Privacy Policy
Effective Date: [Insert Date]
At [Massage Studio Name], protecting client privacy is of utmost importance. As a small, independently operated business, this policy outlines the practices for handling personal data in compliance with the General Data Protection Regulation (GDPR).
1. Data Collected
The following personal information is collected from clients:
Name
Email address
Phone number
This data is collected solely for the purpose of contacting clients and providing the services they have booked.
2. Purpose of Data Collection
The personal data collected is used exclusively for:
Communicating with clients regarding appointments and services.
Providing the services that have been booked.
This data is not used for marketing purposes and is not shared with any third parties.
3. Data Processing and Storage
Personal data and payment information are securely processed by the booking provider, SimplyBook.me, which adheres to GDPR compliance.
Names and email addresses are processed through an email service provider to facilitate communication.
No personal data is stored directly on the website.
4. Data Retention and Deletion
Clients have the right to request the deletion of their personal data at any time, in accordance with GDPR’s “Right to Be Forgotten” policy. Requests for data deletion can be made by contacting [insert contact email/phone number]. Upon receiving a request, data will be promptly deleted, and the client will be notified of the action.
5. Client Rights
Under GDPR, clients have the following rights regarding their personal data:
Access: The right to request details of the personal data held.
Correction: The right to request updates or corrections to personal information.
Deletion: The right to request the deletion of personal data.
Data Portability: The right to request a copy of personal data in a commonly used format.
To exercise these rights, please contact [insert contact email/phone number].
6. Third-Party Compliance
All third-party providers involved in the processing of personal data, including SimplyBook.me and the email service provider, comply with GDPR regulations to ensure the protection of client information.
7. Security Measures
Reasonable measures are implemented to protect personal data from unauthorized access, disclosure, or misuse. Trusted providers and straightforward practices are utilized to maintain data security.
8. Policy Updates
This Privacy Policy may be updated periodically to reflect changes in business practices or legal requirements. Updates will be posted on this page, and the effective date will be revised accordingly.
9. Contact Information
For questions or concerns regarding this Privacy Policy or the handling of personal data, please contact:
Email: [insert email address]
Phone: [insert phone number]
Thank you for choosing [Massage Studio Name]. Protecting your privacy and providing a professional, secure experience is a top priority.