Privacy Policy

Effective date: 9 October 2026  |  Last updated: 9 October 2026

1. Introduction & Our Commitment to Your Privacy

At NCR Russian Spa (“NCR Russian Spa”, “we”, “us” or “our”), discretion is at the heart of true hospitality. We treat every guest’s personal information, and above all anything related to their wellbeing, with the same care and confidentiality we bring to every treatment.

This Privacy Policy explains what personal information we collect, why we collect it, how we protect it, and the choices and rights you have. It applies to:

  • Website visitors to https://ncrrussianspa.com (the “Website”);
  • Online and phone enquiries, including contact-form submissions, calls and emails;
  • WhatsApp bookings and other messages you send us;
  • In-person guests, whether you visit us at our Aerocity location or receive a treatment at a partner hotel in Delhi NCR, Aerocity or Noida.

This policy is prepared in line with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (and the rules made under it, as they come into force). Where they apply to visitors from those regions, we also respect the principles of the EU/UK General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA).

By using the Website, contacting us or booking a treatment, you acknowledge that you have read this policy. If you do not agree with it, please do not use the Website or our services.

2. Information We Collect

Personal information you give us

  • Full name;
  • Phone number (including your WhatsApp number) and email address;
  • Preferred appointment date and time;
  • General location details, such as your area, or the hotel name and room number for in-hotel treatments;
  • Any message, request or feedback you send us, including testimonials you choose to submit.

Wellness & health considerations

You may choose to tell us about health conditions, injuries, allergies, pregnancy, pressure or temperature preferences, or areas you would like us to avoid. Sharing this information is entirely voluntary. We ask for it only so that your therapy can be tailored safely and comfortably. We treat it as sensitive information and handle it as described in Section 5.

Technical & digital data

When you visit the Website, certain information is collected automatically, including:

  • IP address and approximate location derived from it;
  • Browser type and version, device type and operating system;
  • Pages viewed, time spent and the website or advertisement that referred you;
  • Cookie identifiers and similar technologies (see Section 6).

Payment information

Payments are made at the venue or through secure third-party payment processors. We do not store your card number, UPI PIN, net-banking credentials or other financial credentials on our web servers. Payment details are handled directly by the processor under its own security standards and privacy policy. We keep only a record of the transaction (for example, the amount, date, service and payment method) for accounting and support.

Information from third parties

If you contact us on WhatsApp, WhatsApp (operated by Meta) shares your phone number and profile name with us. Partner hotels may share the booking details we need to deliver your treatment (for example, guest name, room number and time of service).

3. How We Use Your Information

We use your information only for legitimate spa and website purposes, including to:

  • Schedule, manage and confirm appointments and assign a suitable therapist;
  • Send booking confirmations and reminders by WhatsApp, phone or email, and respond to your enquiries;
  • Tailor the therapy environment, products and pressure for your comfort and safety;
  • Keep accurate service, billing and accounting records and meet our legal obligations;
  • Protect the safety of our guests, therapists and staff, and prevent fraud or misuse;
  • Improve website speed, layout and user experience;
  • With your consent, tell you about offers or new treatments. You can opt out at any time.

We never sell, rent or trade your personal information to third parties. We do not use your health or wellness details for marketing.

4. Who We Share Information With

We share personal information only when it is necessary and only with:

  • Your assigned therapist and spa team, strictly on a need-to-know basis;
  • Partner hotels, limited to what is needed to arrange access and the time of your treatment;
  • Service providers who help us run the Website and the business, such as web hosting, email delivery, form handling, customer-relationship and messaging tools, payment processors and WhatsApp. They may use your information only to provide their service to us and are expected to keep it confidential and secure;
  • Authorities and advisers, where required by law, court order or a lawful request, or to protect the rights, safety or property of our guests, staff or business.

If NCR Russian Spa is ever involved in a merger, acquisition or sale of its business, guest information may be transferred as part of that transaction, subject to the commitments in this policy.

Some of our service providers (for example, those that deliver fonts, messaging or email) may process data on servers outside India. Where that happens, we take reasonable steps to ensure your information remains protected.

