Privacy Policy

In force as of 24 July 2026.

This privacy policy explains how Siam Sereine collects and processes your personal data when you use this website and book a treatment. It is drawn up in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679) and the French Data Protection Act (« Informatique et Libertés »).

1. Data controller

The data controller is:
Siam Sereine — sole proprietorship (entreprise individuelle), operated by Krittiya Chaiyasit Ognibene.
93 Rue du Mont Cenis, 75018 Paris, France.
SIRET: 104 895 370 00013.
E-mail: contact@siamsereine.com.

2. Data we collect

We collect only the data you provide and the data strictly necessary for the service to work:

• Booking: full name, e-mail address, phone number, treatment address and postal code (Paris arrondissement), and any notes you add.
• Health questionnaire: answers about possible contraindications to massage (e.g. pregnancy, recent surgery, fever, skin conditions, circulatory or heart conditions, high blood pressure, osteoporosis, anticoagulant treatment, allergies, other) and your consent declarations. This information constitutes health data (a special category of data — see §4).
• Payment: card payments are handled directly by our provider Stripe. We neither collect nor store your card numbers; we only receive a transaction identifier and the payment status.
• Contact form: first name, last name, e-mail address, phone (optional) and the content of your message.
• Technical preference: your language choice is stored locally in your browser (see §7).

3. Purposes and legal bases

• Manage your booking and deliver the treatment — basis: performance of the contract (Art. 6.1.b GDPR).
• Collect payment and issue invoices — basis: performance of the contract and compliance with our legal accounting obligations (Art. 6.1.b and 6.1.c).
• Adapt the treatment safely from the health questionnaire — basis: your explicit consent (Art. 9.2.a).
• Respond to your enquiries sent via the contact form — basis: your consent and our legitimate interest in replying (Art. 6.1.a and 6.1.f).

4. Health data

The health questionnaire information is processed solely to check for any contraindication and to adapt the massage safely, on the basis of your explicit consent. It is used for no other purpose, is not subject to any automated decision-making, and is automatically deleted within 24 hours after the session. You may withdraw your consent at any time; without this information, however, the treatment cannot be carried out safely and may be cancelled.

5. Recipients and processors

Your data is never sold. It is accessible to the practitioner and, strictly as needed, to the following technical service providers (processors):

• Stripe — secure card payment processing.
• Cal.com — booking slots and calendar management.
• Google (Google Workspace) — the professional mailbox contact@siamsereine.com.
• Brevo — sending automated e-mails (booking confirmation, delivery of the contact form).
• Hosting — OVH (OVH SAS, 2 rue Kellermann, 59100 Roubaix, France); the website and booking data are hosted on a server located in France (European Union).

Transfers outside the European Union: some providers (in particular Stripe, Cal.com and Google) may process data outside the European Union, including in the United States. Such transfers are governed by appropriate safeguards: the European Commission's Standard Contractual Clauses and/or certification under the EU — U.S. Data Privacy Framework.

6. Retention periods

• Health questionnaire: automatically deleted within 24 hours after the session.
• Booking and customer-relationship data: kept for as long as needed to manage the relationship, then deleted or archived.
• Accounting records (invoices, payment proofs): kept for 10 years, in accordance with Article L123-22 of the French Commercial Code.
• Contact-form messages: kept for as long as needed to handle your request, then deleted (at the latest 3 years after the last contact).
• Language preference: kept on your device until you clear it.

7. Cookies and local storage

This website uses no advertising or analytics cookies (no Google Analytics or similar tracker). It only stores, in your browser's local storage, one item (siam-lang) that remembers your language preference: strictly necessary for the site to work, it requires no consent and is shared with no third party. During payment, Stripe may set its own cookies strictly necessary for security and fraud prevention.

8. Security

We implement appropriate technical and organisational measures to protect your data: encrypted connection (HTTPS), access restricted to authorised persons, and automatic deletion of health data after the session.

9. Your rights

Under the GDPR you have the following rights over your data: the right of access, rectification, erasure, restriction, objection, portability, and to withdraw your consent at any time (without affecting processing already carried out), as well as the right to give directives on the fate of your data after your death.

To exercise these rights, write to contact@siamsereine.com. Proof of identity may be requested in the event of reasonable doubt.

If you believe your rights are not being respected, you may lodge a complaint with the French data protection authority, the CNIL (Commission nationale de l'informatique et des libertés), 3 Place de Fontenoy — TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.

10. Changes

This policy may be updated to reflect changes in our practices or in the applicable regulations. The "in force as of" date shown at the top of the page indicates the latest update.