

Privacy Policy
Privacy Policy
​
Last updated: 26/11/2025
This Privacy Policy explains how [Your Name / Business Name] (“I”, “me”, or “the practice”) collects, uses, and protects your personal data when you use my website or massage therapy services. I comply with the UK GDPR and the Data Protection Act 2018.
1. Information I Collect
I may collect the following types of data:
Personal details
-
Name
-
Contact information
-
Date of birth
Health information (special category data)
-
Medical history relevant to treatment
-
Current health conditions
-
GP details
-
Treatment records
Booking and payment details
-
Appointment history
-
Payment records (I do not store card details)
Website data
-
IP address
-
Browser type
-
Pages visited
-
Cookies (see Cookie Policy below)
2. How Your Data Is Used
I use your information to:
-
Provide safe, personalised massage therapy
-
Assess suitability for treatment
-
Maintain accurate treatment notes
-
Contact you regarding bookings
-
Process payments
-
Meet legal and insurance obligations
-
Improve my website (analytics)
I do not sell or share your data for marketing purposes.
3. Lawful Bases for Processing
My lawful bases under the UK GDPR are:
-
Contract – to provide the services you request
-
Consent – for processing health information
-
Legitimate Interests – for appointment reminders and business administration
-
Legal Obligation – to maintain required records
4. Data Storage and Security
-
Digital records are stored securely and password-protected
-
Paper records are kept in locked storage
-
Access is restricted to authorised personnel only
-
I use secure, reputable third-party services where necessary (e.g., payment processors)
5. Data Retention
-
Adult records: 7 years after the last appointment
-
Children’s records: until the client is 25 (or 26 if treated at 17)
After this, records are securely deleted or destroyed.
6. Sharing Your Data
Your data may be shared with:
-
Insurance providers (if legally required)
-
Healthcare professionals (only with your explicit consent)
-
Regulatory authorities (if required by law)
-
Payment processors (no health information shared)
I do not transfer data outside the UK unless appropriate safeguards exist.
7. Your Rights
You have the right to:
-
Access your data
-
Correct inaccurate data
-
Request deletion (in some cases)
-
Restrict or object to processing
-
Withdraw consent
-
Data portability
Contact me at [email address] to make a request.
8. Contact
For questions about this policy or your data:
Jessie Percival- Jessie Lily Therapies
Email: jessielilytherapies@gmail.com
Phone: 07989131992
]Cookie Policy
What Are Cookies?
Cookies are small text files placed on your device to help the site function and improve your user experience.
Types of Cookies I Use
Essential Cookies
Required for the website to work (e.g., security, load balancing).
How to Control Cookies
You can manage or disable cookies via your browser settings.
For more information, visit www.aboutcookies.org
.


