Privacy policy

1. Introduction

I run Kasia Massage as a small massage therapy business based in Brickhill, Bedford.

I take your privacy seriously and only collect information that I need to respond to enquiries, manage bookings, provide safe and appropriate massage therapy, keep accurate records and meet my legal, insurance and professional responsibilities.

2. Information I collect

I may collect the following information from you:

  • Contact details: your name, email address, phone number and any details you provide when you contact me.

  • Booking information: appointment date, time, location, treatment type and any booking notes you provide.

  • Health and lifestyle information: relevant details about injuries, pain, medication, medical conditions, allergies, pregnancy, recent surgery, stress, posture, work habits, exercise or lifestyle.

  • Treatment notes: information about what was discussed, what treatment was given, areas worked on, pressure used, aftercare advice and any changes noted between sessions.

  • Payment information: details needed to manage payments, although I do not store full card details myself.

  • Website information: basic information about how visitors use this website, if analytics or cookies are used.

3. Why I use your information

I use your personal information so I can:

  • Respond to enquiries.

  • Manage bookings and appointments.

  • Provide safe, appropriate and personalised massage therapy.

  • Keep accurate client and treatment records.

  • Give relevant aftercare advice.

  • Manage payments, cancellations and appointment communication.

  • Meet legal, insurance, tax and professional record-keeping requirements.

  • Improve this website and understand how people find and use it.

4. Lawful basis for using your information

Under UK data protection law, I need a lawful basis for collecting and using your personal information.

For enquiries and bookings, I use your information because it is necessary to take steps before providing a service or to provide the service you have booked.

For treatment records and health-related information, I use your information because it is necessary to provide a safe and appropriate massage therapy service and to meet my professional and insurance responsibilities.

For accounting and tax records, I may need to keep some information because of legal obligations.

For general business communication, client care and service improvement, I may rely on legitimate interests, where this does not override your rights.

Where I ask for consent, you can withdraw your consent at any time.

5. Health information

Some of the information I collect may be sensitive health information. I only ask for information that is relevant to your treatment and safety.

I use this information to understand whether massage is suitable for you, whether treatment needs to be adapted, or whether you may need to seek medical advice before treatment. Please tell me if any of your health information changes before a future appointment.

6. How I store and protect your information

I take reasonable steps to keep your information safe and private.

Your information may be stored in secure digital systems, booking systems, email records, client notes or accounting records. Where I use third-party systems, I aim to use reputable providers with appropriate security measures in place.

7. Who I share your information with

I do not sell your personal information. I only share your information where needed.

Booking or payment providers, if used to manage appointments or payments.

Accounting or tax services, where needed for business records.

Professional advisers, insurers or legal services, if needed to protect my business or deal with a claim.

Medical or emergency services, but only if there is a serious concern for your safety or someone else's safety.

Website, email or hosting providers that help this website and my business systems work.

I do not share your information for unrelated marketing.

8. How long I keep your information

I keep your information only for as long as needed.

Enquiry emails may be kept for up to 12 months if you do not become a client.

Client treatment records are usually kept for at least 7 years after your last appointment, or longer where required by insurance, legal or professional guidance.

Financial records are usually kept for 6 years for tax and accounting purposes.

After this, information will be securely deleted or destroyed where possible.

9. Marketing

I will only send you marketing emails if you have agreed to receive them. You can unsubscribe or ask me to stop contacting you for marketing at any time by emailing hello@kasiamassage.co.uk.

Service messages, such as appointment confirmations, reminders or important updates about your booking, are not marketing.

10. Cookies and website analytics

This website may use cookies or basic analytics to understand how visitors use the site and to help it work properly.

Cookies are small files stored on your device. Some cookies are needed for the website to work. Others may help me understand which pages are visited and how people find the site. Where required, you will be asked for consent before non-essential cookies are used.

11. Your rights

You have rights over your personal information. You can ask me to:

  • Tell you what personal information I hold about you.

  • you a copy of your personal information.

  • Correct information that is wrong or incomplete.

  • Delete your information, where I no longer need to keep it.

  • Limit how I use your information.

  • Object to how I use your information.

  • Transfer your information to another provider, where this applies.

  • Withdraw consent, where consent is the lawful basis for using your information.

  • I will respond to requests as soon as I reasonably can and normally within one month.

12. If you have a concern

If you are unhappy with how I use your personal information, please contact me first so I can try to resolve it.

You can also complain to the Information Commissioner's Office, which is the UK regulator for data protection.

13. Contact

For questions about this privacy policy or to make a request about your personal information, contact me at: hello@kasiamassage.co.uk

14. Changes to this policy

I may update this privacy policy from time to time, especially if my services, booking systems or website tools change. The latest version will always be available on this website.