Privacy Policy

Last updated: 18 September 2026

ThaiSabai respects your privacy. This policy explains what personal data we collect, why we process it, how we protect it, and what rights you have. We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Slovenian law.

1. What we collect

Bookings

When you book a massage (via the online form or by email/phone) we collect your name, email address, phone number and booking details (chosen treatment, location, date and time).

Unfinished bookings and purchases

If you type your email address on the booking or gift-card page but do not finish, we store your email, the name and phone number you typed (if any) and your choices (treatment, location, date and time, or gift-card type and quantity). We send you one reminder with a link to continue. Every reminder contains an unsubscribe link. We delete this data 30 days after you typed it if no booking or purchase follows.

Contact form

When you send an enquiry we collect your name, email address, phone number (if provided) and the content of your message.

Gift card purchases

When you buy a gift card we collect your name, email address and the details needed to issue the voucher. Card payments are handled by our payment provider; we do not store your card details.

Website usage

When you visit the site, technical data (IP address, device and browser type) and usage data may be collected automatically through cookies and analytics tools.

2. Purposes and legal basis

• Fulfilling your booking and service — processing is necessary to perform our contract (your reservation).
• A question after your visit — after a massage we may write to you once to ask how satisfied you were, based on our legitimate interest in improving the service. Your answer is read by the ThaiSabai team and is not published. You can unsubscribe with the link in that email.
• A reminder about an unfinished booking or purchase — based on our legitimate interest in helping you finish what you started; you can unsubscribe at any time with the link in the email.
• Responding to enquiries — based on your consent or our legitimate interest in communicating with you.
• Gift cards and payments — to fulfil your order and comply with legal (e.g. accounting) obligations.
• Analytics and improvement — based on your consent (cookies).

3. Sharing your data

We do not sell personal data. We may share data with trusted processors who help us operate (a payment provider for online payments, hosting and email providers, analytics tools) and with authorities where required by law. All processors are bound to protect your data.

4. Data retention

We keep personal data only as long as necessary for the purposes for which it was collected, or as required by law (e.g. invoices are retained in accordance with accounting requirements). Data from unfinished bookings and purchases is deleted after 30 days. When data is no longer needed, we securely delete it.

5. Cookies and analytics

We use essential cookies for the site to function and — with your consent — analytics cookies (e.g. Google Analytics) to understand usage and improve the site. You can manage cookies at any time in your browser settings.

6. Your rights

Under the GDPR you have the right to access your data, rectification, erasure, restriction of processing, portability, objection, and to withdraw consent. To exercise your rights, email us at thaisabai.si.info@gmail.com.

If you believe the processing infringes your rights, you may lodge a complaint with the Slovenian Information Commissioner (www.ip-rs.si).

7. Changes

We may update this policy from time to time. The current version is always published on this page.