Privacy Policy

Your Privacy is our Policy


First things first – your privacy is important to us. That means we’re committed to protecting and safeguarding any personal data you give us. We act in our customers’ interest and we are transparent about the processing of your personal data.

This document describes how we use and process your personal data, hopefully provided in a readable and transparent manner so you can get where we’re coming from without getting bored senseless. As an added bonus, it also tells you how to contact us if you have questions about your personal data, which we’re more than happy to answer. For a better understanding of what we mean by “Spa Escape”, “Spa”, “Service” and “Booking”, please read the Spa Escape Terms & Conditions.

If you’ve ever used us before, you’ll know that Spa Escape offers online day spa services through our own websites and mobile apps, as well as through other online platforms such as partners’ websites and social media. Why point that out, you ask? Well, here’s the thing. All the information that follows applies to not one, not two, but all of these platforms. Several platforms, one privacy statement.

This one privacy statement applies to any kind of information we collect through these platforms or other means connected to these platforms (such as contacting our customer service team via email).

We might amend the Privacy Statement from time to time. If you care about your privacy, visit this page regularly and you’ll know exactly where you stand. If we make changes to the Privacy Statement which will have an impact on you (for example, if we intend to process your personal data for other purposes than communicated in the past in this Privacy Statement), we will notify you of these changes before the new activities begin.

Sad but necessary bit: If you disagree with this Privacy Statement, you should discontinue using our services. If you agree with our Privacy Statement, then you’re all set to book your next Spa through us. Let the good times roll!

What kind of personal data does Spa Escape collect?

We can’t help you book the perfect Spa without information, so when you use our services there are certain pieces of information we ask for. This is pretty basic stuff – your name, preferred contact details and sometimes payment information. You may decide for yourself to submit special requests (for example, certain preferences). In addition to this, we also collect information from your computer, phone, tablet or other device you are using to access our services. This includes the IP address, the browser you use, and your language settings. There are also situations in which we receive information about you from others or automatically collect other information.

Why does Spa Escape collect and use your personal data?

The main reason we ask you for personal details is a pretty good one – it’s to help administer your online Spa Reservations and ensure you get the best service possible. We also use your personal data to contact you and to inform you of the latest deals and special offers and other products or services which we believe may be of interest to you.

How does Spa Escape share your data with third parties?

There are different parties integrated into the Spa Escape services in various ways and for various reasons. The primary purpose is to share your data relevant for your Reservation. There are also other parties which can receive some of your data, which are parties we involve to provide you with the Spa Escape services, financial institutions, advertisers or in some cases governmental or other authorities. We do not sell or rent your personal data.

How does Spa Escape process communications that you and your booked Trip Provider may send to Spa Escape?

Spa Escape can help you and Spa Escape Providers exchange information and requests about their services and existing Spa Reservations, directing the communications through Spa Escape.

How does Spa Escape make use of mobile devices?

We offer free apps through which we also collect and process personal data. This works in much the same way as our website, but they also allow you to use our location services.

How does Spa Escape make use of social media?

The use of social media services may be integrated with the Spa Escape services in various ways, which will involve us collecting some of your personal data or the social media provider receiving some of your information.

What security and retention procedures does Spa Escape put in place to safeguard your personal data?

We observe appropriate and adequate procedures to prevent unauthorized access to, and the misuse of, personal data that we process.

How does Spa Escape treat personal data of children?

Unless indicated otherwise, Spa Escape is a service you are only allowed to use if you are over 18 years of age. We only process information about children with the consent of the parents or legal guardians or when the information is provided to use by the parents or legal guardian.

How can you control the personal data you have given to Spa Escape?

You always have the right to review the personal data we keep about you. You can request an overview of your personal data by emailing us to the email address If you want to find out more about your rights to control your personal data, read on here.

Who is responsible for the processing of personal data on the Spa Escape website and apps?

