Privacy Policy

Last updated: 9 September 2026

Mackie Massage Therapy (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, contact us, book an appointment or receive massage therapy services from us.

We process personal information in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (“UK GDPR”) and the Data Protection Act 2018.

1. Who we are

Mackie Massage Therapy is the data controller responsible for your personal information.

Business name: Mackie Massage Therapy
Email: hello@mackiemassage.co.uk

If you have any questions about how we use your personal information, please contact us using the details above.

2. Information we may collect

Depending on how you interact with us, we may collect some or all of the following information:

Your name and contact details, such as telephone number and email address.
Appointment and booking information.
Information you provide when contacting us with an enquiry.
Payment and transaction information where necessary to process payments.
Information about your preferences and treatment requirements.
Information relating to your health, including relevant medical conditions, injuries, medications, allergies, pregnancy, physical limitations, contraindications and previous or current treatment.
Treatment notes and information relating to the massage therapy services provided to you.
Information you provide when completing consultation or client intake forms.
Information relating to cancellations, missed appointments and appointment history.
Information you provide through our website, including information submitted through contact or booking forms.
Technical information about your use of our website, such as IP address, browser type and information collected through cookies, where applicable.

You do not have to provide information that is not necessary for us to provide the service. However, if you do not provide information that is necessary to assess whether a treatment is appropriate or safe, we may not be able to provide the treatment.

3. Health information

Some of the information we collect may constitute special category personal data, particularly information concerning your health.

This may include information about medical conditions, injuries, pain, medications, allergies, pregnancy or other information relevant to providing massage therapy safely.

We only collect and use health information where it is necessary and appropriate for providing our services, assessing treatment suitability and maintaining appropriate treatment records.

We apply additional safeguards to information concerning your health and only collect information that is reasonably necessary for the relevant purpose.

Where we rely on consent to process special category health information, we will seek explicit consent where required by law. Consent can be withdrawn, although withdrawing consent may mean that we cannot continue to provide certain services where the information is necessary for treatment.

4. How we use your information

We may use your personal information to:

Respond to enquiries.
Arrange and manage appointments.
Provide massage therapy services.
Assess whether a particular treatment is appropriate and safe.
Understand relevant health information and treatment requirements.
Maintain appropriate client and treatment records.
Contact you about appointments, including confirmations, reminders, changes or cancellations.
Process payments and maintain financial records.
Deal with complaints, queries or disputes.
Meet legal, regulatory, insurance or professional obligations.
Protect our business, clients and service providers against fraud or other unlawful activity.
Improve our services and website.
Send marketing communications where we have a lawful basis to do so and, where required, your consent.

We will not use your personal information for purposes that are incompatible with the purposes described in this Privacy Policy unless we are legally permitted or required to do so.

5. Our lawful bases for processing

Under UK data protection law, we must have a lawful basis for processing personal information.

Depending on the circumstances, we may rely on the following lawful bases:

Contract

We may process information where it is necessary to take steps at your request before providing services or to perform our agreement with you, such as arranging and providing your massage therapy appointment.

Legal obligation

We may process information where necessary to comply with a legal obligation, for example accounting, tax or other legal requirements.

Legitimate interests

We may process information where it is necessary for our legitimate interests, provided that those interests are not overridden by your rights and interests.

Examples may include managing our business, maintaining appropriate records, communicating with clients, handling enquiries and protecting our business from fraud or misuse.

Consent

Where required, we may ask for your consent before processing certain information or sending certain marketing communications.

You may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before consent was withdrawn.

6. Processing health information

Because information concerning health is special category data, an additional condition under Article 9 of the UK GDPR is required.

Where appropriate, we may rely on explicit consent for processing health information that you provide for the purposes of your treatment.

We will only process such information to the extent necessary for the relevant purpose and will take appropriate steps to keep it secure.

You should only provide health information that is relevant to your treatment and should tell us if information you have previously provided changes.

