Privacy Policy
Effective Date: July 28, 2026
Mykonos Spa, a premium men’s wellness destination specializing in male-to-male spa therapies in Delhi and Gurugram, is dedicated to upholding the highest standards of privacy and confidentiality for its clientele. This document establishes a comprehensive framework for the collection, processing, and protection of personal data in accordance with the Digital Personal Data Protection Act (DPDP Act), 2023 of India. We recognize that the nature of our specialized services necessitates a heightened level of discretion and security, and we are committed to ensuring that every guest’s privacy is respected throughout their wellness journey.
1. Scope and Consent
This Privacy Policy applies to all personal information collected through the Mykonos Spa website (mykonosindelhi.com), booking platforms, and during in-person interactions at our physical locations. By engaging with our services, users acknowledge and provide their informed consent for the processing of their personal data as described herein.
“Personal Data” refers to any data about an individual who is identifiable by or in relation to such data.
We maintain a rigorous policy of transparency regarding our data practices. The following table outlines the primary categories of data collected and the corresponding legal basis for processing:
Data Category | Specific Examples | Legal Basis for Processing |
Identity Data | Name, Age, Gender Identity | Contractual Necessity (Service Delivery) |
Contact Data | Email Address, Phone Number | Legitimate Interest (Communication & Updates) |
Transaction Data | Booking History, Service Preferences | Contractual Necessity (Appointment Management) |
Technical Data | IP Address, Browser Type, Device ID | Legitimate Interest (Website Optimization) |
Sensitive Data | Health considerations, specific service requests | Explicit Consent (Safety & Personalization) |
2. Information Acquisition and Methodology
The acquisition of personal data is conducted through both direct and automated methodologies to ensure a seamless and personalized experience. Direct interactions occur when a guest voluntarily provides information through booking forms, contact inquiries, or account registration. These interactions are essential for the establishment of a service agreement and the fulfillment of specific wellness requirements.
Automated data collection is facilitated through the deployment of cookies and similar tracking technologies. These tools allow us to analyze website traffic patterns, monitor system performance, and enhance user engagement by remembering individual preferences. Guests maintain the right to manage their cookie settings through their respective web browsers, although certain website functionalities may be limited if cookies are disabled.
3. Purpose and Utilization of Personal Data
The utilization of personal data is strictly confined to the purposes for which it was collected. Primarily, this information is used to facilitate the scheduling and delivery of professional spa treatments, including Thai, Swedish, and Deep Tissue massages. Furthermore, contact information is utilized to provide appointment confirmations, service reminders, and relevant promotional materials, provided the guest has opted into such communications.
Purpose of Processing | Description of Activity |
Service Fulfillment | Managing appointments and ensuring therapists are prepared for specific requests. |
Customer Support | Responding to inquiries and resolving service-related issues efficiently. |
Operational Analytics | Monitoring website performance to improve user experience and interface design. |
Security & Compliance | Preventing fraudulent activities and adhering to statutory legal requirements. |
4. Data Security and Confidentiality Protocols
Mykonos Spa implements robust technical and organizational security measures to protect personal data against unauthorized access, disclosure, or destruction. Our infrastructure utilizes encryption protocols for data in transit and secure storage solutions for data at rest. Given our position as a safe and inclusive space for the gay community in Delhi, we treat all client information with the utmost discretion.
We do not sell or lease personal data to third-party marketers. Disclosure of information is limited to trusted service providers who assist in our operations, such as payment processors and booking platform administrators, all of whom are contractually bound to maintain confidentiality. Legal disclosures are made only when mandated by valid judicial or governmental orders in accordance with Indian law.
5. Data Retention and Erasure
In compliance with the DPDP Act 2023, personal data is retained only for the duration necessary to fulfill the specified purposes or as required by applicable law. Upon the conclusion of the retention period or upon a valid request for erasure, data is either securely deleted or anonymized to prevent future identification.
6. Rights of the Data Principal
Under the prevailing data protection laws in India, guests (referred to as “Data Principals”) are afforded several fundamental rights regarding their personal information. These rights empower individuals to maintain control over their digital footprint and ensure the accuracy of the data held by Mykonos Spa.
Right | Description |
Right to Access | The ability to request a summary of personal data being processed. |
Right to Correction | The ability to update inaccurate or incomplete information. |
Right to Erasure | The ability to request the deletion of data no longer required for its original purpose. |
Right to Grievance Redressal | The ability to report concerns regarding data handling practices. |
7. Compliance and Contact Information
Mykonos Spa remains committed to ongoing compliance with evolving privacy regulations. For any inquiries, requests to exercise data rights, or concerns regarding this policy, please contact our designated Privacy Officer:
Mykonos Spa Privacy Office
•Email: info@mykonosindelhi.com
•Phone: +91 8800309121, +91 9643331036
•Address: Hauz Khas, New Delhi, India