Privacy policy

Last updated: 13 October 2026

Messages and assistance

The website assistant uses OpenAI. Your messages and, only when you start an available voice call, your voice are sent to that provider to answer questions and help with bookings. Personal information you type or say may therefore be transmitted; do not provide medical information, passwords or card numbers. Hanging up stops microphone use. Internal shop notes and the customer database are not sent to the assistant. You can book without AI. A booking is confirmed only after it is saved and confirmed by the website. Data may be processed outside the European Economic Area. OpenAI states that API data is not used for model training by default; abuse-monitoring logs may be retained for up to 30 days, subject to legal or safety exceptions. Details: https://developers.openai.com/api/docs/guides/your-data . Google AI is deferred and does not process customer conversations for this service.

Data controller

The site is operated by Ms Bingxin Bai, a sole trader, under the Baï Tuina name. Use the email address below for questions about personal data.

Information used

Depending on the function used, the site may process your name, phone number, email, service, duration, appointment date and time, appointment status and history, optional message, customer-account information, payment status and reference, gift-card information, customer-service messages and technical logs needed for security. Baï Tuina does not receive or store your full card number or security code.

Purposes and legal bases

Information is used to create, confirm, change and cancel appointments, manage payments and gift cards, send necessary appointment information, answer enquiries, secure the site, meet legal obligations and protect Baï Tuina’s rights. Processing relies, as applicable, on fulfilling your request or contract, a legal obligation, legitimate security and management interests, or consent where required.

First booking and customer account

You may book with your name, phone number and email without registering first. The site creates a customer record linked to the booking. Authentication is required to view private records; entering an email address alone does not grant access. If you choose Google sign-in, the name, email and avatar supplied by Google help identify your account. Your Google password is not shared with us.

Providers

Kinsta hosts the website; WordPress and Amelia manage pages, accounts and appointments. Stripe processes card payments offered on this site. Google provides Google sign-in and sends shop emails through the Gmail API, configured with send-only permission. Emails are notifications: a booking shown as successful does not require a second approval by email. PayPal, SMS and Google Calendar synchronisation are not enabled here. Wero payments use details or a QR code supplied by the studio and are checked by the studio; Wero is not integrated into automatic website checkout. We do not sell your data.

Retention

Retention depends on the purpose: appointment and customer follow-up, handling enquiries, accounting duties or retaining necessary evidence for a dispute. Accounting records subject to statutory retention are kept for ten years. There is currently no general automatic deletion of customer files after three years. You may request a review using the email below; we will explain which records can be deleted and which must be retained. Cancelling an appointment does not automatically delete its supporting records.

Operation records and booking restrictions

To manage appointments, the studio records creation, rescheduling, cancellation and payment-status changes, including the time, booking reference and actor. Management logs are accessible only to authorised studio staff. Each appointment permits a combined total of 3 customer reschedules or cancellations; more than 3 cancellations by one account within a rolling 12-month period, regardless of the reason, suspend new bookings without deleting existing records. Contact the studio to explain your circumstances, check an error or request human review. The studio can correct errors and lift a restriction. The 12-month counting window does not mean that all history is automatically deleted after a year.

Your rights

You may request access, correction, deletion or restriction and, depending on the legal basis, object, withdraw consent or request portability. You may also complain to the French data-protection authority, the CNIL.

Security reminder

Never send a password, verification code, full card number, detailed medical record, prescription or medical photograph through a message or free-text field.

E-mail: tuina.bay@gmail.com