Legal
Privacy policy.
What we collect, why, how long we keep it and how to ask us about it.
What we collect
When you use the booking form we collect your name, mobile number, email address and postcode, the massage or voucher, the length, a day if you give one, and anything you write. The form also records the time it was sent and your IP address, used only to block automated submissions. The voucher builder does not store anything you type; it only shows the preview.
Before a first massage we ask health questions and keep the answers on a client record: medical conditions, medication, pregnancy, injuries and anything that changes how we should massage you. This is health data, held because treating you safely requires it. For a voucher we keep the recipient's name and, if posted, the address.
Why we use it
- To arrange and give your massage, or to make and send a voucher (our contract with you).
- To keep the records our insurer and professional body require (a legal and professional obligation).
- To keep accounting records (a legal obligation).
- To ask for a review after a visit, which you can decline by replying.
Who sees it
Nia and Tomos. The secure booking system, under a data processing agreement. Royal Mail, for a posted voucher's address. Our insurer, only if a claim is made. The review platform receives your email address once. We never sell or share your details for marketing.
How long we keep it
Booking requests that do not lead to a massage are deleted after six months. Client records are kept for seven years after your last massage, as our insurer requires, then securely destroyed. Voucher records are kept until a year after the voucher expires. Accounting records are kept for six years.
Your rights
You can ask for a copy of your record, ask us to correct it, or object to how we use it; some of it we must keep. Email hello@driftwood-massage.co.uk or ask at the studio. We answer within a month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
This website sets a session cookie only when you send the booking form, to limit repeat submissions; it expires when you close the browser. There are no analytics or advertising cookies. The map on the find-us page is loaded from Google, which may set its own cookies when it is displayed; the page works without it.