Privacy Policy

1. Data Controller

Serene Massage Therapies is the Data Controller responsible for determining how your personal information is processed.

Contact details:

Name: Victoria O'Hanlon

Phone: 07731 703 772

Email: serene-massages@outlook.com

Location: Faversham, Kent

 

2. Types of Personal Data Collected

Personal Data Collected I may collect and process the following categories of personal data:

• Identity information (name, date of birth)

• Contact information (address, phone number, email)

• Health information relevant to treatment (medical history, symptoms, conditions)

• Treatment notes and session records

• Payment information (processed securely via third‑party providers; not stored by me directly)

• Website usage data (cookies, browsing behaviour)

Health information is classified as special category data and is processed only when necessary for the provision of safe treatment and in compliance with legal obligations.

3. Lawful Basis for Processing

Lawful Basis Personal data is processed under the following lawful bases:

• Consent – when you agree to receive communications or provide information voluntarily

• Contract – to deliver massage therapy services you have requested

• Legal obligation – to meet insurance, record‑keeping, and regulatory requirements

• Vital interests – where processing is necessary to protect your health

• Legitimate interests – to manage appointments and maintain business operations

4. How Your Data Is Used

Data Use Your personal data is used for the following purposes:

• Providing safe and appropriate massage therapy treatments

• Managing bookings, cancellations, and communication

• Maintaining accurate clinical and administrative records

• Meeting insurance, legal, and regulatory obligations

• Improving website functionality and user experience (cookies)

Your data is not used for marketing unless you have explicitly opted in.

5. Data Storage and Security

Data Storage I take appropriate technical and organisational measures to protect your personal data, including:

• Password‑protected digital systems

• Secure, locked storage for physical records

• Restricted access to authorised personnel only (the therapist)

• Encrypted payment processing via approved third‑party providers

6. Data Sharing

Your personal data will not be shared with third parties except:

• Where you have provided explicit consent

• Where required by law or regulatory authorities

• Where necessary for insurance or professional compliance

• Where required to protect your vital interests

Data is never sold or shared for marketing purposes.

7. Data Retention

Data Retention Client records are retained for 7 years from the date of your last appointment, in accordance with UK insurance and professional standards. In the case of a minor, records are retained for 7 years from the date of their 18th birthday. After this period, records are securely destroyed.

8. Your Rights Under UK GDPR

Your Rights You have the following rights regarding your personal data:

• Right to access

• Right to rectification

• Right to erasure (where legally permissible)

• Right to restrict processing

• Right to data portability

• Right to object

• Right to withdraw consent (for marketing communications)

Requests can be made by contacting me directly using the details above.

9. Cookies and Website Tracking

Cookies The website may use cookies to enhance functionality and improve user experience. You may disable cookies through your browser settings at any time.

No invasive tracking technologies are used.

10. Changes to This Policy

This Privacy Policy may be updated periodically to reflect legal, regulatory, or operational changes. The most recent version will always be available on the website.

11. Complaints

Complaints should be sent directly to Vicky on serene-massages@outlook.com where I will endeavour to resolve the issue in a timely manner and following the guidelines from ICO. Should you feel your complaint has not been appropriately handled contact the Information Commissioner’s Office (ICO) via their website Website: ico.org.uk or Telephone: 0303 123 1113