Last updated: 23 March 2026

Business details

Business name: Camellia Massage
Contact name: Anne Viti
Email: camelliamassage.info@gmail.com
Phone: 07788984101
Website: www.camellia-massage.co.uk

Introduction

Camellia Massage respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how Camellia Massage collects, uses, stores and shares personal information when you visit the website, contact the business, make an enquiry, book a service, buy a gift-related service, or otherwise interact with the business.

Under the UK GDPR, people must be given clear and concise privacy information about who is collecting their data, why it is used, the lawful basis for using it, how long it is kept, who it is shared with, and what rights they have. This policy is intended to provide that information in a clear form.

Who is responsible for your personal data

Camellia Massage is the controller of your personal data for the purposes described in this Privacy Policy.

Controller: Camellia Massage
Contact name: Anne Viti
Email: camelliamassage.info@gmail.com
Phone: 07788984101
Postal address: [Insert business address]

The personal data collected

Camellia Massage may collect and process the following categories of personal data, depending on how you interact with the business.

Identity data may include your name and title.

Contact data may include your email address, telephone number, postal address and WhatsApp contact details.

Booking data may include appointment dates, times, location preferences, services booked, package details, voucher details, transaction references and communication about your booking.

Health-related information may include information you choose to provide that is relevant to your massage treatment, such as injuries, contraindications, pregnancy, medical conditions, allergies, medications or treatment goals.

Payment data may include payment status, amount paid and transaction records. Full card details are typically processed by third-party payment providers and are not usually stored directly by Camellia Massage unless expressly stated.

Technical data may include IP address, browser type, device information, pages viewed, website usage patterns and cookie or analytics data.

Marketing data may include your preferences in receiving marketing messages and your communication preferences.

How personal data is collected

Camellia Massage may collect personal data directly from you when you fill in a contact form, book through the website, contact the business by email, phone, WhatsApp or social media, purchase a service or voucher, subscribe to updates, or provide health information before treatment.

Personal data may also be collected automatically through cookies, analytics tools and similar technologies when you use the website. ICO guidance explains that cookies and similar technologies are regulated under PECR and that organisations must provide clear information and, where required, obtain valid consent for non-essential technologies.

Why personal data is used

Camellia Massage may use your personal data to respond to enquiries, manage bookings, provide massage services, assess treatment suitability, communicate before and after appointments, process payments, maintain business records, improve website performance, administer the website, prevent misuse, comply with legal obligations and, where permitted, send marketing communications.

Lawful bases for processing

Camellia Massage uses personal data only where there is a valid lawful basis under UK data protection law.

Contract. Personal data may be processed where necessary to take steps at your request before entering into a contract or to perform a contract with you, such as handling a booking and providing treatment.

Legal obligation. Personal data may be processed where necessary to comply with legal or regulatory obligations.

Legitimate interests. Personal data may be processed where necessary for legitimate business interests, such as operating and improving the website, keeping records, handling enquiries, managing the business efficiently and maintaining service quality, provided those interests are not overridden by your rights and freedoms.

Consent. Personal data may be processed on the basis of consent where required, including certain health information, optional marketing communications and non-essential cookies or similar technologies.

Special category data

Information about health is classed as special category data under data protection law and receives extra protection. If you provide health information relevant to your treatment, Camellia Massage will process it only where there is a lawful basis and an additional condition for doing so, such as your explicit consent or where processing is necessary for the provision of health-related care within the scope permitted by law. Only information reasonably necessary for safe and appropriate treatment should be requested and used.

Sharing personal data

Camellia Massage may share personal data, where necessary, with website hosting providers, booking and scheduling systems, payment processors, analytics providers such as Google Analytics, email or communication service providers, map providers, professional advisers, insurers, IT support providers and public authorities where required by law.

Personal data is not sold to third parties.

Where third-party providers process data on behalf of Camellia Massage, they are expected to do so only on instructions, to keep information secure and to use it only for the relevant service they provide.

