Data usage GDPR

This Data Usage Policy outlines how Massage Kingdom collects, stores, uses, shares, and protects your personal data when you interact with our website and services. We are committed to upholding the highest standards of privacy, transparency, and data protection in accordance with UK GDPR and related legislation.

1. Who we are

Massage Kingdom is a provider of wellness and massage services based in the United Kingdom. Our website address is https://massagekingdom.uk.

If you have any questions about how we use your data, please contact us at:

• Email: contact@massagekingdom.uk
• Phone: +44 7443 924467

2. What data we collect

We may collect and process the following types of personal data:

• Identity data: your name, date of birth, gender.
• Contact data: email address, telephone number, physical address.
• Health data: relevant information about allergies, medical conditions, or injuries (only with your explicit consent).
• Booking data: appointment history, session preferences, therapist selections.
• Payment data: transaction details (handled via secure third-party processors; we do not store card information).
• Technical data: your IP address, browser type, operating system, and browsing behaviour on our site.
• Marketing data: your communication preferences and marketing opt-ins.

3. How we collect data

Your data may be collected through:

• Website forms (e.g. booking, contact, newsletter).
• Direct communications (e.g. email, phone, social media).
• Cookies and analytics tools (see our Cookies Policy for more information).
• Third-party systems such as online payment or booking platforms.

4. Why we collect and use your data

Your personal data is used for the following lawful purposes:

• To fulfil a contract: managing your booking, providing our massage services, and following up on your experience.
• Legal obligations: retaining records for tax or regulatory purposes.
• Legitimate interests: understanding user behaviour to improve our website and services.
• Consent: sending you marketing communications or collecting health data (you can withdraw consent at any time).

5. Data sharing and third parties

We do not sell your personal data. However, we may share it with trusted third parties that help us operate our business:

• Payment processors (e.g. Stripe, Square).
• Email marketing platforms (e.g. Mailchimp).
• Booking platforms (e.g. Fresha or Timely, if used).
• Legal or regulatory authorities if required by law.

All partners are subject to strict data processing agreements and must comply with UK data protection law.

6. Data transfers outside the UK

If your data is transferred outside the UK or EEA, we ensure adequate safeguards are in place—such as the UK International Data Transfer Agreement (IDTA) or standard contractual clauses approved by the ICO.

7. How long we retain your data

We retain your data only as long as necessary:

• Booking and transactional data: 7 years (legal requirement).
• Contact and enquiry data: up to 2 years after last interaction.
• Marketing data: until you unsubscribe or withdraw consent.
• Health data: deleted upon account closure or upon request, unless needed for legal protection.

8. Your rights

Under UK GDPR, you have the right to:

• Access your personal data.
• Request correction of inaccurate data.
• Request erasure (“right to be forgotten”) where applicable.
• Restrict or object to certain types of processing.
• Withdraw your consent at any time.
• Request data portability to another provider.
• Lodge a complaint with the ICO at ico.org.uk.

9. Data security

We take data security seriously and implement industry-standard protections, including:

• SSL encryption on our website.
• Restricted access to personal data.
• Regular data access reviews.
• Secure third-party platforms compliant with UK GDPR.

10. Automated decisions & profiling

We do not use your personal data for any automated decision-making or profiling activities that produce legal effects or significantly affect you.

11. Your responsibilities

You are responsible for ensuring that any data you provide is accurate, complete, and up to date. If your personal details change, please inform us as soon as possible.

12. Updates to this policy

We may update this policy periodically to reflect changes in data protection laws or business practices. We recommend reviewing this page regularly. Any major changes will be communicated clearly via our website or by email if applicable.

13. Contact us

If you have any questions about how your data is used or wish to exercise your rights, please contact our Data Protection Officer:

• Email: contact@massagekingdom.uk
• Phone: +44 7443 924467
• Website: https://massagekingdom.uk

Massage Kingdom remains committed to your privacy, dignity, and digital wellbeing.