5. Health & Confidentiality Assurance

Any health information, wellness details or therapy preferences you disclose to us remain strictly confidential. They are shared only with the spa professionals assigned to your treatment, and only to the extent needed for your safety, comfort and quality of care. We do not disclose them to hotels, advertisers or any other third party unless you ask us to, or the law requires it (for example, in a medical emergency or under a lawful order).

You may update, correct or ask us to delete any wellness details at any time.

6. Cookies & Digital Tracking

Cookies are small files placed on your device that help a website work and remember your choices. We use the following categories:

  • Essential cookies: needed for the Website to function securely and to remember your cookie-consent choice. These cannot be switched off.
  • Performance and analytics cookies: if and when we enable them, they help us understand how visitors use the Website (for example, which pages are most visited and how fast they load) so we can improve it. We use them only with your consent where the law requires.
  • Functional cookies: remember preferences and support features such as forms, chat and embedded content.
  • Marketing cookies: used only with your consent, for example to measure visits to our online store or the effectiveness of our promotions.

The Website also loads fonts from Google Fonts, which means your browser connects to Google’s servers and your IP address is received by Google.

Managing your cookie settings

When you first visit, a cookie banner lets you accept all cookies, accept only essential cookies, choose your preferences, or decline optional cookies. You can change your choice at any time through the cookie banner or preferences link, and you can also control or delete cookies in your browser settings (for example, under Settings > Privacy in Chrome, Safari, Firefox or Edge). Please note that blocking essential cookies may stop parts of the Website from working properly.

7. Data Protection & Security

We use reasonable technical and organisational safeguards to protect your information from loss, misuse and unauthorised access, including:

  • SSL/TLS encryption (up to 256-bit) for data sent between your browser and the Website;
  • Restricted, role-based administrative access to our website and records, protected by strong credentials;
  • Secure server protocols, regular software updates and security monitoring;
  • Confidentiality obligations for our team and service providers.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a personal-data breach occurs that is likely to affect you, we will notify you and the relevant authorities as required by law.

How long we keep your information

  • Booking and billing records are kept only for as long as needed for accounting, tax, legal and customer-support purposes (generally up to seven years for financial records).
  • Enquiries that do not lead to a booking are deleted within 12 months.
  • Health and preference notes are deleted or anonymised once they are no longer needed to look after you, or sooner if you ask us to.

8. Guest Rights & Choices

You have the right to:

  • Access the personal information we hold about you;
  • Correct information that is inaccurate or incomplete;
  • Delete your personal information permanently, subject to records we must keep by law;
  • Withdraw consent at any time, without affecting what we did before you withdrew it;
  • Opt out of promotional messages or calls at any time (reply “STOP” to a message, or contact us);
  • Raise a grievance with us about how your information is handled.

Visitors from the EU, UK and EEA

We process your information on the basis of (a) performing a booking or contract with you, (b) our legitimate interests in running and securing our business, (c) your consent, and (d) legal obligations. In addition to the rights above, you may ask us to restrict or object to certain processing, to receive your data in a portable format, and to complain to your local data-protection authority.

California residents

You may ask us what personal information we have collected, request its deletion or correction, and you will not be treated differently for exercising these rights. We do not sell personal information, and we do not share it for cross-context behavioural advertising.

How to exercise your rights

Email info@ncrrussianspa.com or call +91 83770 94710. We may need to verify your identity before acting on a request. We aim to acknowledge your request within 7 working days and to resolve it within 30 days, or sooner where the law requires.

9. Age Limitation

Our website content and services are intended solely for individuals aged 18 years and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have done so, we will delete it promptly. If you believe a minor has provided us with information, please contact us.

10. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our services, technology or legal requirements. The “Last updated” date at the top shows when it was last revised. When we make material changes, we will post the updated policy on this page and, where appropriate, notify you through the Website or by message. Please review this page periodically.

11. Privacy Contact & Grievance Officer

If you have any question, request or complaint about this policy or your personal information, please contact our Privacy & Grievance Officer:

NCR Russian Spa – Privacy & Grievance Officer
Email: info@ncrrussianspa.com
Phone / WhatsApp: +91 83770 94710
Address: Airport Road, Aerocity, New Delhi – 110037, India
Office hours: Daily, 10:00 AM – 7:00 PM (IST)

Scroll to Top