Legal
Privacy Policy
Last updated:
1. Who We Are
The Oxygen Reset is a mild hyperbaric oxygen therapy (mHBOT) wellness service operated by The Oxygen Reset, located at TheOxygenReset @ Nudeless Lounge Wellness & Spa, D.N Dimitriou 20, Larnaca 6022, Cyprus.
For any privacy-related queries, contact us at: [email protected] or by phone at +357 24 250260.
2. What Data We Collect
We collect personal data only when you voluntarily provide it to us. This includes information from contact form submissions, session booking requests, business enquiries, and anonymised analytics data collected via Google Analytics 4.
3. How We Use Your Data
We use your personal data to respond to your enquiries and booking requests, to confirm and manage your wellness sessions, to send you relevant updates or wellness tips if you have opted in, and to improve our website and services through anonymised analytics.
We do not use your data for automated decision-making or profiling.
4. Legal Basis for Processing
Under the General Data Protection Regulation (GDPR), we process your data on the following legal bases: Consent - when you submit a contact or booking form, or opt in to receive updates; Legitimate interests - to respond to enquiries and improve our services; Legal obligation - where required by applicable law.
5. How We Store and Protect Your Data
Your data is stored securely on our servers. We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or disclosure.
We retain your data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Booking and contact records are retained for a maximum of 2 years unless you request earlier deletion.
6. Sharing Your Data
We do not sell, rent, or trade your personal data. We may share your data with trusted third parties only where necessary, including Google LLC for analytics, Meta Platforms Inc. for advertising analytics (only with consent), and email service providers for transactional emails.
All third-party processors are contractually bound to handle your data in compliance with GDPR.
7. Cookies
Our website uses cookies to improve your experience and to support analytics. We use essential cookies required for the website to function, analytics cookies via Google Analytics 4, and marketing cookies via the Facebook Pixel only with your consent.
You can manage or withdraw your cookie consent at any time through your browser settings.
8. Your Rights
Under GDPR, you have the right of access, right to rectification, right to erasure, right to restrict processing, right to data portability, right to object, and right to withdraw consent at any time.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
9. International Transfers
Some of our third-party service providers (such as Google) may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
10. Children's Privacy
Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.
12. Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection at www.dataprotection.gov.cy, 1 Iasonos Street, 1082 Nicosia, Cyprus.