Privacy Policy
Blossom Massage Ltd.
Effective Date: 22nd December 2025

Blossom Massage Ltd. (“we”, “our”, or “us”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy applies to our website, mobile application, and services (collectively, the “Services”).

1. Data Controller

For the purposes of UK data protection law, the data controller is:
Blossom Massage Ltd.
Email: info@blossommassage.co.uk
Website: www.blossommassage.co.uk

2. Personal Data We Collect

2.1 Personal Information You Provide

We may collect and process the following personal data:

  • Name

  • Email address

  • Telephone number

  • Appointment and booking information

  • Payment information (processed securely by third-party payment providers)

2.2 Automatically Collected Data

When you use our Services, we may automatically collect:

  • IP address

  • Device type, operating system, and app version

  • Usage data and interaction logs

  • Diagnostic and performance data

2.3 Special Category Data

We do not routinely collect special category personal data (such as health data). However, if such information is voluntarily provided and required to deliver services, it will be processed lawfully and securely.

3. Lawful Basis for Processing

Under UK GDPR, we rely on the following lawful bases to process your personal data:

  • Contractual necessity – to provide booked services

  • Legitimate interests – to operate and improve our Services

  • Legal obligation – to comply with legal or regulatory requirements

  • Consent – where explicitly provided (e.g. marketing communications)

4. How We Use Your Personal Data

We use your personal data to:

  • Manage bookings and provide massage services

  • Communicate appointment confirmations, reminders, and updates

  • Process payments securely

  • Improve our website and mobile application

  • Comply with legal, tax, and regulatory obligations

5. Sharing Your Personal Data

We do not sell your personal data. We may share your personal data with:

  • Third-party service providers (e.g., booking systems, payment processors, analytics providers)

  • Professional advisers or regulators, where required by law

All third parties are required to respect the security of your personal data and to treat it in accordance with the law.

6. International Data Transfers

Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, such as:

  • Adequacy regulations

  • Standard contractual clauses

  • Other lawful transfer mechanisms recognized under UK GDPR

7. Data Retention

We retain personal data only for as long as necessary to:

  • Provide our Services

  • Meet legal, accounting, and regulatory requirements

When data is no longer required, it is securely deleted or anonymized.

8. Data Security

We have implemented appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure. Despite these measures, no electronic transmission or storage method is completely secure.

9. Your UK GDPR Rights

Under UK data protection law, you have the right to:

  • Access your personal data

  • Request correction of inaccurate data

  • Request erasure of your personal data

  • Restrict or object to processing

  • Data portability (where applicable)

  • Withdraw consent at any time

To exercise your rights, please contact us using the details in Section 1.

10. Children’s Data

Our Services are not intended for children under the age of 13, and we do not knowingly collect personal data from children.

11. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on our website and will take effect immediately upon posting.

13. Contact and Complaints

If you have any questions or concerns about this Privacy Policy or how your personal data is handled, please contact us:
Blossom Massage Ltd.
Email: info@blossommassage.co.uk
Website: www.blossommassage.co.uk

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):
Website: https://www.ico.org.uk