How we protect your privacy and your visit.

Gated entrance with private parking so you are not visible from the street. Soundproofed suites. Strict no-photo policy for staff and guests. Your name and booking details are kept on the host's phone and are not shared, sold, or used for marketing.

When you contact us we receive only what you choose to send — typically your name, the service you want, your preferred time, and (optionally) your email if you ask for a written confirmation. We use this strictly to confirm and deliver your booking and the related follow-up message.

After a booking we may send a confirmation email and a short WhatsApp follow-up with arrival details and a one-tap link to leave a Google review. Every email includes a one-click unsubscribe link.

Booking records are stored in our managed backend (Lovable Cloud, powered by Supabase) with row-level access controls so only authorised staff can read them. Transport between your browser and our servers is encrypted in transit (HTTPS). We do not process card payments on this website.

We rely on a small number of trusted services to operate the site and bookings: Lovable Cloud / Supabase (hosting and database), WhatsApp (messaging), Google Maps and Google Business Profile (location and reviews), and an email delivery provider for transactional confirmations.

We use minimal first-party storage required for the site to function and basic, privacy-respecting analytics to understand which services and neighborhood pages are most useful. We do not run third-party advertising trackers.

Booking records are kept only as long as needed to provide the service and answer follow-up questions. If you would like your information removed from our records, email oraclespa0@gmail.com with your booking reference and we will action it.

If you believe you have found a security or privacy issue with this website, please email oraclespa0@gmail.com with details so we can investigate. We appreciate responsible disclosure.