Privacy policy
How the Global Institute of Spa Management collects, uses and protects personal data: enquiries, applications, the bulletin, the salary survey, cookies and analytics, your rights.
This policy explains what personal data GlobalInstituteOfSpaManagement.com collects, why, how long it is kept and your rights. It applies to this site only; the sister institutes and the network's other sites publish their own.
What we collect
Enquiries and applications: name, email, phone, country, role, employer and what you tell us — used to answer you and, if you enrol, to run the programme. Bulletin: email only. Salary survey: anonymous; no name or employer, and an email only if you ask for results. Site analytics: Google Analytics 4 with IP anonymisation, and a chat widget (Tawk.to) if you open it; both set cookies described below.
Sharing
Enquiries are shared with a sister institute only when you tick the consent box on the form. Programme records are shared with faculty who teach you. We do not sell data. Service providers (email, hosting, analytics, chat) process data under their own terms and are listed on request.
Retention
Enquiries: 24 months. Programme and certificate records: for the life of the credential plus three years, because employers verify certificates. Bulletin: until you unsubscribe. Survey responses: anonymous and kept.
Cookies
Strictly necessary cookies for the forms; analytics cookies (GA4) and chat cookies (Tawk.to) which you can refuse in the banner or in your browser without losing access to any page.
Your rights
Access, correction, deletion, portability and objection, under GDPR, PIPEDA, India's DPDP Act and similar laws as they apply to you. Email support@globalinstituteofspamanagement.com; we answer within 30 days.