7. Who we share your information with

We will not sell or rent your personal information.

We may share information where reasonably necessary with:

Payment providers, where required to process payments.
Booking or appointment-management providers, where we use such services.
Website, hosting, email or IT service providers who process information on our behalf.
Accountants, insurers, professional advisers or other service providers where reasonably necessary.
HM Revenue & Customs or other authorities where we are legally required to do so.
Emergency services or healthcare professionals where necessary to protect your vital interests or where otherwise permitted or required by law.
Law enforcement, regulators or other authorities where we are legally required to provide information.

Where another organisation processes personal information on our behalf, we take reasonable steps to ensure that appropriate contractual and security arrangements are in place.

8. How long we keep your information

We keep personal information only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, accounting, insurance, professional and record-keeping requirements.

Client and treatment records may be retained for an appropriate period after your last appointment where this is necessary for legal, insurance, professional or business purposes.

The exact retention period may vary depending on the type of information and the reason we hold it.

When information is no longer required, we will securely delete it or anonymise it where appropriate.

9. How we protect your information

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, alteration or disclosure.

These measures may include:

Restricting access to personal information to people who need it.
Using appropriate passwords and account security.
Keeping devices and software appropriately protected.
Taking reasonable care when storing and transmitting client information.
Securely disposing of information when it is no longer required.

No method of storing or transmitting information over the internet is completely secure, so we cannot guarantee absolute security.

10. Your data protection rights

Under UK data protection law, you may have rights including:

The right to be informed about how your information is used.
The right to access the personal information we hold about you.
The right to request correction of inaccurate or incomplete information.
The right to request deletion of your personal information in certain circumstances.
The right to request restriction of processing in certain circumstances.
The right to object to certain processing.
The right to data portability in certain circumstances.
The right to withdraw consent where we rely on consent.

These rights are subject to certain legal exceptions and may not apply in every circumstance.

To exercise a right, please contact us using the details in section 1.

We may need to verify your identity before responding to certain requests.

11. Marketing

If we wish to send you marketing communications, we will do so in accordance with applicable data protection and electronic marketing laws.

Where consent is required, we will ask you to actively opt in.

You can unsubscribe from marketing communications at any time by contacting us or using the unsubscribe option provided in the relevant communication.

Your decision not to receive marketing communications will not affect your ability to receive our massage therapy services.

12. Cookies and website analytics

Our website may use cookies and similar technologies.

Some cookies may be necessary for the website to function. Other cookies, such as analytics or advertising cookies, may require your consent depending on how they are used.

Where required, we will provide appropriate information about cookies and obtain consent before placing non-essential cookies on your device.

You can manage cookies through your browser settings and, where applicable, our website's cookie settings.

13. Third-party websites

Our website may contain links to third-party websites, such as booking platforms or social media websites.

If you follow a link to a third-party website, that website will have its own privacy policy and terms. We are not responsible for the privacy practices of third-party websites.

We recommend reading the privacy policy of any third-party website you visit.

14. International transfers

Some of the service providers we use may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable UK data protection law.

This may include relying on UK adequacy regulations, appropriate safeguards or another lawful transfer mechanism where required.

15. Children

Our services are primarily intended for adults.

If we provide services to a person under 18, we will take appropriate steps in relation to their personal information and any consent or permissions required by law.

We do not knowingly collect unnecessary personal information from children.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or how we process personal information.

The latest version will be published on this page with the date it was last updated.

17. Complaints

If you have concerns about how we have handled your personal information, please contact us in the first instance so that we have an opportunity to address your concerns.

You also have the right to complain to the UK's data protection regulator:

Information Commissioner's Office (ICO)

You can find information about making a complaint on the ICO's website.

18. Contact us

If you have any questions about this Privacy Policy or how Mackie Massage Therapy handles your personal information, please contact:

Mackie Massage Therapy
Email: hello@mackiemassage.co.uk

Last updated: 9 September 2026