Privacy policy
This policy explains how Be.YOU.tiful Spa Ltd (“BYT”, “we”), 27a Alternative Route, Chevron Drive, Lekki, Lagos, uses the details you give us when you book a treatment, chat with us on WhatsApp or use this website. We handle personal data in line with the Nigeria Data Protection Act 2023.
What we collect
- Booking details: your name, phone number, email address, the treatments, date and time you choose, any notes you add (for example allergies or preferences), and your address if you book a home service.
- Payments: the amount, date and payment reference. Card and bank details are entered on Paystack’s secure page; we never see or keep your full card number.
- WhatsApp messages: what you send us on WhatsApp and our replies, so we can answer you and manage your booking.
How we use it
- To confirm, prepare for and carry out your treatment, and to contact you about it (for example a reminder before your appointment).
- To take payment and keep the records the law requires.
- After your visit, to ask how it went and invite a review. You can tell us to stop at any time.
- Only if you tick “Send me BYT offers and news”, to email you our offers and news. Every offer email has an unsubscribe link, and you can also ask us to stop on WhatsApp.
We don’t sell your details or share them for other companies’ marketing.
Who helps us
- Paystack processes payments.
- Meta (WhatsApp) carries our WhatsApp messages.
- Resend sends our emails (booking confirmations, reminders and, if you asked for them, offers).
- Vercel hosts this website and booking system, and Neon stores bookings (servers in London, United Kingdom).
- When our WhatsApp assistant is switched on, Anthropic provides the AI that helps answer messages. Our team can always take over the conversation.
Some of these services process data outside Nigeria. When that happens we rely on the safeguards the Nigeria Data Protection Act allows, such as the provider’s contractual commitments to protect your data.
How long we keep it
We keep booking details for as long as we need them to look after you as a guest and to meet tax and accounting rules (usually up to 6 years for payment records). You can ask us to delete your details sooner, unless we have to keep them by law.
Your rights
You can ask to see the details we hold about you, correct them, delete them, or object to how we use them. Message us on WhatsApp or visit the spa, and we’ll reply within 30 days. If you’re unhappy with our answer, you can complain to the Nigeria Data Protection Commission.
Cookies
This website doesn’t use advertising cookies. Our visitor statistics are counted without cookies and without identifying you.
Changes
We’ll update this page if anything changes. The date at the top shows the latest version.