Privacy policy

Effective date: 10 August 2026. Location: Faversham, Kent, United Kingdom.

This Privacy Policy explains how Serene Massage Therapies (“I”, “me”, “my business”) collects, uses, stores, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

Serene Massage Therapies is the Data Controller responsible for determining how your personal information is processed.

Contact details:

Name: Victoria O'Hanlon

Phone: 07731 703 772

Email: serene-massages@outlook.com

Location: Faversham, Kent

2. Types of Personal Data Collected

I may collect and process the following categories of personal data:

Identity information (name, date of birth)

Contact information (address, phone number, email)

Health information relevant to treatment (medical history, symptoms, conditions)

Treatment notes and session records

Payment information (processed securely via third‑party providers; not stored by me directly)

Website usage data (cookies, browsing behaviour)

Health information is classified as special category data and is processed only when necessary for the provision of safe treatment and in compliance with legal obligations.

3. Lawful Basis for Processing

Personal data is processed under the following lawful bases:

Consent – when you agree to receive communications or provide information voluntarily

Contract – to deliver massage therapy services you have requested

Legal obligation – to meet insurance, record‑keeping, and regulatory requirements

Vital interests – where processing is necessary to protect your health

Legitimate interests – to manage appointments and maintain business operations

4. How Your Data Is Used

Your personal data is used for the following purposes:

Providing safe and appropriate massage therapy treatments

Managing bookings, cancellations, and communication

Maintaining accurate clinical and administrative records

Meeting insurance, legal, and regulatory obligations

Improving website functionality and user experience (cookies)

Your data is not used for marketing unless you have explicitly opted in.

5. Data Storage and Security

I take appropriate technical and organisational measures to protect your personal data, including:

Password‑protected digital systems

Secure, locked storage for physical records

Restricted access to authorised personnel only (the therapist)

Encrypted payment processing via approved third‑party providers

6. Data Sharing

Your personal data will not be shared with third parties except:

Where you have provided explicit consent

Where required by law or regulatory authorities

Where necessary for insurance or professional compliance

Where required to protect your vital interests

Data is never sold or shared for marketing purposes.

7. Data Retention

Client records are retained for 7 years from the date of your last appointment, in accordance with UK insurance and professional standards. In the case of a minor, records are retained for 7 years from the date of their 18th birthday. After this period, records are securely destroyed.

8. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

Right to access

Right to rectification

Right to erasure (where legally permissible)

Right to restrict processing

Right to data portability

Right to object

Right to withdraw consent (for marketing communications)

Requests can be made by contacting me directly using the details above.

9. Cookies and Website Tracking

The website may use cookies to enhance functionality and improve user experience. You may disable cookies through your browser settings at any time.

No invasive tracking technologies are used.

10. Changes to This Policy

This Privacy Policy may be updated periodically to reflect legal, regulatory, or operational changes. The most recent version will always be available on the website.

11. Complaints

Complaints should be sent directly to Vicky on serene-massages@outlook.com where I will endeavour to resolve the issue in a timely manner and following the guidelines from ICO. Should you feel your complaint has not been appropriately handled contact the Information Commissioner’s Office (ICO) via their website Website: ico.org.uk or Telephone: 0303 123 1113