Privacy Policy

Zen Heaven Spa, Damak-5, Jhapa, Nepal. This policy covers this website and the booking system behind it. If you want to ask us anything in it, call +977 970-5120826 or use the contact form.

We ask for as little as a booking needs, and we ask for it once.

• To book an appointment: your name, phone number and email address, plus the treatment, therapist, branch, date and time you chose. The therapist needs the appointment; reception needs a way to reach you if something changes.
• To take payment: the image you upload confirming your bank transfer. A receptionist opens it, checks it against your booking, and marks the booking approved or not.
• If you create an account: the same name, phone and email, and a password. The password is stored only as a one-way hash — we cannot read it, and neither can anyone who obtains a copy of our database.
• If you send us a message: the name, email and message you type into the contact form.
• Automatically: your IP address, for a short window, so that repeated failed sign-ins and repeated booking attempts from one place can be slowed down. It is not used to build a profile of you.

Four, all set by this site, none of them for advertising or analytics. There is no tracking script on this website. The only third party that can set a cookie on you here is the embedded map, described below.

• A sign-in cookie, once you sign in, so you stay signed in. Your browser will not let any script read it. Signing in also sets two short-lived cookies the sign-in form itself needs: one so the form cannot be submitted from another site, one to remember where to send you afterwards.
• A cookie recording that you are a customer, set when you sign in or make an account, so the site knows which menu to draw before it has asked the server who you are. It holds that one fact and nothing else — no name, no email address, no identifier.
• A cookie remembering which back-office screen to offer a member of staff. It holds a job title and nothing else.
• A cookie remembering whether a member of staff last left the back-office menu wide or narrow.

The last two are set only for spa staff. As a customer you carry the first two, and only once you make an account or sign in — a visitor who only reads the site carries none of them.

Our contact page shows a Google Map so you can find us. It loads directly from Google, which means Google receives your IP address and can set its own cookies inside that map — the same as if you had opened Google Maps yourself. We do not receive anything from it, and it is the only third party on this website.

Nothing else on the site loads from anyone but us. If you would rather not load it at all, every other page works without it, and our address and phone number are written out in full beside the map.

Only people who work at this spa, and not all of them see the same thing. A therapist can see the appointments assigned to her — the time, the treatment and the customer’s name — and nothing else: not prices, not payments, not the other branch. Reception sees the bookings and payments for their own branch. Only the owner sees both branches.

We do not sell your details, and we do not share them with anyone for marketing. We share them outside the spa only where the law requires it.

An appointment is a business record, so bookings, payments and the money they represent are kept rather than deleted — the system has no delete button for them by design, because a booking that vanishes takes a receptionist’s and a therapist’s afternoon with it. A member of staff who leaves is switched off rather than removed, for the same reason.

Payment images are kept with the booking they belong to. Contact-form messages are kept until they have been answered and are no longer useful.

Ask us and we will tell you what we hold about you, correct anything that is wrong, and remove what we are not required to keep. Call or write using the details above — this is a small spa, and a phone call reaches a person.

If this policy changes, the date at the top changes with it. Anything significant will be explained on this page rather than absorbed quietly into a paragraph.