Personal data & cookie policy
Data controller
MOSS Retreat (Head Spa & Skin Care), operated by HỘ KINH DOANH BOHOSPA. Privacy contact: mossretreatspa@gmail.com. Address: 1st Floor, 21 Dang Thi Nhu, Ben Thanh Ward, District 1, Ho Chi Minh City.
What we collect and why
When you book: name, phone, email and notes — to confirm and deliver your appointment, send confirmation/reminder emails and look after you as a guest. If you accept cookies: anonymous usage data for analytics and ad measurement. We do not sell your personal data.
Legal basis
Your consent (GDPR Art. 6(1)(a); Vietnam Decree 13/2023/ND-CP Art. 11) for analytics/advertising cookies; performance of your booking request; legal obligations. You can withdraw consent at any time via “Cookie settings” in the footer; withdrawal does not affect earlier processing.
Your rights
Access, correction, deletion, restriction, objection, data portability, withdrawal of consent and complaint to a supervisory authority (GDPR/UK GDPR; Vietnam Decree 13 Art. 9 and the Personal Data Protection Law; Korea PIPA; China PIPL; Japan APPI where applicable). Write to mossretreatspa@gmail.com; we respond within the legal time limits.
Retention
Booking and guest records are kept only as long as needed for the purposes above, at most 24 months after your last interaction unless the law requires longer. Cookie lifetimes are listed below.
International transfers
We use international infrastructure providers: Vercel (hosting), Neon (database, Singapore), Resend (email) and Cloudflare Turnstile (anti-spam). Data is protected with encryption in transit and access controls; transfers outside your country rely on appropriate safeguards.
Children
This site is not directed at anyone under 16. If you believe a child’s data was submitted, contact us and we will delete it.
| Cookie | Type | Purpose | Lifetime |
|---|---|---|---|
| moss_consent | Essential | Stores your cookie choice | 12 months |
| cf_*, __cf_* | Essential | Cloudflare Turnstile anti-spam | Session – 1 day |
| _ga, _ga_*, _gid | Analytics | Google Analytics traffic statistics | Up to 13 months |
| _fbp | Advertising | Meta Pixel ad measurement | 90 days |
| _ttp, ttclid | Advertising | TikTok Pixel ad measurement | Up to 13 months |