Privacy Policy

Effective Date: June 13, 2026 | Last Updated: June 13, 2026 | Version 1.0

COMPLIANCE NOTICE
This policy is designed to comply with applicable U.S. privacy laws including the California Consumer Privacy Act (CCPA), the CAN-SPAM Act, and general data protection best practices aligned with GDPR principles where applicable.

1. WHO WE ARE

Maona Spa Partners LLC ("Maona," "we," "us," or "our") is a spa and wellness business consulting firm headquartered at 111 Town Square Place, Suite 1291, Jersey City, NJ 07310.
This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website at maonaspaconsulting.com, submit a form, purchase a service, or otherwise interact with us.
By using our website or services, you agree to the practices described in this policy. If you do not agree, please discontinue use of our website and services.

2. INFORMATION WE COLLECT

Data Provided to Us Directly
Whenever you engage with our consulting team, you may share specific personal details such as:
• Your identity and reachability: full name, personal email, and phone number
• Professional profile: business identity, branch location, site address, and social profiles
• Operational landscape: company scale, current earnings, staff volume, and workflow metrics
• Transactional data: handled via encrypted external gateways (bank card data is never locally archived)
• Inbound correspondence: messages sent via direct email, web queries, or booking forms
• Subscription choices: choices regarding our digital journals and promotional lists
• Strategic responses: feedback provided during our Audit assessment process
Automated Data Collection
As you navigate our digital portal, we gather specific technical footprints including:
• Geographic location based on your IP address
• Browser specifications and core system software
• Device categories and operating environments
• Browsing behavior: specific pages viewed, duration of stay, and entry points
• Tracking markers and session cookies
Third-Party Information Sources
We might acquire data from external partners such as Wix, financial gateways, and social networks when you engage with our promotional campaigns.
We strive to address all privacy concerns within 30 business days.

3. HOW WE USE YOUR INFORMATION

We utilize the gathered data for these core objectives:

• To execute and deliver the consulting packages you order, including specialized Audit reports

• To maintain contact regarding your project, bookings, or initial inquiries

• To distribute service alerts, scheduled reminders, and delivery confirmations

• To share our newsletter and relevant industry news exclusively upon your request

• To facilitate secure billing and financial management

• To refine our web interface and enhance the overall partner experience

• To monitor site usage trends and gauge the impact of our advertising

• To adhere to constitutional mandates and legal standards

• To safeguard our infrastructure and prevent unauthorized activity

We strictly prohibit the sale of your private data. We do not utilize your details for secondary purposes without providing clear, prior notification.

4. LEGAL BASIS FOR PROCESSING

In accordance with global data standards, we process your information based on:

• Execution of Contract: fulfilling the service agreements we have entered with you

• Business Interests: promoting and optimizing our services in a manner that respects your privacy

• Explicit Consent: your choice to join marketing lists or accept non-essential tracking

• Statutory Compliance: meeting the requirements of governed law

5. HOW WE SHARE YOUR INFORMATION

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

Service Providers

We work with trusted third-party service providers who assist in operating our business. These providers are contractually bound to protect your information and may only use it to perform services on our behalf. They include:

Wix for CRM/CMS, email marketing, and form management
Stripe or other payment processors for secure payment processing
Google for website analytics and advertising
Meta (Facebook/Instagram) for advertising and retargeting
Zoom or similar tools for virtual consultation delivery

Legal Requirements

We may disclose your information if required to do so by law, court order, or government authority, or if we believe disclosure is necessary to protect our rights, prevent fraud, or ensure the safety of our clients.

Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and a prominent notice on our website prior to such a transfer.

6. YOUR RIGHTS

Depending on your location, you may have the following rights regarding your personal information:

Right to Access: Request a copy of the personal data we hold about you
Right to Correction: Request that we correct inaccurate or incomplete information
Right to Deletion: Request that we delete your personal data, subject to legal exceptions
Right to Opt-Out: Opt out of marketing communications at any time via unsubscribe links
Right to Portability: Request your data in a structured, machine-readable format
Right to Restrict: Request that we limit how we process your data in certain circumstances
Right to Object: Object to processing based on legitimate interests or for direct marketing
Non-Discrimination: Exercising your rights will never result in reduced service quality from us

To exercise any of these rights, contact us at hello@maonaspaconsulting.com. We will respond within 30 days. We may need to verify your identity before processing your request.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act including the right to know what categories of personal information we collect, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information. To submit a CCPA request, email us with the subject line "CCPA Request."

7. COOKIES AND TRACKING

Our website uses cookies and similar tracking technologies to improve your experience and analyze site performance. The types of cookies we use include:

Essential cookies: required for the website to function properly
Analytics cookies: help us understand how visitors interact with our site
Marketing cookies: used to deliver relevant advertisements via platforms such as Meta and Google
Preference cookies: remember your settings and choices

You can manage or disable cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of our website. Where required by law, we obtain your consent before placing non-essential cookies.

8. CHILDREN'S PRIVACY

Our website and services are intended for adults aged 18 and older. We do not knowingly collect personal information from children under the age of 13. If you believe a child has provided us with personal information, please contact us immediately at hello@maonaspaconsulting.com and we will take prompt steps to delete that information.

9. SECURITY

We take the protection of your personal information seriously. We implement industry-standard technical and organizational security measures including:

SSL/TLS encryption for all data transmitted through our website
Secure, access-controlled storage of client records within HubSpot
Third-party payment processors with PCI-DSS compliance for all transactions
Restricted internal access to personal data on a need-to-know basis
Regular review of our data handling and security practices

While we take every reasonable precaution, no method of electronic transmission or storage is 100% secure. In the unlikely event of a data breach that affects your rights or freedoms, we will notify you promptly in accordance with applicable law.

10. THIRD-PARTY LINKS

Our website may contain links to third-party websites including social media platforms, payment portals, and partner resources. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party sites you visit. A link from our site does not constitute an endorsement of that site's privacy practices.

11. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email.

Your continued use of our website or services following any changes constitutes your acceptance of the updated policy.

12. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please contact us:

Maona Spa Partners LLC 111 Town Square Place, Suite 1291 Jersey City, NJ 07310

Email: hello@maonaspaconsulting.com Phone: (888) 787-9395

We aim to respond to all privacy-related inquiries within 30 business days.