Privacy and Cookies Policy

Last updated: September 2026

Massage Movements Ltd ("we", "our" or "us") is committed to protecting your personal information and privacy. This combined Privacy and Cookies Policy explains how we collect, use and safeguard your information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

1. How we collect your information

We may collect personal information:

When you complete a contact, booking, consultation or consent form.
When you book, receive, cancel or reschedule a massage treatment.
When you contact us by email, telephone, text message, social media or through our website.
When you subscribe to marketing communications.
When you make a payment.
Through cookies, analytics tools and website log files when you browse our website.
From a parent, guardian, carer or another person making a booking on your behalf.

2. Legal basis for using your information

Under UK GDPR, we process personal information using one or more of the following lawful bases:

Consent: Where you have given clear consent, such as agreeing to receive marketing communications.
Contractual necessity: Where we need to use your information to arrange and provide your massage treatment, process payment or manage your booking.
Legal obligation: Where we must retain or disclose information to comply with the law, including accounting and tax requirements.
Legitimate interests: Where using your information is reasonably necessary to operate and protect the business, administer appointments, respond to enquiries, prevent fraud, maintain appropriate treatment records or defend legal claims, provided your rights and interests are not overridden.

Health information is classed as special category personal data and receives additional protection. We will normally use relevant health information with your explicit consent so that we can assess whether massage is suitable and provide your treatment safely. Where necessary, we may also retain or use health and treatment information for the establishment, exercise or defence of legal claims.

You may withdraw consent at any time. However, if you do not provide relevant health information, or withdraw consent for us to use it, we may be unable to provide a treatment safely.

3. Types of information we collect

We may collect:

Your name, address, email address, telephone number and date of birth or age.
Your appointment address and relevant access or parking information.
Booking history, treatment type, appointment times, cancellations and communications.
Payment, invoice and transaction information. Full card details are normally handled directly by our payment provider and are not stored by us.
Consultation forms, treatment consent and treatment notes.
Relevant information about your health, medical conditions, symptoms, injuries, areas of pain or tension, medication, allergies, pregnancy or recent surgery.
Your treatment preferences, aftercare information and progress.
Marketing preferences and records of consent or opt-out requests.
Website usage information, including IP address, browser, device, pages viewed and cookie identifiers.

We only ask for health information that is relevant to deciding whether and how your massage can be provided safely.

4. How we use your information

We may use your information to:

Respond to enquiries and arrange appointments.
Assess whether massage is suitable for you.
Provide, personalise and safely manage your treatment.
Maintain consultation, consent and treatment records.
Process payments, issue invoices and manage cancellations or refunds.
Send booking confirmations, appointment reminders, changes and relevant aftercare information.
Respond to complaints and manage insurance or legal matters.
Meet accounting, tax and other legal obligations.
Protect our clients, therapist, website and business against fraud, misuse or security threats.
Improve our website and services using permitted analytics.
Send rebooking reminders, news or offers where you have consented or where the law otherwise permits us to do so.

Booking confirmations, appointment reminders and essential aftercare are service communications. Rebooking reminders, offers and newsletters may be marketing communications. You can opt out of marketing at any time without affecting essential messages about an existing appointment.

5. Sharing your information

We may share information with trusted third-party providers that help us operate the business, including:

Wix – To manage bookings, client details and appointment communications.
Wix and its payment providers – To process online booking payments securely.
Gmail and Wix – To send appointment or marketing communications.
Google Analytics – To analyse website use, where the required cookie choice has been made.
Accountants, professional advisers, insurers and claims handlers.
Regulators, law-enforcement bodies or other authorities where required or permitted by law.

Service providers acting on our behalf are required to protect information and use it only for the agreed purpose. We do not sell or rent personal information.

We will not disclose your health or treatment information to relatives, employers or healthcare professionals unless you authorise us to do so or disclosure is otherwise required or permitted by law.

Some providers may process information outside the United Kingdom. Where this happens, we will use an appropriate safeguard recognised under UK data-protection law, such as UK adequacy regulations or approved contractual protections.

6. Retaining your information

Client consultation, consent and treatment records for adults are normally retained for seven years following the last treatment. Where the client was under 18, records are normally retained until seven years after the client reaches the age of 18.

Other personal information is kept only for as long as it is reasonably needed for the purpose for which it was collected, including administering bookings, meeting legal and accounting obligations, handling complaints or insurance matters and establishing, exercising or defending legal claims.

