Privacy Policy
Effective date: June 2026
Introduction
Zin Bladi (“we”, “us”, “our”) operates a Moroccan Hammam in Glasgow. We respect your privacy and are committed to protecting personal data. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, how long we keep it, and your rights.
Contact
Email: info@zinbladi.co.uk
Phone: +44 7310 830025
Postal address: 71-73 Kingston St, Kinning Park G5 8BJ
Location: Glasgow, United Kingdom
Data Collected and How We Use It
We collect only the personal data necessary to provide services, manage bookings, and meet legal obligations.
What we collect
- Identity and contact information: name, email, phone number, postal address.
- Booking and payment information: appointment date/time, deposit and payment records, transaction IDs. Deposits are processed via Stripe; we do not store full card numbers on our servers.
- Health information at appointment only: any health or medical information you provide is collected only during your appointment to ensure safe treatment; we do not retain this information after the appointment.
- Technical data: IP address, device and browser information for site operation and security.
- Security footage: doorbell camera footage for premises security only; no cameras are used inside the Hammam treatment areas.
Why we use your data
- To confirm, manage and fulfil bookings and payments.
- To provide safe, personalised treatments during appointments.
- To meet legal, tax and accounting obligations.
- To protect the safety and security of our premises and staff.
Marketing guarantee
We will never use customer data for marketing unless you give explicit consent.
Booking Deposits Cancellations and Refunds
Eligibility
Zin Bladi provides services exclusively to women. We do not accept bookings from people of other sexes. By booking you confirm you meet this eligibility requirement. We reserve the right to refuse or cancel bookings that do not meet this requirement.
Deposits and payments
- Deposits are taken to secure appointments and are processed via Stripe.
- We do not retain full card numbers on our systems.
Cancellation and refund policy
- Full refund of deposit if you cancel at least 48 hours before the scheduled appointment time.
- No refund of deposit for cancellations made within 48 hours of the appointment or for no‑shows.
- Changes to bookings are subject to availability and the same 48‑hour rule may apply.
- Refunds will be processed to the original payment method; processing times depend on the payment provider.
Sharing Storage Retention and Security
Third parties and processors
- Booking system: Virsa Intelligence manages our booking platform and stores booking data in a secure database on our behalf.
- Payment processor: Stripe processes deposits and payments.
- We share personal data with these providers only as necessary and require them to maintain appropriate security measures.
Security measures
- We implement technical and organisational measures to protect personal data, including access controls and secure third‑party services.
- Doorbell camera footage is used only for premises security and is not used inside treatment areas.
Retention periods
- Booking and payment records: retained for up to 7 years for accounting and tax purposes.
- Health information collected at appointment: not retained after the appointment unless required for legal or clinical reasons; if retained, it will be kept only as long as necessary and with appropriate safeguards.
- Doorbell footage: retained for 15 days then automatically deleted unless required for an active security incident or legal reason.
Your Rights and Choices
You have rights in relation to your personal data, subject to applicable law. These include the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data in certain circumstances.
- Restrict or object to processing in certain circumstances.
- Withdraw consent where processing is based on consent.
To exercise any right, contact us at info@zinbladi.co.uk. We may need to verify your identity before responding. We will respond within the timeframes required by law.
Cookies Security Incidents Complaints and Changes
Cookies
We do not use cookies for marketing or analytics. Our website does not rely on cookies for core functionality.
Security incidents and complaints
If a data breach occurs that poses a risk to your rights, we will notify you and the relevant supervisory authority as required by law. If you have a complaint about our handling of personal data, contact us at info@zinbladi.co.uk. You also have the right to lodge a complaint with the UK Information Commissioner’s Office.
Changes to this policy
We may update this Privacy Policy from time to time. We will publish the updated policy on our website with the effective date. This policy is governed by the laws of the United Kingdom.
Contact
For privacy questions, data requests, or complaints:
Email: info@zinbladi.co.uk
Phone: +44 7310 830025
Postal address: 71-73 Kingston St, Kinning Park G5 8BJ
