Who is responsible for your data
Marimo Company (IRIS Spa & Lounge), commercial registration 7050815328.
What we collect
We ask for as little as we can:
- Your name and mobile number, to manage your booking and send your confirmation on WhatsApp.
- Your email address and notes, if you choose to add them.
- Your bookings, payments and tax invoices. We never store card numbers.
- The campaign that brought you to us (such as UTM codes), if any.
How we use it
To manage your appointments and contact you about them, to issue invoices as ZATCA requires, and to improve our service. We only send marketing messages with your consent, which you can withdraw at any time.
Where it is kept
Customer data is kept on Amazon Web Services servers in Germany, outside the Kingdom, under the control of Marimo Company. It travels over encrypted connections, its backups are encrypted, and only authorised members of our team can reach it. Transfers outside the Kingdom follow the Personal Data Protection Law and its regulation on transferring data outside the Kingdom. The WhatsApp messages we send you pass through Meta's servers, which may be outside the Kingdom.
Your rights
Under the Personal Data Protection Law you can see your data, ask for a copy, correct it, ask us to delete it, and withdraw consent to marketing. Contact us on WhatsApp or by phone. We keep financial records for as long as the law requires.