Holistic & Sports Massage Edinburgh respects your privacy and is committed to protecting your personal data.
Who we are
Holistic & Sports Massage Edinburgh
101 George Street, Edinburgh, EH2 3ES
For privacy questions or data requests, please contact us at holisportsmas@gmail.com.
What information we collect
- Your name, email address, phone number, date of birth, and booking details
- Appointment history, payment status, receipts, and related transaction records
- Health, consultation, consent, treatment, rehabilitation, and medical-clearance information that you provide to us
- Messages you send to us through the client portal or in relation to your booking
- Gift card, membership, loyalty, and review information where relevant
- Technical account and session data used to keep your client portal secure
How we use your information
- Manage bookings, payments, cancellations, and rescheduling
- Deliver massage and related clinic services safely
- Review consultation forms, medical alerts, and medical clearance where needed
- Send booking confirmations, reminders, receipts, review requests, and service-related emails
- Manage memberships, gift cards, loyalty rewards, and rehabilitation plans
- Keep internal clinical and operational records
- Meet legal, regulatory, insurance, tax, and safeguarding requirements
Health information
Some of the information you give us is health-related and more sensitive. We only use that information where necessary to assess whether treatment is suitable, identify contraindications or risks, request medical clearance or supporting documents where appropriate, and keep treatment notes and related clinical records.
Lawful basis
We process your data where necessary to take steps at your request before providing services, perform our contract with you, comply with legal obligations, protect your vital interests or provide safe treatment, pursue legitimate interests in running and improving the clinic, and rely on your consent where appropriate.
Payments and third parties
Payments may be handled through third-party payment providers including Stripe.
We also use third-party tools for secure data hosting and authentication, transactional email sending, and public review links where you choose to leave an external review.
Where you click through to an external review platform such as Google, that platform's own privacy policy will apply.
Client portal
If you create or use a client portal account, we use secure sign-in and access controls so that you can only view your own data, bookings, forms, receipts, messages, memberships, gift cards, loyalty information, and rehabilitation plans.
How long we keep data
We keep personal and clinical records only for as long as reasonably necessary for clinic, legal, insurance, safeguarding, accounting, and professional record-keeping purposes.
Your rights
- Access your personal data
- Correct inaccurate data
- Request deletion where legally appropriate
- Restrict or object to certain processing
- Receive a copy of certain data
- Withdraw consent where processing depends on consent
Complaints
If you have a complaint about how we use your data, please contact us first at holisportsmas@gmail.com. You may also contact the UK Information Commissioner's Office (ICO).