Spa Escape S.r.l. located in Rome, Italy, controls the processing of personal data on its websites and mobile apps.

What kind of personal data does Spa Escape collect?

OK, so you’re looking for a bit more info. Here’s a more in-depth look at the information we collect.

Personal data you give to us.

Spa Escape collects and uses information which you provide to us. When you make a Spa Reservation, you are (as a minimum) asked for your name and email address. We also ask for your telephone number, payment information and any preferences you might have for your Spa Reservation.

If you need to get in touch with our customer service team, or reach out to us through other means (such as through social media, or communicating with your booked spa through us) we will collect information from you there too. Customers can also be asked to provide a review to help ensure other customers to get exactly what they’re looking for.

There are also other instances where you’ll provide us with information. For example, if you’re browsing with your mobile device, you can decide to enable Spa Escape to see your current location – this helps us provide you with the best possible service and experience. You can also open a user account, which allows you to save your personal settings, review previous bookings or plan and manage future reservations or benefit from other features only available to account holders (such as incentives or other benefits we may offer).

Personal data you give us about others.

If you make a reservation for another person using our online portal, we will ask you to provide this person’s personal data and preferences. You need to ask the person’s permission before you provide us with this information.

Personal data we collect automatically.

Even if you don’t end up making a reservation, when you visit our websites or apps we automatically collect certain information. This includes your IP address, the date and time you accessed our services, the hardware, software or internet browser you use and information about your computer’s operating system, like application versions and your language settings. We also collect information about clicks and which pages have been shown to you.

If you are using a mobile device, we collect data that identifies your mobile device, device-specific settings and characteristics, app crashes and other system activity. When you make a Reservation, our system registers through which means and from which websites you have made your reservation or entered the Spa Escape websites and/or apps.

Personal data we receive from other sources.

It’s not just the things you tell us, though – we may also receive information about you from other sources. These include business partners, such as affiliate partners, and other independent third parties, and anything we get from them may be combined with information provided by you. For example, the Spa Escape reservation services are not only made available via Spa Escape and the Spa Escape apps, but are also integrated into services of affiliate partners you can find online. When you use some of these, you provide the reservation details to our business partner, who then forward your details to us. We also integrate third party service providers to facilitate payment between bookers and Providers. These service providers share payment information so we can administer and handle your Reservation, making sure everything goes as smoothly as possible for you.

Another example is that we integrate communication services into our platforms to enable you to connect with the booked Trip Provider about your stay, and when we do we receive metadata about communication activities (such as where you called, who you are and the date and length of the call). We may also receive information about you to serve you more relevant advertisement for example additional cookie data made available to Spa Escape by social media partners. Please read under Why does Spa Escape collect and use your personal data? for more information. When you link your Spa Escape user account to your social media account, personal data may be shared with Spa Escape by that social media provider, but only when it’s OK with you for them to do so.

Trip Providers may share information about you with Spa Escape too – this may happen if you have support questions about your pending reservation, when disputes arise about a Reservation (though naturally we don’t like it when that happens).

We use the information collected about you for various purposes. Your personal data may be used in the following ways:

a. Spa reservations: First and foremost, we use your personal data to complete and administer your reservation, which is pretty         central to what we do as a company!

b. Customer service: We provide international customer service from our local offices, and we’re there to help 24 hours a day, 7          days a week. Sharing your relevant details, such as reservation information with our global customer service staff allows us to          respond when you need us – including helping you to find appropriate spa and responding to any questions you might have            about your reservation (or any other queries, for that matter).

c. Marketing activities: We use your information for marketing activities. These activities include:

  • Using your contact information to send you regular news of services related to Spa Escape. You can unsubscribe from email marketing communications quickly, easily and at any time – just click on the “Leave mailing list” link included in each newsletter.
  • Based on your information, individualized offers may be shown to you on the Spa Escape website, in mobile apps or on third-party websites/apps (including social media sites) and the content of the site displayed to you may be personalized. These may be offers that you can book directly on the Spa Escape site, or on co-branded sites, or other third-party offers or products we think you might find interesting.
  • When you participate in other promotional activities (such as sweepstakes, referral programs or competitions), relevant information will be used to administer these promotions.

