SpaGenix Privacy Notice

1. Who is responsible

Silixys Labs operates SpaGenix in India. It is responsible for account, billing, security, support, website and product-administration data it determines how to use. For customer, booking, workforce and transaction data entered by a tenant, that tenant is primarily responsible and Silixys Labs processes the data to provide the service.

Questions and grievances may be sent to the Grievance Contact at info@silixyslabs.com. Include your name, relationship to SpaGenix, the relevant tenant and the action requested. Do not email identity documents unless requested through a secure channel.

2. Data we collect

• Identity and contact information such as name, business, email, telephone number and city.
• Workspace account, role, branch, authentication and security information.
• Subscription, invoice, payment-reference and support information; SpaGenix does not store full card or UPI credentials merely because a payment is recorded.
• Usage, device, browser, IP address, audit, diagnostic and security events.
• Tenant-controlled data such as customer contacts, bookings, communication preferences, staff schedules, attendance, inventory, invoices and transaction records.
• Information submitted in enquiries, demonstrations, support requests and feedback.

3. Purposes

We use data to provide and secure accounts; deliver requested features; administer subscriptions and support; prevent abuse; communicate service, security and billing notices; comply with law; establish or defend claims; and understand and improve reliability. Promotional contact is sent only where permitted and can be stopped at any time.

Where consent is relied on, it can be withdrawn as easily as it was given. Withdrawal does not invalidate earlier lawful processing. Some account or contractual processing is necessary to provide the service and is not optional while an account remains active.

4. Sharing and processors

Data may be shared with the relevant tenant and its authorised users, hosting and infrastructure suppliers, communications providers, support and security vendors, professional advisers, payment providers where enabled, authorities where lawfully required, and a successor in a business reorganisation. Each recipient receives only what is reasonably required for its function.

We do not sell personal data. Tenant users must consult their tenant for that tenant’s own customer and staff privacy practices.

5. Storage, transfers and retention

SpaGenix is offered for Indian operations. Material use of subprocessors or hosting outside India will be disclosed through service or subprocessor information and handled subject to applicable Indian restrictions.

We keep information for the subscription, the tenant’s configured or instructed retention period, security and backup cycles, statutory accounting periods, limitation periods and legal holds. After the applicable period, data is deleted, overwritten or de-identified. Backup copies may remain isolated until their normal overwrite cycle.

6. Security

We use reasonable safeguards appropriate to the service, including access controls, protected credentials and secrets, encryption in transit, logging, monitoring, patching, backups and incident procedures. No internet service is completely risk-free. Users must protect their credentials and devices and immediately report suspected compromise.

7. Your choices and rights

Subject to applicable law and verification, a person may request a summary of personal data, correction or completion, erasure, withdrawal of consent, grievance handling and nomination where available. For tenant-controlled data, we will direct or assist the request through the relevant tenant.

Send requests to info@silixyslabs.com. We may ask for information needed to verify identity and locate the record. If the response does not resolve the grievance, a person may use remedies available under applicable Indian law, including the Data Protection Board when its complaint mechanism applies.

8. Children and prohibited information

SpaGenix business accounts are not for children. Tenants must not enter children’s personal data without first obtaining any required verifiable parental consent and agreeing appropriate controls with Provider. SpaGenix is not designed for medical or clinical information, allergies, biometric data, Aadhaar numbers, full payment credentials or third-party passwords.

9. Updates and contact

We may update this notice for legal, security or service changes. The version and effective date appear above; material changes will be notified through the service or registered contact where appropriate.

Privacy and grievance contact: info@silixyslabs.com. Postal legal notices should use the Silixys Labs address stated in the applicable order or invoice.