Privacy Policy

Your privacy is important to me. This policy explains how I collect, use, and protect your personal information when you use my services or website.

Michelle Winter Massage Therapy

Last Updated: 31/05/2026

Michelle Winter Massage Therapy is committed to protecting your privacy and handling your personal information responsibly, securely and transparently.

This Privacy Policy explains what information is collected, how it is used, how it is stored and your rights under UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

Michelle Winter Massage Therapy is the Data Controller responsible for your personal information.

Contact Details:

Michelle Winter Massage Therapy

Strive

Level 1 Methven Mill Business Units

Methven Road

Kirkcaldy

KY1 1TS

Email: michellewintermassage@outlook.com

Phone: 07981 592422

2. Information We Collect

The following information may be collected and stored:

Personal Information

Full name
Postal address
Email address
Telephone number
Emergency contact details where provided

Health Information

Medical history relevant to massage therapy
Current health conditions
Medications
Allergies
Lifestyle information relevant to treatment
Consultation and treatment notes

Booking and Payment Information

Appointment history
Booking records
Payment records

Michelle Winter Massage Therapy does not store full payment card details.

Marketing Preferences

Whether you have chosen to receive updates, newsletters, special offers or business news from Michelle Winter Massage Therapy.

3. How Your Information Is Used

Your information is collected and used to:

Provide safe and effective massage therapy treatments
Assess treatment suitability
Manage appointments and communications
Maintain client records
Meet legal, insurance and professional obligations
Process payments and maintain financial records
Send business updates or marketing communications where consent has been provided

Your personal information will never be sold to third parties.

4. Lawful Basis for Processing

Your information is processed under one or more of the following lawful bases:

Contract

Processing is necessary to provide the services you have requested.

Legal Obligation

Processing is necessary to comply with legal, tax, insurance or regulatory requirements.

Legitimate Interests

Processing is necessary for the administration and operation of the business and to maintain accurate treatment records.

Explicit Consent

Health information and marketing communications are processed only where appropriate consent has been provided.

5. How Your Information Is Stored

Reasonable steps are taken to protect your information.

Paper Records

Paper consultation forms and treatment records are stored securely and accessible only to authorised persons.

Digital Records

Digital records are stored using secure password-protected systems, devices and software providers.

Online Bookings

Appointment information may be stored within the SimplyBook.me booking platform and associated business systems.

6. Data Retention

Client records are retained only for as long as necessary to meet legal, insurance and professional requirements.

Typically, client records are retained for a minimum of 7 years following the last treatment session.

Records relating to minors may be retained for longer where required by insurance or legal obligations.

After the retention period has expired, records will be securely destroyed or deleted.

7. Sharing Your Information

Your information will not be shared with third parties unless:

You provide consent
It is necessary to protect your health or safety
It is required by law
It is required by an insurer, legal adviser or regulatory authority in connection with a claim or legal obligation

Where third-party providers are used to support business operations, they process information only as necessary to provide their services and are expected to comply with applicable data protection requirements.

8. Marketing Communications

Where you have chosen to receive marketing communications, your contact details may be used to send:

Business updates
Appointment availability announcements
New treatment information
Gift voucher promotions
Special offers

You can withdraw your consent and unsubscribe from marketing communications at any time.

9. Website Cookies

The Michelle Winter Massage Therapy website may use cookies and similar technologies to improve website functionality, analyse website performance and enhance user experience.

Cookies may collect information such as:

IP address
Browser type
Device information
Pages visited

You can control cookie settings through your browser preferences.

10. Your Rights

Under UK GDPR, you have the right to:

Request access to your personal information
Request correction of inaccurate information
Request deletion of your information where legally permitted
Restrict or object to certain processing activities
Withdraw consent at any time where consent is the lawful basis
Request a copy of your information in a portable format where applicable

Requests should be submitted using the contact details provided above.

11. Complaints

If you have concerns regarding how your personal information has been handled, please contact Michelle Winter Massage Therapy in the first instance.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

12. Third-Party Providers

Michelle Winter Massage Therapy uses third-party providers to support business operations, including appointment booking and payment processing.

SimplyBook.me acts as a data processor and processes personal information in accordance with its own Privacy Policy and Data Processing Agreement.

13. Changes to This Policy

This Privacy Policy may be updated from time to time.

The latest version will always be available on the website and through the booking system.