Privacy Policy

Last Updated: July 25, 2025

Waikiki Resort Spa is committed to protecting your privacy. This Privacy Policy ("Policy") explains how we collect, use, disclose, and safeguard your personal information when you visit our website located at https://www.waikikiresorthotelspa.com/ (the "Website"), book or receive our services, or otherwise interact with us (collectively, the "Services"). By accessing or using the Website or Services, you consent to the practices described in this Policy.

If you do not agree with this Policy, please do not access or use the Website or Services. This Policy applies to all users, including visitors, clients, and others who interact with us. We may update this Policy from time to time, and changes will be effective upon posting the revised Policy on the Website with an updated "Last Updated" date. Your continued use of the Website or Services after any changes constitutes your acceptance of the updated Policy.

1. Information We Collect

We collect information that you provide directly to us, as well as information collected automatically or from third parties. The types of information we may collect include:

Personal Information

Contact Information: Name, email address, phone number, mailing address, and other similar details provided when you book an appointment, sign up for newsletters, or contact us.
Booking and Service Information: Details about your appointments, preferences for services (e.g., type of massage, therapist preferences), payment information (e.g., credit card details processed through secure third-party providers), and any health-related information you voluntarily provide (e.g., medical conditions, allergies, or wellness goals to customize your experience).
Account Information: If you create an account on the Website, we collect your username, password, and any profile details.
Communication Information: Any information you provide in emails, forms, surveys, or feedback submissions.

Automatically Collected Information

Usage Data: Information about your interactions with the Website, such as IP address, browser type, operating system, pages viewed, time and date of visits, and referring/exit pages.
Device Information: Details about the device you use to access the Website, including hardware model, unique device identifiers, and mobile network information.
Cookies and Tracking Technologies: We use cookies, web beacons, and similar technologies to enhance your experience, analyze usage, and deliver personalized content. For more details, see the "Cookies and Tracking Technologies" section below.

Information from Third Parties

We may receive information from third-party sources, such as payment processors, social media platforms (if you interact with us there), or partners, to supplement the information we collect.

We do not collect sensitive personal information (e.g., racial or ethnic origin, political opinions, religious beliefs) unless voluntarily provided by you for service customization, and we handle such information with extra care.

2. How We Use Your Information

We use the information we collect for the following purposes:

Providing Services: To process bookings, schedule appointments, customize treatments, and deliver spa services.
Payment Processing: To handle transactions securely through third-party providers.
Communication: To send confirmations, reminders, promotional offers, newsletters, or responses to your inquiries. You may opt out of marketing communications at any time.
Improving Our Services: To analyze usage patterns, troubleshoot issues, and enhance the Website and Services.
Legal Compliance: To comply with applicable laws, regulations, or legal processes, and to protect our rights, property, or safety, or that of others.
Marketing and Advertising: To provide personalized recommendations or ads based on your preferences, with your consent where required.

We may aggregate or anonymize information for statistical purposes, which does not identify you personally.

3. Sharing Your Information

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers: With third-party vendors who assist us in operating the Website and Services, such as payment processors, email service providers, or IT support, under strict confidentiality agreements.
Business Partners: With affiliates or partners for joint marketing or service delivery, with your consent.
Legal Requirements: If required by law, subpoena, or court order, or to respond to government requests.
Business Transfers: In connection with a merger, acquisition, or sale of assets, where your information may be transferred as a business asset.
With Your Consent: For any other purpose disclosed at the time of collection or with your explicit permission.

We ensure that any third parties receiving your information adhere to appropriate data protection standards.

4. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, use, alteration, or destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

In the event of a data breach, we will notify you and relevant authorities as required by law.

5. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights regarding your personal information:

Access: Request a copy of the information we hold about you.
Correction: Update or correct inaccurate information.
Deletion: Request deletion of your information, subject to legal obligations.
Opt-Out: Unsubscribe from marketing communications or object to certain processing.
Portability: Receive your information in a portable format.
Withdraw Consent: Revoke consent where processing is based on it.

To exercise these rights, contact us using the details in the "Contact Us" section. We may verify your identity before responding. We respond to requests within a reasonable timeframe, as required by law.

You can also manage cookies through your browser settings (see below).

6. Cookies and Tracking Technologies

We use cookies and similar technologies for functionality, analytics, and advertising:

Essential Cookies: Necessary for the Website to function, such as maintaining sessions.
Analytics Cookies: To track usage and improve performance (e.g., Google Analytics).
Advertising Cookies: To deliver relevant ads on third-party sites.

You can control cookies via your browser settings or by opting out through tools like the Network Advertising Initiative (NAI) opt-out page or the Digital Advertising Alliance (DAA) opt-out page. Note that disabling cookies may limit Website functionality.

We do not track users across third-party sites for behavioral advertising without consent, and we honor "Do Not Track" signals where applicable.

7. Children's Privacy

Our Website and Services are not intended for children under 13 years of age (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information promptly. If you believe a child has provided us with information, please contact us.

8. International Data Transfers

If you are located outside [jurisdiction, e.g., the United States], your information may be transferred to and processed in [jurisdiction, e.g., the United States], where data protection laws may differ. By using the Website or Services, you consent to such transfers. We use appropriate safeguards, such as standard contractual clauses, to protect your information.

9. Retention of Information

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, resolve disputes, or enforce agreements. For example, booking records may be kept for [e.g., 7 years] for tax purposes. After retention periods, we securely delete or anonymize the information.

10. Third-Party Links

The Website may contain links to third-party sites. We are not responsible for their privacy practices. We encourage you to review their policies before providing information.