Privacy Policy
1. Introduction
This Privacy Policy explains how Keizo Massage ("we", "our", or "us") collects, uses, stores, and protects your personal data when you use our website or book massage therapy services with us. We are committed to protecting your privacy and complying with our obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What Data We Collect
We may collect the following types of personal data:
- Identity Data: Full name, date of birth
- Contact Data: Email address, phone number, postal address
- Health Information: Any medical information you provide to ensure safe treatment (special category data)
- Booking Information: Appointment history and preferences
- Technical Data: IP address, browser type, time zone settings, and interactions with our website
3. How We Use Your Data
We use your data for the following purposes:
- To provide massage therapy services tailored to your needs
- To contact you about appointments or follow-ups
- To comply with professional and legal obligations
- For internal record-keeping
- With your consent, to send occasional updates or promotions (you can unsubscribe at any time)
We only collect and process your personal data when we have a lawful basis to do so, including consent, contract performance, legal obligations, and legitimate interests.
4. Special Category Data
As a massage therapist, I may collect information about your physical and mental health. This is considered 'special category data', and I only collect it with your explicit consent and solely for the purpose of providing safe, effective treatment.
5. Sharing Your Data
Your personal data will never be sold or shared with third parties for marketing purposes. Data may be shared only in the following circumstances:
- With healthcare professionals if required and with your consent
- With legal or regulatory authorities if required by law
- With our secure booking or website platforms (e.g., Wix, Calendly) to manage appointments
All third-party service providers are required to respect the confidentiality and security of your data.
6. How We Store and Protect Your Data
- We store your data securely in accordance with data protection law.
- Digital records are stored using encrypted, password-protected systems.
- Paper records (if any) are kept in locked, secure storage.
- We retain client records for a minimum of 7 years (or until the client turns 25, if under 18), as required by our professional and insurance obligations.
7. Your Rights
Under the UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of any inaccurate or incomplete data
- Request erasure of your data (in certain circumstances)
- Object to or restrict the processing of your data
- Withdraw your consent at any time (where applicable)
- Lodge a complaint with the Information Commissioner’s Office (ICO)
To exercise any of these rights, contact us using the details below.
8. Cookies
Our website may use cookies to enhance your experience. You can control or disable cookies through your browser settings. For more information, please refer to our [Cookie Policy] (if applicable).
9. Contact Us
If you have any questions or concerns about this Privacy Policy or your data, please contact us via the form below.
ICO Registration Number: [pending]
10. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page and, where appropriate, notified to you by email.