PRIVACY POLICY

1. WHO WE ARE

Maona Spa Partners LLC ("Maona," "we," "us," or "our") is a spa and wellness business consulting firm headquartered at 111 Town Square Place, Suite 1291, Jersey City, NJ 07310.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website at maonaspaconsulting.com, submit a form, purchase a service, or otherwise interact with us.

By using our website or services, you agree to the practices described in this policy. If you do not agree, please discontinue use of our website and services.

2. INFORMATION WE COLLECT

Information You Provide Directly

When you interact with Maona, you may provide us with the following personal information:

• Full name and contact information including email address and phone number
• Business name, location, website URL, and social media handles
• Business stage, revenue range, team size, and operational details
• Payment information, processed securely through third-party processors. We do not store card data.
• Communications you send us via email, contact forms, or consultation requests
• Newsletter subscription details and marketing preferences
• Responses submitted through our Spa Profit and Experience Audit intake form

Information Collected Automatically

When you visit our website, we automatically collect certain technical data including:

• IP address and approximate geographic location
• Browser type and version
• Device type and operating system
• Pages visited, time spent on each page, and referring URLs
• Cookie identifiers and session data

Information from Third Parties

We may receive information about you from third-party platforms including HubSpot, payment processors, and social media platforms when you interact with our content or advertising.

3. HOW WE USE YOUR INFORMATION

We use the information we collect for the following purposes:

• To deliver and fulfill services you have purchased, including your Spa Audit report
• To communicate with you about your inquiry, order, or consultation
• To send service updates, appointment reminders, and audit delivery notifications
• To send our newsletter and marketing communications only with your consent
• To process payments and manage billing securely
• To improve our website, services, and client experience
• To analyze usage patterns and measure the effectiveness of our marketing
• To comply with applicable legal obligations
• To prevent fraud and protect the security of our systems

We will never sell your personal information. We will never use your information for purposes incompatible with those disclosed in this policy without notifying you first.

4. LEGAL BASIS FOR PROCESSING

Where GDPR or similar frameworks apply, we process your personal data under the following legal bases:

• Contract performance: to deliver services you have purchased
• Legitimate interests: to operate, improve, and market our business in ways that do not override your rights
• Consent: for newsletter subscriptions and non-essential cookies, which you may withdraw at any time
• Legal obligation: to comply with applicable laws and regulations

5. HOW WE SHARE YOUR INFORMATION

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

Service Providers

We work with trusted third-party service providers who assist in operating our business. These providers are contractually bound to protect your information and may only use it to perform services on our behalf. They include:

• HubSpot for CRM, email marketing, and form management
• Stripe or other payment processors for secure payment processing
• Google for website analytics and advertising
• Meta (Facebook/Instagram) for advertising and retargeting
• Zoom or similar tools for virtual consultation delivery

Legal Requirements

We may disclose your information if required to do so by law, court order, or government authority, or if we believe disclosure is necessary to protect our rights, prevent fraud, or ensure the safety of our clients.

Business Transfers

In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and a prominent notice on our website prior to such a transfer.

6. DATA RETENTION

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

• Client records and audit data are retained for a minimum of 3 years following service delivery
• Newsletter subscriber data is retained until you unsubscribe
• Financial transaction records are retained for 7 years in compliance with applicable tax and accounting laws
• Website analytics data is retained for up to 26 months

When your information is no longer needed, we securely delete or anonymize it.

7. YOUR RIGHTS

Depending on your location, you may have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request that we correct inaccurate or incomplete information
• Right to Deletion: Request that we delete your personal data, subject to legal exceptions
• Right to Opt-Out: Opt out of marketing communications at any time via unsubscribe links
• Right to Portability: Request your data in a structured, machine-readable format
• Right to Restrict: Request that we limit how we process your data in certain circumstances
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Non-Discrimination: Exercising your rights will never result in reduced service quality from us

To exercise any of these rights, contact us at hello@maonaspaconsulting.com. We will respond within 30 days. We may need to verify your identity before processing your request.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act including the right to know what categories of personal information we collect, the right to delete, and the right to opt out of the sale of personal information. We do not sell personal information. To submit a CCPA request, email us with the subject line "CCPA Request."

8. COOKIES AND TRACKING

Our website uses cookies and similar tracking technologies to improve your experience and analyze site performance. The types of cookies we use include:

• Essential cookies: required for the website to function properly
• Analytics cookies: help us understand how visitors interact with our site
• Marketing cookies: used to deliver relevant advertisements via platforms such as Meta and Google
• Preference cookies: remember your settings and choices

You can manage or disable cookies through your browser settings at any time. Disabling certain cookies may affect the functionality of our website. Where required by law, we obtain your consent before placing non-essential cookies.

9. CHILDREN'S PRIVACY

Our website and services are intended for adults aged 18 and older. We do not knowingly collect personal information from children under the age of 13. If you believe a child has provided us with personal information, please contact us immediately at hello@maonaspaconsulting.com and we will take prompt steps to delete that information.

10. SECURITY

We take the protection of your personal information seriously. We implement industry-standard technical and organizational security measures including:

• SSL/TLS encryption for all data transmitted through our website
• Secure, access-controlled storage of client records within HubSpot
• Third-party payment processors with PCI-DSS compliance for all transactions
• Restricted internal access to personal data on a need-to-know basis
• Regular review of our data handling and security practices

While we take every reasonable precaution, no method of electronic transmission or storage is 100% secure. In the unlikely event of a data breach that affects your rights or freedoms, we will notify you promptly in accordance with applicable law.

11. THIRD-PARTY LINKS

Our website may contain links to third-party websites including social media platforms, payment portals, and partner resources. We are not responsible for the privacy practices of those websites. We encourage you to review the privacy policies of any third-party sites you visit. A link from our site does not constitute an endorsement of that site's privacy practices.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email.

Your continued use of our website or services following any changes constitutes your acceptance of the updated policy.

13. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal information, please contact us:

Maona Spa Partners LLC 111 Town Square Place, Suite 1291 Jersey City, NJ 07310

Email: hello@maonaspaconsulting.com Phone: (888) 787-9395

We aim to respond to all privacy-related inquiries within 30 business days.