Privacy policy
How the International Institute collects, uses and protects personal data: enquiries, partner-school applications, the graduate register, employer searches, newsletters, cookies and your rights.

What InternationalInstituteOfSpaManagement.com collects, why, for how long, and your rights. This policy covers this site; the sister institutes publish their own.
What we collect
Enquiries: name, email, phone, country, city, pathway, what you tell us — to answer you and refer you to a partner school if you ask. Partner-school applications: school, contacts, tutors, premises, approvals — to assess accreditation. Graduate register: only what you opt in to show employers; withdraw any time. Employer accounts: business, contact, listing. Analytics and chat: Google Analytics 4 with IP anonymisation and Tawk.to if you open the chat.
Sharing
Enquiries go to a partner school or sister institute only when you tick the consent box. Register entries are visible to registered employers only. We never sell data and never share it with recruiters who have not signed the no-fee agreement.
Retention
Enquiries 24 months; applications 3 years; register entries until you withdraw; certificate records for the life of the credential plus three years.
Cookies and rights
Necessary cookies for forms; analytics and chat cookies you can refuse in the banner. Access, correction, deletion, portability and objection under GDPR, PIPEDA, India's DPDP Act and similar laws: email support@internationalinstituteofspamanagement.com; answered within 30 days.