Privacy Policy

1. Introduction

Boonmee Thai Massage Newcastle ("we", "our", or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our massage therapy services or visit our website.

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our contact details are provided at the end of this policy.

2. Information we collect

Personal information. We may collect the following personal information:

• Name and contact details (phone number, email address)
• Health information relevant to massage therapy (medical conditions, injuries, allergies)
• Treatment preferences and history
• Payment information (processed securely through our payment providers)
• Communication records (calls, messages, emails)

Website usage information. When you visit our website, we may collect technical information including your IP address, browser type, device information, and pages visited. This information is used to improve our website and services.

3. How we use your information

We use your personal information for the following purposes:

• To provide safe and effective massage therapy services
• To communicate with you about appointments and services
• To maintain accurate treatment records for your safety
• To process payments and maintain financial records
• To comply with legal and regulatory obligations
• To improve our services and customer experience

4. Legal basis for processing

• Contract: to provide the massage therapy services you have requested
• Legitimate interest: to communicate with you and improve our services
• Legal obligation: to comply with health and safety regulations
• Consent: for marketing communications (where applicable)

5. Information sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• With your explicit consent
• To comply with legal obligations or court orders
• To protect your health and safety in emergency situations
• With trusted service providers who assist in our operations (e.g. payment processors)

6. Data security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. This includes secure storage, encrypted communications, and regular security assessments.

7. Data retention

We retain your personal information only for as long as necessary to provide our services, comply with legal obligations, and resolve disputes. Treatment records are typically retained for up to 7 years.

8. Your rights

Under UK data protection law, you have the following rights:

• Access: request a copy of your personal information
• Rectification: request correction of inaccurate information
• Erasure: request deletion of your personal information
• Restriction: request limitation of processing
• Portability: request transfer of your data
• Objection: object to processing based on legitimate interests
• Withdraw consent: where processing is based on consent

9. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us on 07562 450789 or at 41 Springfield Rd, Newcastle upon Tyne, NE5 3DX.

10. Complaints

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.