosen therapist)
• Optional notes you add to your booking
• Booking history related to your visits
Gift Card Orders:
• Buyer name and email address
• Gift card amount and payment reference
• Optional recipient name and personal message
Health Information:
• Only what you voluntarily disclose (e.g. injuries, pregnancy) so we can treat you safely
• Never required for booking
Technical Information:
• IP address, browser type, and device data
• Website usage via cookies and analytics (see Section 8)
3. How We Use Your Information
• Managing appointments: confirmations, reminders, changes, and cancellations
• Issuing and validating gift cards and promotional codes
• Responding to your enquiries
• Complying with legal obligations (e.g. accounting)
• Improving our website and services
4. Online Booking System (Zenarion)
Online bookings and gift card orders on our website are processed through Zenarion (zenarion.ch), a Swiss booking platform that acts as our data processor. Zenarion processes booking and gift card data exclusively on our behalf and under our instructions.
What this means for your data:
• Booking and gift card data is stored on servers in the EU
• Email addresses and phone numbers are stored encrypted
• Transactional emails are delivered via Resend (EU infrastructure)
• SMS notifications are delivered via Twilio; message routing may involve processing outside the EU under appropriate safeguards
• Your data is never sold, rented, or used for third-party advertising
5. Payment Information
In the Salon:
• Payments are made in person: cash, card via SumUp, or TWINT
• Card and TWINT payments are processed by those providers at the point of sale — we never see or store your card details
Online Gift Card Purchases:
• Paid by direct bank transfer to our business account (with a Swiss QR payment code for convenience)
• We receive only the standard transfer information from our bank (payer name, amount, reference)
• No online card payment processing takes place on our website
6. Data Security
• All data transmission is encrypted (HTTPS)
• Contact details in the booking system are encrypted at rest
• Access to personal data is restricted to what is necessary for operating the business
• We use appropriate technical and organisational measures to protect your data
7. Your Rights (Swiss FADP)
You have the right to:
• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Receive your data in a portable format
• Object to processing and withdraw consent at any time
To exercise any of these rights, contact us at info@riyathaimassage.ch. We respond to written requests in writing.
8. Cookies and Website Tools
Our Website Uses:
• Session cookies necessary for the website to function
• Language preference cookies (TranslatePress)
• Google Analytics cookies to understand website traffic (anonymised where possible)
Booking and Gift Card Widgets:
• The booking and gift card sections are provided by Zenarion and set no advertising or tracking cookies
• Forms are protected against abuse by Cloudflare Turnstile (a privacy-friendly alternative to CAPTCHA)
You can manage or block cookies in your browser settings at any time. No booking or payment information is shared with analytics services.
9. Appointment Notifications
• Booking confirmations and appointment reminders are sent via email and/or SMS
• These are transactional messages related to your booking, not marketing
• Marketing communication is sent only with your consent, and you can opt out at any time
10. Hosting and Data Location
• This website is hosted on Amazon Web Services (AWS) in Frankfurt, Germany
• Booking and gift card data is processed by Zenarion on servers in the EU
• Your data remains in Switzerland/EU and is not transferred elsewhere unless legally required or noted above (SMS delivery)
11. Data Retention
• Personal data is retained only as long as necessary for the purposes described above
• Booking records are kept for the duration of our business relationship
• Accounting-relevant records (e.g. gift card sales) are kept for 10 years as required by Swiss law
• You may request deletion at any time; we delete everything not subject to a legal retention duty
12. Age Restriction
• Our services are available to persons aged 16 and above
• Clients under 18 require written parental consent
• If we learn that data of a minor was collected without the required consent, we delete it
13. Your Controls
• Manage your booking (cancel/reschedule) via the personal link in your confirmation email
• Opt out of reminders and notifications at any time
• Manage cookies in your browser
• Request access to or deletion of your data via info@riyathaimassage.ch
14. Contact Information
For all privacy matters:
• Email: info@riyathaimassage.ch
• Phone / WhatsApp: +41 76 227 75 39
• Address: Schaffhauserstrasse 453, 8052 Zürich, Switzerland
15. Policy Updates
• This policy may be updated as our services evolve
• Changes are published on this page with an updated effective date
• We encourage you to review this page periodically
