Privacy Policy for The London Masseur Guild

This Privacy Policy describes how The London Masseur Guild ("we", "us", or "our") collects, uses, and discloses your personal information when you visit our site, use our services, or interact with us. Your privacy is of paramount importance to us, and we are committed to protecting your data in compliance with applicable laws, including the UK General Data Protection Regulation (GDPR).

1. Information We Collect

We collect various types of information to provide and improve our massage therapy services. This includes:

• Personal Identifiable Information (PII): This may include your name, address, email address, phone number, date of birth, and payment information when you book an appointment or purchase our services (Remedial Massage, Deep Tissue Massage, Sports Massage, Relaxation Massage, Aromatherapy Massage, Hot Stone Therapy, Pregnancy Massage, Corporate On-site Massage, Therapeutic Massage, Injury Rehabilitation Massage).
• Health Information: Given the nature of our services, we may collect information about your health conditions, medical history, allergies, and any physical concerns relevant to the massage therapy sessions. This is essential for providing safe and effective treatments tailored to your needs. This sensitive data is collected with your explicit consent.
• Appointment Details: Information related to your bookings, services requested, and therapist preference.
• Communication Data: Records of your communications with us, including emails, calls, and online chat interactions.
• Website Usage Data: Information about how you interact with our online platform, such as your IP address, browser type, pages visited, and time spent on our site. This helps us improve our website functionality.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Service Delivery: To provide and manage your requested massage therapy services, including booking appointments, processing payments, and tailoring treatments to your specific health needs.
• Communication: To communicate with you regarding your appointments, send confirmations, reminders, and respond to your inquiries.
• Service Improvement: To understand how our services are used and to improve and develop new service offerings.
• Legal and Safety: To comply with legal obligations, enforce our terms and conditions, and protect the rights, property, or safety of The London Masseur Guild, our clients, or others.
• Marketing (with consent): To send you promotional materials, special offers, or updates about our services, only if you have explicitly opted in to receive such communications.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: For the performance of a contract with you, such as booking and providing massage therapy services.
• Legitimate Interests: For our legitimate business interests, such as improving our services, managing our business, and detecting fraud, provided these interests do not override your fundamental rights and freedoms.
• Consent: For processing special categories of personal data (e.g., health information) or for sending marketing communications, where we obtain your explicit consent.
• Legal Obligation: To comply with our legal and regulatory obligations.

4. Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our business and providing services (e.g., payment processors, scheduling software, IT support). These providers are contractually obligated to protect your data and only use it for the purposes for which it was disclosed.
• Therapists: Relevant health information may be shared with your assigned therapist to ensure safe and effective treatment delivery, always with your explicit consent.
• Legal Requirements: If required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction, subject to appropriate privacy safeguards.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. For health information, we adhere to professional guidelines and legal requirements for retention periods in the health and wellness industry.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. This includes encryption, access controls, regular security assessments, and staff training. While we strive to protect your personal information, no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee absolute security.

7. Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
• Right to Erasure (Right to be Forgotten): You have the right to request the deletion of your personal data under certain circumstances.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to the processing of your personal data in certain situations, particularly for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues, if you believe your rights have been violated.

To exercise any of these rights, please contact us using the details provided below.

8. Third-Party Links

Our online platform may contain links to third-party websites. This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party sites you visit.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post any changes on this page and, where appropriate, notify you by email. We encourage you to review this Privacy Policy periodically.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: