Privacy and data export

Guest profile and treatment history export — GDPR ready.

header-x
Privacy and data export

Spa guests have the right to access and export the treatment history, preference notes and personal data you hold. Xircuit's privacy module provides self-service export and centralised consent management so you meet that obligation without disrupting your team's workflow.

Request a demo

GDPR compliance built into every account.

  • Guests export treatment history, profile data and communication records in a structured package.
  • Consent for health-related treatments, marketing and preference sharing is managed in one privacy panel.
  • Consent and export events are logged so the spa can demonstrate compliance at any point.

Xircuit's privacy and data-export module lets members request a full export of their personal data and lets admins manage consent settings — all from within the platform. It supports your GDPR obligations without manual data-handling processes or third-party tools.

Self-service data export

Members request a personal data export from their own profile page — no admin involvement needed for standard requests.

Consent management

Admins configure and update consent settings for marketing and health data from a central privacy panel.

Structured data package

Exported data is delivered in a structured, machine-readable format so members and their representatives can review it clearly.

Consent withdrawal support

Members can withdraw specific consents at any time — the platform updates data handling accordingly.

Audit trail

Consent changes and data-export requests are logged so you can demonstrate compliance if asked.

Privacy and data export

Day spas and wellness centres that manage data-subject access requests through Xircuit typically respond within hours rather than the days it would take with manual processes — and maintain a complete consent audit trail at no additional administrative effort.

Frequently Asked Questions

How does a member request their personal data?

Members open their profile privacy settings and submit a data-export request. The export is prepared and delivered to their registered email address — no admin action is required for standard requests.

Does this satisfy a GDPR data-subject access request?

Xircuit's data-export feature supports your GDPR data-subject access request process by providing a comprehensive export of personal data held within the platform. Always consult your own legal or compliance adviser for jurisdiction-specific obligations.

How do admins manage consent settings?

Admins access the privacy panel within the organisation settings to configure consent categories, update consent copy and review individual consent records — all in one place.

Related features

Ready to see Xircuit in action?

Request a demo Get the app