d. Communicating with you: There may be other times when we get in touch, including by email, by post, by phone or by texting        you – which method we choose depends on the contact information you’ve previously shared with us. And we process the                communications you send to us. There could be a number of reasons for this, including:

  • Responding to and handling any requests you or your booked spa have made.
  • If you have not finalized a reservation online, we can contact you with a reminder to continue with your reservation. We believe that this additional service benefits you as it allows you to carry on with a reservation without having to search for the right spa or fill in your reservation details again.
  • When you use our services, we can send you a questionnaire or invite you to provide a review about your experience with Spa Escape or the booked spa.

e. Market research: We sometimes ask our customers to take part in market research. Please see the information provided when        you are invited to participate to understand what personal data is collected and how your personal data is used further.

f. Improving our services: We also use personal data for analytical purposes. This is part of our drive to improve our services and     enhance the user experience. The main goal here is to optimize and customize our online platform to your needs, making our         site easier and more enjoyable to use. We strive to only use pseudonymized data for these analytical purposes.

g. Guest reviews and other destination-related information: During and after the Spa Reservation you book through us, you may        be invited to submit a review.

h. Legal purposes: Finally, in certain cases, we may need to use your information to handle and resolve legal disputes, for                     regulatory investigations and compliance, to enforce the terms of use of the Spa Escape online reservation service or to comply       with lawful requests from law enforcement.

Providing your personal data to Spa Escape is voluntary. However, depending on the type of service you may want to use, we may only be able to provide you with this service if certain personal data is collected. For instance, we cannot process your Reservation if we do not collect your name and contact details.

If we use automated means to process personal data which produces legal effects or significantly affects you, we will implement suitable measures to safeguard you rights and freedoms, including the right to obtain human intervention.

To process your personal data as described above, we rely on the following legal bases:

In view of purpose A and B, Spa Escape relies on the legal basis that the processing of the personal data is necessary for the performance of a contract, specifically to finalize and administer your reservation. If the required personal data is not provided, Spa Escape cannot finalize the reservation, nor can we provide customer service. In view of purposes C to E, Spa Escape relies on its legitimate commercial business interest to provide its services, to prevent fraud and to improve its services. When using personal data to serve Spa Escape’s or a third party’s legitimate interest, Spa Escape will always balance your rights and interests in the protection of your personal data against Spa Escape’s rights and interests or those of the third party. For purposes F, Spa Escape relies also where applicable on compliance with legal obligations (such as lawful law enforcement requests). Where needed under applicable law, Spa Escape will obtain your consent prior to processing your personal data for direct marketing purposes.

If you wish to object to the processing set out under C to E and no opt-out mechanism is available to you directly, to the extent applicable, please contact

How does Spa Escape share your data with third parties?

In certain circumstances, we’ll share your personal data with third parties.

  • The booked spa: In order to complete your reservation, we transfer relevant reservation details to the spa you have booked. These can include your name, contact details, payment details and any preferences or other information you specified when you made your reservation. If you have a query about your Spa Reservation, we may contact the spa and ask them to handle your request. We will forward your credit card details to the booked spa for further handling (assuming you’ve provided us with those details during your booking process). In cases of reservation-related disputes, we may provide the spa with information about the reservation process as needed to handle the dispute. This may include a copy of your reservation confirmation as proof that a reservation was actually made.

  • Third-party service providers: We use service providers to process your personal data on our behalf. This processing is for several purposes, including sending out marketing material or validating the correctness of the email address you provided during the booking process. Third party service providers are bound by confidentiality clauses and are not allowed to use your personal data for other purposes than instructed by Spa Escape.

