Privacy Policy

This Privacy Policy explains how KiWest Spa collects, uses, shares, stores, and protects personal information when you visit our website, contact us, book services, buy vouchers, pay online, join promotions, or interact with our advertising.

KiWest Spa is the public-facing brand of Ki' West Spa, a business registered in Barbados under registration no. 69889 and operated by its owner and sole proprietor, Sabrina Estwick. References to "KiWest Spa," "we," "us," and "our" in this policy refer to that registered business.

KiWest Spa is located at Unit #2, 2nd Avenue Belleville, St. Michael, BB14146, Barbados. You can contact us at kiwestspa@gmail.com or (246) 249‑2718.

Information We Collect

• Contact details such as your name, phone number, email address, and social media handle when you contact us or book.
• Appointment details such as requested service, appointment date and time, therapist preference, notes you choose to provide, and visit history.
• Payment and voucher details such as transaction references, voucher codes, deposit status, partial redemptions, and payment confirmation. Card details are handled by payment providers and are not stored by KiWest Spa on this website.
• Website and device data such as pages visited, referral source, approximate location, browser type, IP address, cookie identifiers, and ad click identifiers where permitted by your cookie choices.
• Marketing preferences, consent choices, promotion entries, reviews, survey responses, and messages sent through WhatsApp, email, phone, social platforms, or booking providers.
• WhatsApp enquiry information such as the number and profile name associated with the chat, the advert or referral that opened the conversation, button selections, the service or outcome you are interested in, preferred duration, requested date and time of day, and message identifiers used to prevent duplicate replies.

How We Use Information

• To answer questions, manage bookings, provide spa services, process deposits, issue vouchers, and support customer care.
• To send appointment confirmations, service updates, payment links, voucher information, and important policy notices.
• To run a step-by-step WhatsApp enquiry journey, suggest a suitable KiWest massage based on the preferences you select, collect the details needed to check availability, transfer the conversation to a team member when requested, and avoid duplicate or abusive automated requests.
• To improve our website, services, promotions, pricing, and customer experience.
• To measure advertising performance, build remarketing audiences, and show relevant ads through platforms such as Google and Meta when you have allowed advertising cookies or where otherwise permitted by law.
• To prevent fraud, protect our systems, comply with legal obligations, resolve disputes, and enforce booking, cancellation, voucher, and payment terms.

Legal Basis and Barbados Data Protection

Where applicable, we process personal information under the Barbados Data Protection Act, 2019-29 and related privacy principles. Depending on the situation, we rely on your consent, performance of a contract or requested service, legitimate business interests, compliance with legal obligations, and protection of our clients, staff, and business.

Cookies, Analytics, and Advertising

We use essential cookies to operate the website. We may also use analytics and advertising cookies or similar technologies for Google Analytics, Google Ads, Meta Pixel, conversion tracking, remarketing, and performance measurement. You can manage these choices through the Cookie settings link in the footer.

Google Consent Mode is used to communicate your analytics and advertising choices to Google. Analytics storage, advertising storage, advertising user data, and ad personalization are denied by default for visitors who must be asked for consent and are updated only after a valid choice. You may reject non-essential cookies or withdraw a previous choice at any time through Cookie settings.

Read our Cookie Policy for more detail.

Google Ads and Advertising Measurement

When permitted by your cookie choice, Google Analytics and Google Ads may receive limited website and advertising information such as page visits, referral source, campaign parameters, ad click identifiers, and booking, call, WhatsApp, directions, or voucher-link interactions. We use this information to understand whether advertising leads to genuine enquiries or bookings, prevent fraud, limit wasted advertising, and improve campaign performance.

We do not intentionally send private treatment notes, consultation answers, medical information, payment-card details, or the contents of personal messages to advertising platforms. We do not use sensitive health, treatment, pregnancy, or other private service information to create Customer Match lists or personalised advertising audiences. Customer Match, enhanced conversions, or similar customer-data advertising features will not be enabled unless they have been separately assessed, appropriately disclosed, and supported by a valid legal basis and consent where required.

