1. About Me
I am Melanie [Surname], a self‑employed massage therapist based in Stoke Holy Cross, Norwich.
I am the data controller, responsible for how your personal information is collected, used, and protected.
Contact:
Email: melanieedmundsmt@gmail.com
2. The Information I Collect
I collect the following information when you book or receive a treatment:
• Contact details (name, phone number, email)
• Medical history relevant to massage therapy
• Treatment notes and progress records
• Consent forms
• Appointment history
• Payment information (no card details stored)
3. Why I Collect Your Data
I use your information to:
• Provide safe and effective massage treatments
• Contact you about appointments
• Maintain accurate treatment records
• Meet insurance and legal requirements
• Process payments
• Respond to enquiries or complaints
This is based on legitimate interest, legal obligation, and consent where required.
4. How Your Data Is Stored
Your information is stored securely:
• Paper records are kept in a locked cabinet
• Digital records are encrypted and password‑protected
• Access is restricted to me as the practitioner
I do not share your data with third parties unless legally required (e.g., insurance or safeguarding concerns).
5. How Long I Keep Your Data
• Adult clients: 7 years from your last appointment
• Clients under 18: until age 25 (or 8 years after last appointment, whichever is longer)
• Financial records: 5 years for HMRC
After this period, records are securely destroyed.
6. Your Rights Under UK GDPR
You have the right to:
• Access your personal data
• Request corrections
• Request deletion (where legally permitted)
• Restrict or object to processing
• Receive a copy of your data
• Withdraw consent at any time
To exercise any of these rights, contact me using the details above.
7. Cookies
My website may use cookies to help the site function correctly and improve your browsing experience.
You can disable cookies in your browser settings at any time.
8. Third‑Party Services
If you use my online booking system (Square) these services may process your data as part of your booking.
They operate under their own privacy policies, which you can view on their websites.
9. Updates to This Notice
This privacy notice is reviewed annually and updated if legal or business changes occur.