Privacy Policy for WillowBough Therapies
At WillowBough Therapies, safeguarding your privacy is paramount. This policy outlines how we collect, use, and protect your personal data when you interact with our online platform or utilise our services, including therapeutic massage, sports massage, aromatherapy, rehabilitation massage, and wellness consultations.
WillowBough Therapies is committed to adhering to all applicable data protection laws, including the General Data Protection Regulation (GDPR).
1. Information We Collect
We collect various types of information to provide and improve our services to you:
- Personal Identification Information: This includes your name, address (4502 Elmwood Crescent, Suite 3A, Bath, Somerset, BA1 5LN, United Kingdom), phone number (+44 1225 784563), and email address (contact@willowboughtherapies.co.uk) when you book an appointment, make an enquiry, or subscribe to our newsletter.
- Health Information: For therapeutic and rehabilitation services, we collect relevant health details, medical history, and treatment preferences. This is essential for providing safe and effective treatments tailored to your needs. This sensitive information is treated with the utmost confidentiality.
- Payment Information: When you make payments for our services, we collect necessary payment details. However, we do not store full credit card numbers on our servers; this is handled securely by our third-party payment processors.
- Technical Data: Information about your device, IP address, browser type, and usage patterns on our online platform may be collected through cookies and similar technologies to improve your experience and analyse website performance.
2. How We Use Your Information
Your information is used for the following purposes:
- To Provide Services: To schedule and deliver therapeutic massage (deep tissue, Swedish, prenatal, injury recovery, stress relief), sports massage, aromatherapy, rehabilitation massage, and personalized wellness plans.
- To Personalise Your Experience: To tailor treatments and wellness consultations based on your health profile and preferences.
- For Communication: To send appointment confirmations, reminders, essential service updates, and respond to your enquiries.
- For Internal Operations: For record-keeping, billing, improving our services, and internal reporting.
- For Marketing (with Consent): To send promotional materials or newsletters about new services or special offers, only if you have explicitly opted in to receive such communications. You can opt-out at any time.
3. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Consent: Where you have given clear consent for us to process your personal data for a specific purpose (e.g., direct marketing).
- Contractual Necessity: Where processing is necessary for the performance of a contract for services we provide to you.
- Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject (e.g., health and safety regulations, tax laws).
- Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, provided those interests do not override your fundamental rights and freedoms (e.g., improving our services, preventing fraud).
- Vital Interests: In rare cases, to protect your vital interests or those of another person (e.g., in medical emergencies).
4. Data Sharing and Disclosure
We do not sell or rent your personal data to third parties. We may share your information in limited circumstances:
- Service Providers: With trusted third-party service providers who assist us in operating our online platform, conducting our business, or serving you, provided they agree to keep this information confidential and comply with data protection laws (e.g., payment processors, booking systems, IT support).
- Legal Requirements: If required to do so by law or in response to valid requests by public authorities (e.g., a court order or government agency).
- Business Transfers: In connection with a merger, acquisition, or sale of assets, your personal data may be transferred to a new entity.
5. Data Security
We implement a variety of robust security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, secure storage, and regular security audits. While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Specific retention periods vary depending on the type of data and its purpose.
7. Your Data Protection Rights
Under GDPR and other applicable laws, you have specific rights regarding your personal data:
- Right to Access: You have the right to request copies of your personal data.
- Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or incomplete.
- Right to Erasure ('Right to be Forgotten'): You have the right to request that we erase your personal data under certain conditions.
- Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
- Right to Object to Processing: You have the right to object to our processing of your personal data under certain conditions.
- Right to Data Portability: You have the right to request that we transfer the data that we have collected to another organisation, or directly to you, under certain conditions.
- Right to Withdraw Consent: Where our processing is based on your consent, you have the right to withdraw that consent at any time.
To exercise any of these rights, please contact us at the address provided below. We will respond to your request within one month. If you have concerns about our data practices, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK.
8. Cookies
Our online platform uses cookies to enhance your experience. Cookies are small data files placed on your device. For more detailed information on how we use cookies, please refer to our Cookie Policy (if applicable, or integrate key cookie details here).
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post any updates on this page with a revised date. We encourage you to review this policy periodically.
10. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
WillowBough Therapies
4502 Elmwood Crescent
Suite 3A
Bath, Somerset, BA1 5LN
United Kingdom