WhatsApp Enquiries and Automated Assistance

When you contact KiWest Spa through WhatsApp, including from a Facebook or Instagram advert, we may use the WhatsApp Business Platform and a KiWest-operated automated assistant to ask one question at a time. For the massage journey, the assistant may show service information and prices, ask what you want from the massage, recommend an option, and collect your selected service, duration, preferred date and time of day, name, email address, and marketing choice.

If you start but do not complete the massage journey, the assistant may send up to three service follow-ups during WhatsApp's permitted customer-service window. The final follow-up closes the incomplete request and may link to our services. Completed requests and conversations transferred to a team member do not receive these automatic follow-ups.

The assistant provides general spa-service guidance only. It does not diagnose a condition, provide medical advice, confirm suitability for treatment, or complete an appointment. A KiWest Spa team member checks availability and confirms any booking. You can ask to speak with a person during the journey.

We may receive technical information from Meta and WhatsApp, including the receiving business number, referral context, message type, message ID, and delivery or interaction status. This helps us route the enquiry, attribute it to the correct advert, prevent duplicate replies, secure the service, and measure whether the enquiry process works.

Service Providers and Third Parties

We may share limited information with providers that help us operate the business, including booking platforms, payment processors, voucher systems, website hosting, email/SMS/WhatsApp communications, analytics providers, advertising platforms, professional advisers, fraud prevention services, and regulators or authorities where required.

Relevant providers may include Google (analytics, advertising, maps, and campaign measurement), Meta and WhatsApp (Facebook and Instagram advertising, WhatsApp Business messaging, and delivery of the chat journey), Fresha (booking and appointment services), Fygaro or another disclosed payment provider (payments and vouchers), Cloudflare (website hosting, security, the WhatsApp assistant, short-term session storage, and a same-site country hint used for consent presentation), and communications providers selected by KiWest Spa. Each provider may process information under its own privacy terms when you use its service or follow a link to its platform.

These providers may process information in Barbados or other countries. Where personal information is transferred outside Barbados, we aim to use appropriate safeguards and reputable providers with privacy and security commitments.

Sensitive Service Information

Spa, waxing, facial, laser, and wellness bookings may involve personal or sensitive details you choose to share with us. We use that information only to assess suitability, provide your service, protect your comfort and safety, and maintain our client records. We do not intentionally send sensitive appointment notes, medical details, intake form answers, or private treatment information to Google, Meta, or other advertising platforms.

Marketing Communications

If you sign up for promotions, offers, reminders, or updates, we may contact you by email, SMS, WhatsApp, phone, or social platforms where permitted. The WhatsApp massage journey presents marketing as a separate Yes or No choice. Choosing No does not prevent you from requesting an appointment, and choosing Yes can be withdrawn later. You can opt out of promotional messages at any time by replying STOP or contacting us. Transactional booking, payment, safety, and service messages may still be sent when needed.

Retention

We keep personal information only as long as reasonably needed for bookings, customer care, accounting, legal, safety, fraud prevention, voucher management, dispute handling, and business records. Cookie consent records and analytics data may have shorter or platform-specific retention periods.

During the WhatsApp assistant test, an active or incomplete automation session is normally stored by KiWest for up to 48 hours. A completed session or a conversation transferred to a team member is normally stored in the automation system for up to 7 days. Information that becomes part of a confirmed booking, customer-service record, consent record, security record, or legal business record may be retained separately for longer where reasonably necessary. Meta and WhatsApp may retain information under their own terms and policies.

Your Rights

Subject to applicable law, you may ask to access, correct, update, delete, restrict, or object to certain uses of your personal information. You may also withdraw consent for optional marketing, analytics, advertising cookies, or promotional messages. To make a privacy request, contact kiwestspa@gmail.com.

For step-by-step removal instructions covering information received through the KiWest Meta app or WhatsApp assistant, read our Data Deletion Instructions.

Security

We use reasonable administrative, technical, and physical measures to protect personal information. No website, messaging platform, or payment system can be guaranteed completely secure, but we work to keep information protected and limit access to people and providers who need it.

Children

Our website and ads are not directed to children. Some spa services may be available to minors with appropriate parental or guardian involvement. A parent or guardian should contact us for bookings involving minors.

Changes

We may update this Privacy Policy as our services, providers, advertising tools, or legal obligations change. The updated date at the top shows the latest version.