  • Payment providers and (other) financial institutions: When a chargeback is requested for your Reservation by either you or by the holder of the credit card used to make your reservation, we need to share certain reservation details with the payment service provider and the relevant financial institution to handle the chargeback. This may also include a copy of your reservation confirmation or the IP address used to make your reservation. We may share information with relevant financial institutions, if we consider it strictly necessary for fraud detection and prevention purposes.

  • Competent authorities: We disclose personal data to law enforcement insofar as it is required by law or is strictly necessary for the prevention, detection or prosecution of criminal acts and fraud or if we are otherwise legally obliged to do so. We may need to further disclose personal data to competent authorities to protect and defend our rights or properties, or the rights and properties of our business partners.

  • Advertising partners: We share personal data with advertising partners, including your email address, as part of marketing the Spa Escape services via third parties (to ensure that relevant advertisements are shown to the right audience). We strive to only share email addresses in hashed form to enable the matching of your email address with an existing customer database so that your email address cannot be used for other purposes.

The transmission of personal data as described in this Privacy Statement may include overseas transfers of personal data to countries whose data protection laws are not as comprehensive as those of the countries within the European Union. Where required by European law, we shall only transfer personal data to recipients offering an adequate level of data protection. In these situations, as may be required, we make contractual arrangements to ensure that your personal data is still protected in line with European standards. You can ask us to see a copy of these contractual agreements using the contact details below.

How does Spa Escape process communications that you and your booked spa may send via Spa Escape?

Spa Escape can offer you and spa partners various means to communicate about the Spa reservation and existing reservations, directing the communications via Spa Escape. This allows you and your spa to contact Spa Escape with questions about your reservation or about your accommodation partner via Spa Escape app, and via other channels that we make available.

Spa Escape accesses communications and may use automated systems to review, scan, and analyze communications for security purposes; fraud prevention; compliance with legal and regulatory requirements; investigations of potential misconduct; product development and improvement; research; customer engagement, including to provide you with information and offers that we believe may be of interest to you; and customer or technical support. We reserve the right to block the delivery of or review communications that we, in our sole discretion, believe may contain malicious content, spam, or may pose a risk to you, accommodation partners, Spa Escape, or others. Note, all communications sent or received using Spa Escape communication tools will be received and stored by Spa Escape. The booked spa may choose to communicate with you directly via email or other channels that Spa Escape does not control.

How does Spa Escape make use of mobile devices?

We offer free apps for a variety of mobile devices, as well as versions of our regular website that have been optimized for mobile and tablet browsing. These apps and mobile websites process the personal details you give us in much the same way as our website does – and they also allow you to use location services to find Services nearby – if you want us to. With your consent, we may send you push notifications with information about your reservation. You may grant us access to your location data or contact details in order to provide services requested by you. When you upload a picture from your mobile device, your picture may also be tagged with your location information. Please read the instructions of your mobile device to understand how to change the settings and enable the sharing of such data or the receipt of push notifications.

We make use of something known as cross-device tracking in order to optimize our services and marketing activities. This may be done with or without the use of cookies. With cross-device tracking, Spa Escape is able to track user behaviour across multiple devices. As part of cross-device tracking, Spa Escape may combine data collected from a particular browser or mobile device with another computer or device linked to the computer or device from which the data was collected.

In order to optimize the content of the Spa Escape newsletter, Spa Escape combines the searches and reservations made from different computers and devices. You can unsubscribe from the Spa Escape newsletter at any time.

Personalized advertisements shown to you on other websites or in apps, can be offered based on your activities on linked computers and devices. By amending your cookie settings on your device, you can change your cross-device tracking settings for advertisement purposes.

How does Spa Escape make use of social media?

Here at Spa Escape, we use social media in different ways. We use it partly to facilitate the use of online reservation services, but also to promote our partner spas and to advertise, improve and facilitate our own services.

