Privacy Policy

Last Updated: October 2025

Introduction

YK Massages (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (https://www.ykmassages.co.uk/) or use our services.

Company Details:

  • Trading Name: YK Massages
  • Company Name: THE WELLNESS WELL LTD
  • Company Number: 12345040
  • Registered in England and Wales
  • Email: info@ykwellness.co.uk

Please read this policy carefully. By using our website or services, you agree to the collection and use of information in accordance with this policy.


Information We Collect

Personal Information You Provide

When you book appointments, contact us, or use our services, we may collect:

  • Contact Information: Name, email address, phone number, postal address
  • Health Information: Medical history, current conditions, injuries, allergies, medications, and other health-related information necessary for treatment
  • Booking Information: Appointment dates, times, service preferences, treatment history
  • Payment Information: Billing address and payment details (processed securely through third-party payment providers)
  • Communication Records: Correspondence with us via email, phone, or contact forms

Information Automatically Collected

When you visit our website, we may automatically collect:

  • Device Information: IP address, browser type, operating system
  • Usage Data: Pages visited, time spent on pages, links clicked
  • Cookies and Similar Technologies: See our Cookie Policy section below


How We Use Your Information

We use the information we collect to:

  1. Provide Services: Deliver massage therapy, osteopathy, and wellness treatments tailored to your needs
  2. Appointment Management: Schedule, confirm, modify, and send reminders for appointments
  3. Health and Safety: Maintain accurate health records to ensure safe and effective treatment
  4. Communication: Respond to inquiries, provide customer support, and send service-related updates
  5. Business Operations: Process payments, maintain records, and manage our business
  6. Marketing: Send promotional communications about our services (with your consent)
  7. Legal Compliance: Comply with legal obligations and protect our rights
  8. Website Improvement: Analyze website usage to improve functionality and user experience


Legal Basis for Processing (GDPR)

Under UK GDPR, we process your personal data based on:

  • Consent: You have given clear consent for us to process your data for specific purposes
  • Contract: Processing is necessary to fulfill our service agreement with you
  • Legal Obligation: Processing is required to comply with the law
  • Legitimate Interests: Processing is necessary for our legitimate business interests (provided it doesn’t override your rights)
  • Vital Interests: In rare cases, to protect your vital interests or those of another person

For health information, we rely on your explicit consent and our legal obligations as healthcare providers.


Sharing Your Information

We do not sell your personal information. We may share your information with:

Service Providers

Third parties who help us operate our business:

  • Booking Platforms: Fresha, Treatwell (for appointment scheduling)
  • Payment Processors: Secure payment gateway providers
  • Email Services: Communication platform providers
  • Website Hosting: Hosting and technical service providers

Legal Requirements

We may disclose information when required by law or to:

  • Comply with legal processes or government requests
  • Protect our rights, property, or safety
  • Prevent fraud or security issues
  • Protect the rights and safety of others

Professional Obligations

In limited circumstances, we may share health information with:

  • Other healthcare providers (with your consent)
  • Insurance companies (if you file a claim)
  • Regulatory bodies (if required by professional standards)


Data Retention

We retain your information for as long as necessary to:

  • Health Records: Minimum 8 years from last treatment (in line with healthcare professional standards)
  • Financial Records: 6 years (for tax and accounting purposes)
  • Marketing Consent: Until you withdraw consent
  • Other Data: As long as necessary for legitimate business purposes

After these periods, we securely delete or anonymise your information.


Your Rights Under GDPR

You have the following rights regarding your personal data:

  1. Right to Access: Request copies of your personal data
  2. Right to Rectification: Request correction of inaccurate information
  3. Right to Erasure: Request deletion of your data (subject to legal obligations)
  4. Right to Restrict Processing: Request limitation on how we use your data
  5. Right to Data Portability: Receive your data in a structured, machine-readable format
  6. Right to Object: Object to processing based on legitimate interests or for marketing
  7. Right to Withdraw Consent: Withdraw consent at any time (doesn’t affect prior processing)
  8. Right to Complain: Lodge a complaint with the Information Commissioner’s Office (ICO)

To exercise these rights, contact us at info@ykwellness.co.uk.


Cookie Policy

What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us provide a better user experience and understand how our website is used.

Types of Cookies We Use

Essential Cookies Required for the website to function properly. These include:

  • Session management
  • Security features
  • Basic functionality

Analytics Cookies Help us understand how visitors use our website:

  • Google Analytics (anonymized data)
  • Page view statistics
  • User journey tracking

Functional Cookies Remember your preferences:

  • Language settings
  • Display preferences
  • Previously entered information

Marketing Cookies (with consent) Used for promotional purposes:

  • Social media integration
  • Targeted advertising
  • Conversion tracking

Managing Cookies

You can control cookies through:

  • Browser Settings: Most browsers allow you to refuse or delete cookies
  • Cookie Preferences: Use our cookie consent tool when you first visit our site
  • Opt-Out Tools: Use third-party opt-out tools for analytics and advertising cookies

Note: Blocking essential cookies may affect website functionality.

Third-Party Cookies

Our website may include cookies from:

  • Google Analytics
  • Social media platforms (Facebook, Instagram)
  • Booking platforms (Fresha, Treatwell)

These third parties have their own privacy policies, which we recommend reviewing.


Data Security

We implement appropriate technical and organisational measures to protect your information:

  • Encryption: Secure data transmission using SSL/TLS
  • Access Controls: Limited access to authorised personnel only
  • Secure Storage: Protected servers and databases
  • Regular Audits: Ongoing security assessments
  • Staff Training: Privacy and security awareness for all team members

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.


Third-Party Links

Our website may contain links to third-party websites (social media, booking platforms). We are not responsible for the privacy practices of these sites. Please review their privacy policies before providing any information.


Children’s Privacy

Our services are not intended for individuals under 16. We do not knowingly collect information from children. If we discover we have collected information from a child, we will delete it promptly. If you believe we have collected information from a child, contact us immediately.


International Data Transfers

Your information is primarily stored and processed in the United Kingdom. If we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses
  • Adequacy decisions
  • Other lawful transfer mechanisms


Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated “Last Updated” date. Significant changes will be communicated via email or website notice. Your continued use of our services after changes constitutes acceptance.


Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights:

Company Name: THE WELLNESS WELL LTD
Trading As: YK Massages
Company Number: 12345040
Email: info@ykwellness.co.uk
Website: https://www.ykmassages.co.uk/

Complaints

If you’re unhappy with how we handle your data, you can complain to:

Information Commissioner’s Office (ICO)
Website: https://ico.org.uk/
Phone: 0303 123 1113


Consent

By using our website and services, you consent to this Privacy Policy and agree to its terms. For health information and marketing communications, we will obtain your explicit consent separately.

To withdraw consent for marketing, email us at info@ykwellness.co.uk or click “unsubscribe” in any marketing email.