Last updated: 30 October 2026

1. Who I am

I’m Elizabeth Martin, and I provide massage and wellness therapy services in Edinburgh, Scotland.

I take your privacy seriously and am committed to looking after your personal information. This policy explains what information I collect, why I collect it, how I use it and how I keep it secure.

If you have any questions about how your information is handled, you can contact me at:

Email: info@elizabethmartin-massage.com

2. What information I collect

Depending on how you interact with my business, I may collect:

Your name and contact details, including your email address and telephone number.

Booking and appointment information.

Information you provide through consultation and health forms, including relevant medical history, existing conditions, injuries, medications, symptoms and treatment considerations.

Information you share when contacting me by email or through my website.

Payment and transaction information relating to appointments and services.

Some of the health information you provide is classed as special category personal data under UK data protection law.

3. Why I collect your information

I collect and use your information to:

Respond to enquiries and manage bookings.

Understand your individual circumstances and any relevant health considerations before treatment.

Plan and adapt treatments appropriately.

Maintain client consultation and treatment records.

Process payments and manage business accounts.

Send appointment confirmations, reminders and relevant booking communications.

Meet my professional, legal and insurance obligations.

I do not sell your personal information.

4. How your information is stored

I use third-party services to help manage my business, including:

Squarespace – for my website.

Acuity Scheduling – for appointment bookings and client consultation forms.

Stripe and SumUp – for payment processing.

Email services – to communicate with clients and respond to enquiries.

These services may process or store information on my behalf in order to provide their services. They have their own privacy policies and data protection arrangements.

I take reasonable steps to protect the information I hold and to prevent unauthorised access, loss or disclosure.

5. Health information and confidentiality

Information about your health is treated with particular care.

I only use health information where it is relevant to understanding your circumstances, considering treatment suitability and adapting my work appropriately.

Your information is treated confidentially and is not shared with other people unless there is a lawful reason to do so, such as where disclosure is required by law or necessary to protect someone’s vital interests.

6. How long I keep your information

I retain client consultation forms and treatment records securely for as long as necessary to meet my professional, legal and insurance obligations.

Records are reviewed periodically and securely deleted when they are no longer required.

Financial and business records may need to be retained for different periods to meet tax and legal requirements.

7. Appointment reminders and communications

I may contact you by email or telephone about enquiries, bookings, appointment changes and other matters relating to your treatment.

If you choose to receive SMS appointment reminders, your mobile number will be used for this purpose.

I do not send marketing emails or newsletters as part of my current service.

8. Cookies and website use

My website uses cookies and similar technologies to ensure it functions properly and to understand how visitors use the site.

You can accept all cookies, reject non-essential cookies or manage your preferences through the cookie banner on my website.

You can also change your cookie preferences at any time using the cookie settings available on the website.

9. Your data protection rights

Under UK data protection law, you have rights in relation to your personal information. These may include the right to:

Request access to the information I hold about you.

Ask for inaccurate information to be corrected.

Request the deletion of your information in certain circumstances.

Ask me to restrict how your information is used.

Object to certain types of processing.

Request a copy of your information in a portable format, where applicable.

Some information may need to be retained where there is a legal, professional or other legitimate reason to do so.

If you would like to exercise any of these rights, please contact me using the email address above.

10. Complaints

If you have concerns about how your personal information is being handled, please contact me first so I have the opportunity to address them.

You also have the right to raise a concern with the Information Commissioner’s Office (ICO), the UK’s data protection regulator.

You can find further information at:

https://ico.org.uk/

11. Changes to this policy

I may update this Privacy Policy from time to time to reflect changes in my business, services or legal responsibilities. The latest version will always be available on my website.