Privacy policy

Privacy policy

Last updated: 8 September 2026

Data controller

The site is operated by Ms Bingxin Bai, a sole trader, under the Baï Tuina name. Use the email address below for questions about personal data.

Information used

Depending on the function used, the site may process your name, phone number, email, service, duration, appointment date and time, appointment status and history, optional message, customer-account information, payment status and reference, gift-card information, customer-service messages and technical logs needed for security. Baï Tuina does not receive or store your full card number or security code.

Purposes and legal bases

Information is used to create, confirm, change and cancel appointments, manage payments and gift cards, send necessary appointment information, answer enquiries, secure the site, meet legal obligations and protect Baï Tuina’s rights. Processing relies, as applicable, on fulfilling your request or contract, a legal obligation, legitimate security and management interests, or consent where required.

First booking and customer account

You can make a first booking by entering your name, phone number and email without creating an account beforehand. Amelia creates the customer record linked to the booking. Google sign-in may be offered to simplify access; your Google password is never shared with Baï Tuina.

Providers

Necessary information may be processed by Kinsta for hosting, WordPress and Amelia for the site and appointments, Stripe or PayPal when that payment method is chosen, Google when Google sign-in is used, and the messaging providers actually enabled for confirmations and reminders. Baï Tuina does not sell customer data.

Retention

Account, appointment and customer-relationship information is kept during the relationship and generally for no more than three years after the last appointment or contact, unless a legal duty or specific need applies. Accounting documents and transaction evidence subject to legal retention are kept for ten years. Technical logs are kept only as long as necessary for security and operation.

Your rights

You may request access, correction, deletion or restriction and, depending on the legal basis, object, withdraw consent or request portability. You may also complain to the French data-protection authority, the CNIL.

Security reminder

Never send a password, verification code, full card number, detailed medical record, prescription or medical photograph through a message or free-text field.

E-mail: tuinamassagelyon@gmail.com