Privacy Policy
Last updated: 28 January 2025
Damned If You Don't Massage ("we", "our", or "us") is committed to protecting your privacy. This policy explains how we collect, use, and safeguard your personal information when you use our website and services.
Information We Collect
We collect information you provide directly to us, including:
- Account Information: Name, email address, and phone number when you create an account or book a session
- Booking Details: Appointment dates, times, service preferences, and any notes about your massage needs
- Contact Information: Details you provide when contacting us via our contact form or email
- Authentication Data: If you sign in using Google or Facebook, we receive your name, email, and profile picture from those services
How We Use Your Information
We use your information to:
- Process and manage your massage bookings
- Send appointment confirmations and reminders
- Respond to your enquiries and provide customer support
- Improve our services and website experience
- Send marketing communications (only with your consent)
Cookies and Session Data
We use essential cookies to:
- Keep you signed in to your account
- Remember your preferences
- Ensure the security of your session
These cookies are necessary for the website to function and cannot be disabled. We do not use tracking cookies for advertising purposes.
Data Sharing
We do not sell your personal information. We may share your data with:
- Service Providers: Payment processors and email services that help us operate our business
- Legal Requirements: When required by law or to protect our rights
Data Security
We implement appropriate security measures to protect your personal information, including encrypted connections (HTTPS), secure password storage, and regular security reviews. We also offer passwordless authentication options like magic links and passkeys for enhanced security.
Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to processing of your data
- Request data portability
- Withdraw consent at any time
To exercise these rights, please contact us at [email protected].
Data Retention
We retain your personal information for as long as necessary to provide our services and fulfil the purposes outlined in this policy. Booking records are kept for 7 years for tax and legal compliance. You may request deletion of your account at any time.
Third-Party Sign-In
When you sign in using Google or Facebook, we receive basic profile information (name, email, profile picture) from these services. We do not have access to your passwords or other account details. Please review the privacy policies of Google and Facebook for more information.
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.
Contact Us
If you have any questions about this privacy policy or our data practices, please contact us:
Email: [email protected]
Location: Chester, United Kingdom