Privacy Policy

1. Who We Are

Ultimate Wellness HUB ("WellnessHub", "we", "us", or "our") is a wellness and beauty services provider registered in the Sultanate of Oman, located at Maroon Street, Alkhoud, Muscat. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform.

2. Information We Collect

We collect the following categories of information:

• Account data: your name, email address, phone number, and date of birth when you register or book a service.
• Booking data: service selections, appointment history, and transaction records.
• Payment data: payment is processed by Paymob and Apple Pay. We do not store full card numbers or payment credentials on our servers.
• Usage data: anonymous analytics — page views, session duration, and general interaction patterns. No cross-site tracking or advertising profiling is performed.
• Device & technical data: browser type, operating system, and IP address for security and platform stability purposes.

We do not collect sensitive health data through our platform. If you voluntarily disclose health conditions to our staff before a treatment, that information is handled confidentially and used solely to deliver safe, appropriate services.

3. How We Use Your Information

Your data is used to:

• Process and confirm bookings, memberships, and purchases
• Send booking confirmations, reminders, and service updates
• Handle refund and cancellation requests
• Improve platform performance through anonymous analytics
• Maintain platform security and prevent fraud
• Comply with applicable Omani laws and regulations

We do not sell, rent, or trade your personal data to third parties for commercial or marketing purposes.

4. Data Storage & Security

Your data is stored securely using Supabase infrastructure. We apply industry-standard encryption at rest and in transit (TLS). Access to personal data is restricted to authorised staff only.

While we take reasonable technical and organisational measures to protect your data, no system is fully immune to risk. We will notify affected users promptly in the event of a confirmed data breach.

5. Cookies & Local Storage

We use browser local storage to remember your session preferences such as cart items and saved favourites. We do not use tracking cookies, advertising cookies, or third-party behavioural profiling tools.

Anonymous, aggregated analytics may be collected to understand how users interact with the platform. This data cannot be used to identify you individually.

6. Third-Party Services

We work with the following third-party services, each subject to their own privacy policies:

• Google OAuth — optional sign-in via your Google account
• Paymob — payment processing
• Apple Pay — payment processing
• Supabase — database and file storage infrastructure
• Cloudflare Turnstile — spam and bot protection during registration
• Unsplash / Supabase Storage — image delivery

No third-party advertising networks, social media pixels, or cross-site tracking scripts are used.

7. Data Retention

We retain your personal data for as long as your account is active or as required to provide services. Booking and transaction records may be kept for a period required by Omani commercial law. Upon account deletion, personal data is removed from active systems within a reasonable period, except where retention is legally required.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for any non-essential data processing
• Lodge a complaint with the relevant data protection authority in Oman

To exercise any of these rights, contact us using the details in Section 10. Account deletion can be requested through your account settings. If the option is not visible, contact us directly.

9. Minors

Our platform is accessible to users aged 15 and above with parental or guardian consent. We do not knowingly collect data from children under 15 without verified guardian consent. If you believe a minor has registered without appropriate consent, contact us immediately.

10. Contact & Privacy Requests

For any privacy-related questions, data access requests, or deletion requests, contact us:

• Email: info@wellnesshubom.com
• Phone: +968 99829821
• Address: Maroon Street, Alkhoud, Muscat, Sultanate of Oman

11. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be reflected by the revised date at the top of this page. Continued use of the platform after updates constitutes acceptance of the revised policy.