International transfers

Some third-party website, booking, analytics or communication providers may store or process personal data outside the UK. Where personal data is transferred internationally, Camellia Massage will seek to ensure that appropriate safeguards are in place in accordance with UK data protection law.

Data retention

Personal data will be kept only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, regulatory, tax, insurance, safeguarding, complaint-handling and record-keeping requirements.

Enquiry data that does not lead to a booking may typically be kept for a limited period.

Booking and transaction records may be kept for standard business and accounting periods.

Treatment and health-related records may be retained for an appropriate professional record-keeping period, taking into account legal risk and business need.

Marketing preference records may be kept until you unsubscribe or object, and for a limited period afterwards to maintain suppression records where appropriate.

Exact retention periods may be updated from time to time according to operational needs and legal requirements.

ICO guidance states that privacy information should explain how long personal data will be kept, or the criteria used to determine that period.

Your rights

Under UK data protection law, you may have the right to request access to your personal data, to request correction of inaccurate data, to request erasure, to request restriction of processing, to object to processing, to request transfer of your data in certain circumstances, and to withdraw consent where consent is relied upon.

These rights are not absolute and may only apply in certain circumstances. Camellia Massage will consider and respond to valid requests in accordance with applicable law.

The ICO explains that privacy notices should tell individuals about their information rights, including the right to withdraw consent where consent is the lawful basis, and the right to complain.

Marketing communications

Camellia Massage may send you service-related communications necessary for your booking or appointment.

Marketing emails, texts or similar electronic messages will only be sent where permitted by law, such as where you have consented or where another lawful route applies. You can opt out of marketing at any time by using the unsubscribe option where available or by contacting Camellia Massage directly. ICO guidance on PECR confirms that organisations sending electronic marketing messages must comply with PECR as well as the UK GDPR.

Cookies and similar technologies

The website may use cookies, pixels, scripts, tags, web storage, analytics tools and similar technologies to make the website work, remember preferences, support bookings, understand how visitors use the site and improve performance.

Some cookies are strictly necessary for the website or core functionality and do not require consent where the law allows. Non-essential analytics, advertising or similar technologies should only be used where valid consent has been obtained.

You can usually manage cookies through the cookie banner and your browser settings. Blocking some cookies may affect website functionality.

ICO guidance explains that PECR applies to cookies and other storage or access technologies on users’ devices, that users must be given clear and comprehensive information, and that non-essential technologies generally require consent to the UK GDPR standard. The ICO also notes that the legal framework changed following the Data (Use and Access) Act coming into law on 19 June 2025, and related guidance remains under review, so cookie practices should be kept under regular review.

Security

Camellia Massage takes reasonable technical and organisational measures to help protect personal data from unauthorised access, misuse, loss, disclosure or alteration. However, no website or transmission system can be guaranteed to be completely secure, and you provide information at your own risk to that extent.

Third-party websites and services

The website may contain links to third-party websites, plug-ins or tools, including maps, social media, booking systems or payment services. This Privacy Policy does not apply to those third-party services, and you should review their own privacy information where relevant.

Children’s data

This website and services are intended for adults. Camellia Massage does not knowingly collect personal data from children through the website without appropriate basis and safeguards. If Camellia Massage becomes aware that personal data of a child has been collected unintentionally, reasonable steps will be taken to delete it where appropriate.

Complaints

If you have concerns about how your personal data is handled, please contact Camellia Massage first using the details in this policy.

You also have the right to complain to the Information Commissioner’s Office. The ICO is the UK regulator responsible for enforcing data protection law and PECR.

Changes to this Privacy Policy

Camellia Massage may update this Privacy Policy from time to time to reflect changes in website functionality, booking systems, legal requirements or business operations. The latest version will always be posted on the website with the revised “Last updated” date.

Contact

For any questions about this Privacy Policy or about your personal data, please contact:

Camellia Massage
Anne Viti
camelliamassage.info@gmail.com
07788984101
www.camellia-massage.co.uk