Privacy Notice

Who is responsible

The personal information handler and data controller for this booking service is 上海兰源品牌管理有限公司 / Lannlife Wellness Co., Ltd., operating the 蘭 Lann brand. Contact: hanson@lannlife.com.

Information we collect

We collect the information you enter or generate while using the booking service.

• Name, email address and optional phone or WhatsApp number.
• Selected store, treatment and duration; preferred or suggested visit time; party size; and optional notes.
• Booking status, store messages, staff handling records, and the private booking-management token and link.
• Limited security and reliability data such as a server-generated request ID, error outcome and aggregate performance measurements. Please do not put unnecessary medical or other sensitive information in notes.

Why we use information

We use personal information to receive and manually review a preferred-time request, contact the selected store, send receipts and status updates, confirm or suggest a time, support changes or cancellations, secure and troubleshoot the service, maintain delivery and consent evidence, and meet legal obligations. We do not use booking information for marketing unless you separately choose a future marketing service.

Who receives information

Access is limited to the selected store and authorised LANN operations personnel who need it to handle the request. We also use contracted service providers for hosting, database operations, internal Feishu/Lark notifications, security and transactional email. We do not sell booking personal information.

Email processing in the United States

To deliver transactional booking emails, we electronically transfer your email address and email content—your name, selected store and address, selected treatment, requested or suggested time, party size, any store message, delivery metadata and private booking-management link—to Plus Five Five, Inc. (Resend) in the United States. The purpose is only to deliver booking receipts, confirmations and updates. Resend can be contacted at privacy@resend.com.

Before submission, we ask for separate, unchecked consent to this transfer and United States processing. You may exercise access, correction, deletion or withdrawal rights through hanson@lannlife.com. Withdrawal does not affect processing already completed and may prevent us from delivering the emails required to continue the booking.

How long we retain information

The booking database keeps customer personal information until one calendar year has passed after the latest relevant booking activity, including the latest status change and requested or suggested visit time. We then retire the private token and anonymise direct identifiers and free text, while retaining non-identifying booking and aggregate audit facts.

Email-provider, notification-provider, log and backup copies follow their own contractual, security and legal deletion cycles and are not deleted by the booking-database anonymisation tool. Contact us to request deletion.

Preferences and analytics

The public site may store your language preference on your device. Production analytics are limited to aggregate page views and non-identifying performance measurements, without an analytics cookie or other persistent analytics identifier, and without third-party advertising analytics.

Security and private links

We apply access controls, limited exports and operational safeguards, but no system is risk-free. The booking-management link acts as your credential: anyone who has it may view or act on the booking. Keep it private and contact us if you believe it has been exposed.

Your choices and rights

Subject to applicable law, you may request access or a copy, correction, deletion, an explanation of our rules, or withdrawal of consent, and may complain to the relevant authority. Email hanson@lannlife.com with enough information for us to locate the request without sending unnecessary sensitive data.

Changes to this notice

We will version and date material changes. If a change requires new consent, the service will ask again instead of relying silently on an older version.