Other social media services and features. We may integrate other social media services (like social media messaging) to interact with Spa Escape or with your contacts about our services.

What security and retention procedures does Spa Escape put in place to safeguard your personal data?

We observe reasonable procedures to prevent unhauthorised access to, and the misuse of, personal data.

We use appropriate business systems and procedures to protect and safeguard the personal data you give us. We also use security procedures and technical and physical restrictions for accessing and using the personal data on our servers. Only authorized personnel are permitted to access personal data in the course of their work.

We will retain your personal data for as long as we deem it necessary to enable you to use our services, to provide our services to you, to comply with applicable laws, resolve disputes with any parties and otherwise as necessary to allow us to conduct our business, including to detect and prevent fraud or other illegal activities. All personal data we retain will be subject to this Privacy Statement. If you have a question about a specific retention period for certain types of personal data we process about you, please contact us via the contact details provided below.

How does Spa Escape treat personal data of children?

The services offered by Spa Escape are directed at customers of 18 years and older. For customers younger than 18 years old, the use of any of our services is only allowed with the valid consent of a parent or a guardian. In limited cases as part of a reservation, purchase of other services, or in exceptional other circumstances (such as features addressed to families), Spa Escape may collect and use information of children only as provided by the parent or guardian or with their consent. If we become aware that we process information of a child under 18 years old without the valid consent of a parent or guardian, we reserve the right to delete it.

How can you control the personal data you have given to Spa Escape?

You can contact us if you believe that your personal data in our possession is not correct, we are not authorized to use your personal data anymore or if you have other questions regarding to how we use your data or to this Privacy Policy. Send us an e-mail or a letter to the address indicated at the end of this page. Your request will be handled according to the data privacy protection present in Italy.

We want you to be in control of how your personal data is used by us. You can do this in the following ways:

  • you can ask us for a copy of the personal data we hold about you;
  • you can inform us of any changes to your personal data, or you can ask us to correct any of the personal data we hold about you;
  • in certain situations, you can ask us to erase, or block or restrict the processing of, the personal data we hold about you, or object to particular ways in which we are using your personal data;
  • in certain situations, you can also ask us to send the personal data you have given us to a third party.

Where we are using your personal data on the basis of your consent, you are entitled to withdraw that consent at any time subject to applicable law. Moreover, where we process your personal data based on legitimate interest or the public interest, you have the right to object at any time to that use of your personal data subject to applicable law.

We rely on you to ensure that your personal data is complete, accurate and current. Please do inform us promptly of any changes to or inaccuracies of to your personal data by contacting us.

For any of your requests in regards to this Privacy Statement and to exercise any of your rights or if you have a complaint, please contact us by contacting our Data Protection Officer at

If you wish to object to the processing of your personal data on the basis of legitimate interest and no opt-out mechanism is available to you directly, please contact us at

Who is responsible for the processing of personal data via Spa Escape and how to contact us?

Spa Escape controls the processing of personal data as described in this Privacy Statement. Spa Escape S.r.l. is a private limited liability company, incorporated under the laws of Italy and has its offices at Via Greccio 5, 00135 Rome, Italy.

Cookie Statement

Whenever you use our online services, including our applications, cookies and other tracking technologies can be used in various ways, such as making the Spa Escape website work, to analyze traffic, or for advertisement purposes. These technologies are either used by us directly, or by our business partners, including third party service providers and advertisers we work with. If you want to learn more about what a cookie is, how they are used and what your choices are, please read more here.

What is a cookie?

A cookie is a small amount of data that is placed in the browser of your computer or on your mobile device. So-called “first party cookies” (not as much fun as they sound) are cookies which are served by the entity operating the domain through which the cookie is served. Spa Escape’s own cookies are therefore “first party cookies”. In case we allow others to service cookies through the Spa Escape websites and apps, these cookies are so-called “third party cookies”.

