Skip to content

Legal

Privacy policy

What this site does with your information, which is very little.

Privacy policy

Last updated 6 September 2026

This is a description of what this website actually does with your information, written from the code that does it. It is short because the site does very little: it shows no advertising, sends no email, and uses one outside service, Google Analytics, to count visits.

  1. Who is responsible

    EropSpa, Bangalore. You can reach us on +91 96867 66006 or at care@eropspa.com.

    TODO. The registered entity behind EropSpa and a named grievance officer must be added here before launch. India's Digital Personal Data Protection Act 2023 requires a named contact for data complaints.

  2. What we collect, and only when you send it

    Nothing is collected from you by simply reading this site. There is no analytics script, no pixel and no fingerprinting. The site collects information only when you choose to send it, through a form, or through the account you choose to create:

    • THE BOOKING FORM: the treatment, the area, the date and time you asked for, your name and your phone number. It also records which buttons you pressed on the way there, so the desk can see what you were looking at.
    • THE CONTACT AND FEEDBACK FORM: your name, phone, email, the topic you picked and your message.
    • AN ACCOUNT, IF YOU CREATE ONE: your name, phone, email and your password. The password is stored as a bcrypt hash and never as text. We cannot read it, and nobody here can tell you what it is.
    • ANYTHING YOU ADD TO YOUR ACCOUNT PAGE, ALL OF IT OPTIONAL: a short note about yourself, a website address and your date of birth. You can change or delete any of the three at any time by emptying the box and saving. Nothing on this site requires them and nothing behaves differently when they are set.
    • A PHOTOGRAPH, IF YOU UPLOAD ONE: it is re-saved by our server before it is stored, which removes the hidden data your camera attaches, including the location the picture was taken. It is kept outside the website where no web address reaches it, is shown only to you and to the desk, and is deleted from the server when you remove it.
    • THE THERAPISTS AND REELS YOU SAVE, IF YOU ARE SIGNED IN: the list of profiles and videos you have tapped the heart on, stored against your account. Tap the heart again and the entry is removed. Other visitors never see your list; the "most favourited" ranking on our therapists page shows only how many accounts saved each therapist, never whose.
    • COMMENTS ON OUR VIDEOS, IF YOU ARE SIGNED IN: the comment you write, the date, which video it is on, and your account. It is published with your first name and the initial of your surname only, and only after our desk has read and approved it. A comment the desk does not approve is kept but never shown; ask us and we will remove it entirely.
  3. Likes on our videos

    Anyone can like one of our videos once. To know that you already have, without a cookie and without an account, we keep a one-way scrambled code made from your internet address and that video, using a secret key that stays on our server. Your internet address itself is never stored, and the code cannot be turned back into it. Press the heart again and the code is deleted. People sharing one Wi-Fi network share one like. The only thing shown is how many likes each video has.

  4. What is counted, with nothing about you in it

    Three counters on this site record numbers and nothing else: how many times each therapist profile has been opened, whether a help-centre answer was voted useful, and which of two treatments visitors picked in the weekly pairing. None of them records who you are, what device you used or where you were. The "most viewed this week" list on our therapists page is read straight from the first of them.

  5. Cookies

    Our own cookies are strictly necessary: one keeps you signed in, and is set only if you sign in (a second, which remembers that you confirmed you are 18 or over, is used only while our age notice is switched on). Google Analytics also sets its own cookies to count visits. All of them are described on our cookies page.

  6. Google Analytics

    We use Google Analytics to understand how many people visit the site, which pages they read and which device and city they come from, so we can improve it. Your browser sends this to Google directly, with your IP address and a random visitor ID stored in a Google cookie. Google processes it under its own privacy policy.

    Google Analytics never receives what you send through our booking, contact or account forms: your name, phone number, booking details and messages stay on our own server. You can block it with your browser's privacy settings or Google's opt-out add-on, and the site works exactly the same without it.

  7. Who else sees it

    What you send us through a form is not sold, not shared and not passed to an advertising network. Apart from Google Analytics, described above, every font, stylesheet and image is served from our own server.

    It is stored on the server that runs this site and read by the people at EropSpa who arrange your booking.

  8. How long we keep it

    TODO. A retention period has not been decided. Booking requests and messages are currently kept indefinitely. Set a period, write it here, and delete what is older than it.

  9. What you can ask for

    Write to care@eropspa.com or call +91 96867 66006 and you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. If you have an account you can also delete it by asking; there is no button for it yet.

  10. Children

    This is an adults-only service. We do not knowingly collect information from anyone under 18, and the site asks you to confirm your age before you use it.

Something here unclear, or wrong? Call +91 96867 66006 or write to care@eropspa.com.