Retention periods may vary depending on the type of information and any requirements set by law, our insurer or a relevant professional association. We review the information we hold and securely delete or anonymise it when it is no longer required.

Marketing information is retained until you unsubscribe, withdraw consent or it is no longer reasonably required. We may keep a minimal opt-out record to ensure that we continue to respect your preference.

7. Your rights under UK GDPR

Depending on the circumstances, you may have the right to:

Access: Request a copy of your personal information.
Rectification: Ask us to correct inaccurate or incomplete information.
Erasure: Ask us to delete your information.
Restriction: Ask us to limit how your information is used.
Data portability: Request certain information in a structured, commonly used format.
Object: Object to processing based on legitimate interests or to direct marketing.
Withdraw consent: Withdraw consent at any time where we rely on it.

These rights are not absolute and may not apply in every circumstance. We may need to verify your identity before responding. We aim to respond to valid requests within one month.

To exercise your rights, contact us at info@massagemovements.com.

8. Security of your information

We use appropriate technical and organisational measures to protect personal information, including password protection, access controls, secure systems and reputable service providers. Access to health and treatment information is limited to those who genuinely need it.

However, no method of electronic transmission or storage is completely secure. Please take appropriate care when sending personal information online.

9. Marketing communications

We may send rebooking reminders, newsletters or offers where you have consented or where the customer “soft opt-in” rules allow us to contact you about our own similar services.

Every marketing email or text will identify Massage Movements Ltd and provide a simple way to opt out. You can also opt out at any time by contacting info@massagemovements.com. We will continue to send essential service messages relating to appointments you have booked.

10. Cookies and tracking technologies

Cookies are small text files placed on your computer, telephone or other device when you visit a website. They help websites function correctly, remember preferences and provide information about how the website is used.

Cookies do not usually identify you by name, but information collected through them may be linked with other personal information we hold.

Session and persistent cookies

Session cookies are temporary and normally expire when you close your browser.
Persistent cookies remain on your device for a set period or until you delete them.

Types of cookies we use

Necessary or essential cookies: These are required for the website to work correctly, provide security, support booking functions or remember your cookie preferences. They do not require consent where they are strictly necessary.
Functionality cookies: These remember choices and provide enhanced website features. Where they are not essential, they will only be used with your consent.
Analytics cookies: These help us understand website traffic and how visitors use the site. They will only be used where permitted and after any required choice has been made.
Marketing cookies: These may track visitors across websites, measure advertising or support targeted promotions. They will not be placed without the required consent.

Cookies used on our website

Our website is built and hosted using Wix and includes Wix Bookings. Wix uses essential cookies to operate and secure the website, support online bookings, maintain sessions, detect fraud and remember cookie choices.

We also use:

Google Analytics 4 to help us understand how visitors use the website and improve its performance.
Meta Pixel to measure the effectiveness of advertising and understand actions taken after someone sees or interacts with our advertising.

Google Analytics and Meta Pixel cookies are optional and should only be placed after the relevant consent has been given through the website’s cookie banner. The website provides separate controls for essential, marketing, functional and analytics cookies.

The providers, purposes and technologies used may change as the website develops. Our cookie settings and this policy will be reviewed when website services or integrations change.

11. Managing cookies and consent

We use a cookie consent banner to provide information and obtain consent where it is required. Optional cookies will not be placed unless you choose to accept them.

You can accept, reject or manage optional cookie categories through the banner and change your preferences at any time using the cookie settings option on our website. Rejecting optional cookies should not prevent the core website from working, although some optional features may be affected.

You can also remove or block cookies through your browser settings. Guidance is available from your browser provider:

For more information about cookies and UK data-protection requirements, visit the Information Commissioner’s Office.

12. Third-party websites

Our website may link to third-party websites or include services such as online booking, maps, videos, payment tools or social-media features. Those organisations are responsible for their own privacy and cookie practices. We recommend reading their policies before providing information.

13. Contact information

For questions about this policy, cookies or your personal information, please contact:

Massage Movements Ltd
11 Totnes Road, Reading, United Kingdom, RG2 7NY
Email: info@massagemovements.com
Telephone: 07516 577708
Website: https://www.massagemovements.com
Company number: 11897946

14. Changes to this policy

We may update this policy periodically to reflect changes to our services, website, providers or legal obligations. The latest version will be published on our website with the date it was updated.