In addition, there is a difference between session cookies and permanent cookies. Session cookies will only exist until you close your browser. Permanent cookies have a longer lifespan and are not automatically deleted once you close your browser. We strive to serve cookies or allow the serving of cookies with a maximum lifespan of 5 years. Only in exceptional circumstances, such as for security purposes and where absolutely necessary, will a cookie have a longer lifespan than that.

Next to cookies, other tracking technologies are used which are similar to cookies. These can include web beacons (also known as pixel tags, web bugs or gifs), tracking URLs or software development kits (SDKs). A web beacon is a tiny graphic image of just one pixel that can be delivered to your computer as part of a web page request, in an app, in an advertisement or in an HTML email message. Pixels can be used to retrieve information from your device, such as your device type or operating system, IP address, and time of visit. They are also used to serve and read cookies in your browser. Tracking URLs are used to understand from which referring website the Spa Escape websites or apps are used. SDKs are small pieces of code included in apps, which function like cookies and web beacons.

All these technologies are together referred to in this Cookie Statement as “cookies”.

How are cookies used?

Cookies are used for different purposes. They allow you to be recognized as the same user across the pages of a website, between websites or when you use an app. The types of information that we collect through cookies include IP address; device ID; viewed pages; browser type; browsing information; operating system; internet service provider; timestamp; whether you have responded to an advertisement; the referring URL; and features used or activities engaged in within the website/apps.

Our website and apps use cookies for different purposes:

Technical cookies: We try to give our visitors an advanced, user-friendly website and apps that adapt automatically to their needs and wishes. To achieve this, we use technical cookies to show you our website, to make them function correctly. These technical cookies are absolutely necessary for our website to function properly.

Functional cookies: We also use functional cookies to remember your preferences and to help you to use our website and apps efficiently and effectively. If you are using the Spa Escape websites or apps to search for a Spa, for example, these cookies remember your preferred currency, language, your searches and your previously viewed spas. We may also use cookies to remember your registration information so that you don’t have to retype your login credentials each time you visit our site. Passwords will, however, always be encrypted. These functional cookies are not strictly necessary for the functioning of our website or apps, but they add functionality and enhance your Spa Escape experience.

Analytics cookies: We use these cookies to gain insight into how our visitors use Spa Escape. This means we can find out what works and what doesn’t, optimize and improve our websites or apps, understand the effectiveness of advertisements and communications, and ensure we continue to be interesting and relevant. The data we gather can include which web pages you have viewed, which referring/exit pages you have entered and left from, which platform type you have used, which emails you have opened and acted upon, and date and time stamp information.

It also means we can use details about how you’ve interacted with the site, such as the number of clicks you make on a given page, your mouse movements and scrolling activity, the search words you use and the text you enter into various fields. We make use of analytics cookies as part of our online advertising campaigns to learn how users interact with our website or apps after they have been shown an online advertisement. This may include advertisements on third-party websites. Analytics cookies may also be used to enable our business partners to learn if their customers make use of accommodation offers integrated into their websites.

Commercial cookies: We use third-party cookies as well as our own to display personalized advertisements on our websites and on other websites. This is called “retargeting,” and it is based on browsing activities, such as the destinations you have been searching for, the accommodation you have viewed and the prices you have been shown.

What are your choices?

To learn more about cookies and how to manage or delete them, simply visit the help section of your browser. In the settings for browsers such as Internet Explorer, Safari, Firefox or Chrome, you can set which cookies to accept and which to reject. Where you find these settings depends on which browser you use. Use the “Help” function in your browser to locate the settings you need.

If you choose not to accept certain technical and/or functional cookies, you may not be able to use some functions on our website.

Analytics: In order to control the collection of data for analytical purposes through Google Analytics from certain browser types, you may want to visit the following link: Google Analytics Opt-out Browser Add-on (only for desktop).

If you have any questions about this Cookie Statement, please send an email to

Our Cookie Statement may also be amended from time to time. So visit this page regularly to keep abreast of updates.