Privacy Policy

Last updated: 3 September 2026

1. Who is responsible for your data

M&V Limited, trading as Filipinska Masaža, is the controller of personal data collected through this website.

Contact: masazafilipinska@gmail.com, +385 099 856 6839, or Ul. Federica Grisogona 5, 23000 Zadar, Croatia.

2. Information we collect

When you make a booking, we collect your full name, email address, phone number, selected treatment and duration, appointment date and time, and any optional scheduling note. When you use the contact form, we collect the contact details and message you provide.

Please do not submit medical or other health information through these forms.

3. Why we use your information

We use booking information to check availability, create and manage your appointment, contact you about changes, and provide the requested service. This processing is necessary to take steps at your request and perform our agreement with you. We use contact-form information to respond to your enquiry based on our legitimate interest in communicating with customers. We may also process information where necessary to comply with a legal obligation.

4. Service providers and recipients

Booking information is processed through Google Apps Script and stored in Google Calendar. Contact-form submissions are processed through Web3Forms. Both the booking form and the contact form use Cloudflare Turnstile to check that a submission is coming from a person rather than automated software; this exposes your IP address and basic device information to Cloudflare in the same way any embedded verification widget works. These providers process information on our behalf or under their applicable service terms. Personal information may also be disclosed when required by law.

5. International transfers

Some service providers may process information outside the European Economic Area. Where required, transfers are protected using an adequacy decision, standard contractual clauses, or another safeguard recognised by EU data-protection law.

6. Retention

Booking and contact information is normally retained for up to one year from the appointment or last communication and then deleted or anonymised. Information may be retained longer where required by tax, accounting, legal, or dispute-resolution obligations.

7. Your rights

Subject to applicable law, you may request access to, correction of, deletion of, or restriction of your personal data. You may also object to processing based on legitimate interests and request data portability where applicable.

To exercise a right, contact masazafilipinska@gmail.com. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).

8. Security and updates

We use reasonable technical and organisational measures to protect personal information and limit access to those who need it. We may update this notice when our services or legal obligations change; the latest version will remain available on this page.