RelaxClubs — Privacy Policy

RelaxClubs.com ("RelaxClubs," "we," "us," or "our") operates RelaxClubs.com (the "Platform"), a marketplace for discovering and booking relaxation and wellness venues. This Privacy Policy explains what information we collect, how we use and share it, and the rights you have. It applies to customers, venue operators ("Merchants"), and visitors.

1. Information We Collect

1.1 Information you provide as a customer

Booking information: your name, email address, and phone number, together with the venue, service, date, and time you book — needed to create the booking and to let the Merchant confirm and manage your visit.
Account information: if you create an account, your name, email address, and a hashed password.
Reviews and communications: reviews you write, and messages you send us (for example by email).

1.2 Information you provide as a Merchant

Business information: legal business name and business registration documents, venue name, address, phone number, service listings, prices, hours, and venue photos you upload (which must be your own or content you have the right to use).
People responsible for the venue: the name and phone number of a person in charge of the business and of a day-to-day contact person, which we use to communicate with you about your account, bookings, and compliance matters.
Payout and identity information: collected and verified by Stripe during Stripe Connect onboarding (including KYC identity and bank details). Stripe processes this information under its own privacy policy; we receive and store only the Stripe account identifier, onboarding status, and payout status — not your bank credentials or government ID documents.

1.3 Payment information

Payments are processed by Stripe. We never receive or store your full card number. We store transaction records — amount, currency, booking reference, and Stripe's transaction identifiers — needed to operate the Platform, process refunds, and settle commission.

1.4 Location and address information

Customer location: if you grant browser geolocation permission on discovery or search pages, we use your latitude and longitude to sort venues by distance. Coordinates may appear in the page URL (and therefore in your browser history). They are used for that sorting request only and are not written to our database.
Address autocomplete: when a Merchant types a venue address, the partial address is sent to our geocoding provider to return address suggestions and coordinates, as described in Section 4.

1.5 Information collected automatically

Technical and log information: IP address, browser and device type, pages visited, and timestamps, used for security, abuse prevention, and troubleshooting.
Cookies: as described in Section 5.

2. How We Use Information

We use the information we collect to:

Create, confirm, and manage bookings, and process payments, refunds, and commission settlement (through Stripe Connect application fees);
Let Merchants manage their listings, bookings, and reviews, and communicate with their customers about a booking;
Communicate with Merchants through their person in charge and contact person about account, payout, and compliance matters;
Display venue information — including venue photos, address, and the venue's public phone number — to customers on the Platform;
Verify Merchant registration documents and licenses, and enforce our Terms and Merchant Agreement, including our zero-tolerance policy on illegal services;
Maintain security, prevent fraud and abuse, debug and improve the Platform;
Comply with legal obligations.

We do not sell your personal information to third parties.

3. Legal Bases (EEA and UK Users)

Where the GDPR or UK GDPR applies, we process personal information on the following bases: performance of a contract (bookings and Merchant accounts), our legitimate interests (operating, securing, and improving the Platform and verifying Merchants), compliance with legal obligations, and consent (for example, browser geolocation, which you may withdraw at any time in your browser settings).

4. How We Share Information

Merchants: when you make a booking, your booking information (name, contact details, service, date, and time) is shared with that Merchant so it can provide the service.
Stripe: payment processing, merchant identity verification, and payouts are handled by Stripe under Stripe's privacy policy.
Hosting and infrastructure: the Platform is hosted on Vercel, and our database is provided by Neon. These providers process data only as needed to operate the Platform.
Map, geocoding, and address services: address autocomplete and map-related features rely on third-party geocoding providers (such as Photon by Komoot, based on OpenStreetMap data). Partial addresses typed into the venue form are sent to the provider to return suggestions; venue addresses and coordinates are used to display venue locations.
Legal and safety: we may disclose information when required by law, legal process, or a lawful request from authorities, or to enforce our policies and protect users, Merchants, and the public.

5. Cookies

We use strictly necessary cookies to keep merchant and administrator sessions signed in and to remember your language preference. Administrator session cookies are httpOnly and cannot be read by front-end scripts. We do not use cookies for third-party advertising. If we introduce analytics cookies in the future, we will update this Policy and, where required, ask for your consent first.

6. Data Retention

Booking and transaction records are retained for as long as needed for tax, accounting, and financial record-keeping obligations — generally up to seven (7) years — and are then deleted or anonymized.
Merchant account and listing information is retained while the account is active; registration and compliance records may be retained after closure where required for legal compliance, fraud prevention, or dispute resolution.
Reviews remain published while the related listing is active, subject to our moderation policies.
Technical logs are retained for a limited period for security and troubleshooting.

7. Data Security

All traffic to the Platform is encrypted with HTTPS. Passwords are stored hashed; administrator credentials are never stored in plain text. Access to personal information is limited to personnel and service providers who need it to operate the Platform. No system is perfectly secure, but we take reasonable administrative and technical measures to protect your information.

8. International Data Transfers

RelaxClubs is operated from the United States, and our infrastructure providers process data primarily in the United States. If you access the Platform from outside the United States, your information will be transferred to and processed in the United States, whose data protection laws may differ from those of your jurisdiction. Where required, we rely on appropriate safeguards for such transfers.

9. Your Rights and Choices

Subject to applicable law, you may:

Access a copy of the personal information we hold about you;
Correct inaccurate or incomplete information;
Delete your personal information, subject to retention obligations described in Section 6;
Withdraw consent where processing is based on consent (for example, disable geolocation in your browser settings);
Close your account (customers and Merchants);
Object to or restrict certain processing, and request portability of your data, where the GDPR or UK GDPR applies.

California residents: under the CCPA/CPRA you have the right to know, delete, and correct personal information, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we do not discriminate against you for exercising your rights.

To exercise any right, contact us at [email protected]. We respond to verified requests within 30 days.

10. Children's Privacy

The Platform is intended for adults. You must be at least 18 years old to create an account or make a booking. We do not knowingly collect personal information from children under 16; if we learn that we have collected such information, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy. Material changes will be announced on the Platform before taking effect, and the "Last updated" date below will be revised. Continued use of the Platform after the effective date constitutes acceptance of the updated Policy.

12. Contact Us

Questions or requests about this Privacy Policy or your personal information: [email protected]

Last updated: October 13, 2026