NBest minimizes data collection, does not sell personal data, and gives you control over optional cookies. This policy also explains the limited use of Google Ads data through our internal tool.
Scope and data controller
This policy applies to the NBest Bali Massage website, communications initiated through it, and internal tools used to administer advertising and measurement. The data controller is NBest Bali Massage at Jln. Pantai Berawa No. 94, Tibubeneng, Canggu, Kuta Utara, Bali.
When you continue to WhatsApp, Instagram, Facebook, Google Maps, or another third-party service, subsequent processing is also governed by that provider's policy.
Data we process
We may process information you voluntarily provide, including your name, telephone number, service location, preferred time, treatment choice, and booking message. Health information relevant to safe treatment should only be shared with our team or therapist and is not sent to advertising platforms.
The website may process limited technical data such as IP address, device and browser type, language, visited pages, visit time, WhatsApp or telephone clicks, and attribution parameters including UTM, gclid, and fbclid.
Purposes and legal grounds
We use data to answer enquiries, arrange and deliver services, maintain security, comply with legal obligations, improve the website, measure campaign results, and administer NBest's own advertising.
Processing is based on steps requested before or during a service, your consent to optional cookies, legitimate interests in security and business operations, or applicable legal obligations.
Google API and Google Ads data
NBest's internal tool uses OAuth 2.0 to access only the Google Ads account that is expressly authorized. Access is limited to advertising account information, campaign configuration, budgets, keywords, ads, conversion actions, and aggregate performance reports needed to manage NBest advertising.
The tool does not request Google passwords, Gmail, Google Drive, contacts, photos, or unrelated Google data. Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. OAuth data is not sold, used to build advertising profiles for others, or shared except with authorized service providers operating the tool for NBest.
Retention, security, and deletion
Data is retained only as long as required for its original purpose, operations, dispute resolution, security, and legal obligations. Website attribution parameters remain for the current browser session; consent choices remain on your device until changed or cleared. Third-party retention follows the relevant account settings and provider policy.
We use access restrictions, account authorization, credential controls, and logging that excludes tokens and sensitive information. No storage or transmission method is completely risk-free.
Your choices and rights
You may request access, correction, or deletion of data we control, withdraw cookie consent, or ask questions about processing. Requests are handled under applicable law and following reasonable verification to protect your information.
For a data request or OAuth access revocation, email info@nbestbalimassage.com. You can also revoke app access from your Google Account security settings.
Changes and contact
We may update this policy when our services, technology, or legal obligations change. The latest revision date will appear on this page.
For privacy questions, email info@nbestbalimassage.com or use the details on our Contact page.