1. Who We Are
Mayfair Massage & Therapy is a clinical massage and holistic therapy practice operated by Concetta, located at 162 Regent Street, London W1B 5TD. We are the data controller for any personal information you provide to us.
Contact: 07586 306649 | Contact Page
2. What Data We Collect
We may collect the following personal information:
- Name, email address, phone number — when you book a session, subscribe to our newsletter, use our chatbot, or contact us via our website forms
- Health and medical information — when you complete a treatment consultation form prior to your session. This is collected with your explicit consent and is essential for providing safe, effective clinical care
- Booking and payment details — processed securely through our third-party booking platform, Fresha
- Website usage data — anonymous analytics data such as pages visited, time on site, and device type
3. How We Use Your Data
We use your personal data to:
- Provide and personalise your treatment sessions
- Manage bookings and communicate appointment details
- Send you wellness tips, blog posts and exclusive offers (only if you have opted in via our newsletter)
- Improve our website and services
- Comply with legal and regulatory obligations
We will never sell, rent or share your personal data with third parties for marketing purposes.
4. Legal Basis for Processing
Under the UK General Data Protection Regulation (UK GDPR), we process your data on the following legal bases:
- Consent — for newsletter subscriptions and marketing communications
- Contractual necessity — to fulfil your booking and provide treatment
- Legitimate interest — to improve our services and website experience
- Legal obligation — to maintain health and treatment records as required by professional standards
5. Third-Party Services
We use the following third-party services that may process your data:
6. Data Retention
We retain your personal data only for as long as necessary:
- Treatment records: retained for 7 years in accordance with professional clinical standards
- Newsletter subscribers: until you unsubscribe
- Website form submissions: retained for 12 months, then deleted
7. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data (right to be forgotten)
- Withdraw consent at any time
- Object to processing based on legitimate interest
- Data portability — receive your data in a structured format
To exercise any of these rights, please contact us on 07586 306649 or via our Contact Page.
8. Cookies
Our website uses minimal cookies and local storage:
- Session storage: to remember if you have dismissed a popup during your visit (not personally identifiable)
- Local storage: to remember your newsletter preference for 7 days (not personally identifiable)
We do not use third-party tracking cookies for advertising.
9. Confidentiality
Confidentiality is a core value of my practice. All treatment information, health data and personal details are treated with the utmost discretion. This is essential for the executives and high-profile clients who trust me with their care.
10. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with a revised effective date.
Last updated: 29 April 2026
