We are committed to protecting the privacy and security of personal data. This policy outlines our approach to data protection and your rights regarding the personal data we collect, process, and store. 

This policy applies to all staff, contractors, and third parties who process personal data on our behalf.

​

We adhere to the following principles when processing personal data:

• Lawfulness, Fairness, and Transparency: We process personal data lawfully, fairly, and transparently.

• Purpose Limitation: We collect personal data for specified, explicit, and legitimate purposes.

• Data Minimization: We collect only the personal data necessary for the purposes for which it is processed.

• Accuracy: We ensure that personal data is accurate and kept up to date.

• Storage Limitation: We retain personal data only as long as necessary for the purposes for which it is processed.

• Integrity and Confidentiality: We process personal data securely to protect against unauthorized or unlawful processing, accidental loss, destruction, or damage.​

​

Legal Basis for Processing

We process personal data based on one or more of the following legal bases:

• Consent

• Performance of a contract

• Compliance with a legal obligation

• Protection of vital interests

• Legitimate interests

​

Personal Data We Collect

We may collect the following types of personal data:

• Name

• Contact details (address, phone number, email)

• Medical history and treatment records (for providing massage therapy services)

• Appointment history​

 

How We Use Personal Data

We use personal data for the following purposes:

• Providing massage therapy services

• Managing appointments and customer relationships

• Processing payments

• Communicating with clients

• Complying with legal and regulatory obligations

 

Data Security

We do not store data electronically staff are trained to maintain the security of data collected.

 

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.

 

Data Subject Rights

Individuals have the following rights regarding their personal data:

• The right to be informed about the processing of their data

• The right of access to their data

• The right to rectification of inaccurate data

• The right to erasure of their data

• The right to restrict processing

• The right to data portability

• The right to object to processing

• The right not to be subject to automated decision-making

 

Data Breaches

We have procedures in place to detect, report, and investigate data breaches. In the event of a data breach, we will notify affected individuals and the relevant supervisory authority as required by law.

​​

Legal Compliance

We comply with all relevant laws and regulations related to equal opportunities, including the General Data Protection Regulation (Data Protection Act 2018)