GDPR & Data Rights
Your rights under European data protection law
Your Data Rights
Under the General Data Protection Regulation (GDPR), you have several important rights regarding your personal data:
🔍 Right to Access
Request a copy of all personal data we hold about you, free of charge.
✏️ Right to Rectification
Correct or update inaccurate or incomplete information.
❌ Right to Erasure
Request deletion of your data ("right to be forgotten").
⛔ Right to Restrict Processing
Limit how we use your data in certain circumstances.
📊 Right to Data Portability
Receive your data in a portable, machine-readable format.
🚫 Right to Object
Opt out of marketing communications and automated decision-making.
How to Exercise Your Rights
Option 1: Client Portal (Easiest)
Sign in to your account to access the GDPR Data Request form
Option 2: Email
Send your request to info@sevmassage.com with:
- Your name and email address
- Type of request (Access, Deletion, Rectification, etc.)
- Any relevant details (booking IDs, dates, etc.)
Response Timeline
- Initial response: Within 10 business days
- Complete resolution: Within 30 days (GDPR requirement)
- Extensions available in complex cases (up to 60 days)
- We will inform you of any delays
Data Deletion Details
⚠️ Important: What Happens When We Delete Your Data
- Your account will be permanently deleted
- All booking history will be removed from live systems
- You will no longer be able to view past invoices or manage memberships
- Exception: Invoices required for tax compliance (7 years) will be retained in anonymized form
- You can request invoice deletion only if outside the 7-year tax retention window
If you proceed with deletion, you'll receive a confirmation email. Your data cannot be recovered after deletion.
Data We Retain & Why
| Data Type | Retention Period | Reason |
|---|---|---|
| Booking records | 1 year | Service delivery & dispute resolution |
| Invoices & payments | 7 years | Tax & legal compliance (UK law) |
| Email communications | 90 days | Customer support & confirmation |
| Admin audit logs | 1 year | Security & fraud prevention |
| Payment info (Stripe) | N/A | Not stored locally; Stripe manages |
Your Choices
Marketing Communications
You can opt out of promotional emails at any time by clicking the unsubscribe link or using your account settings.
Cookies
You can control cookies in your browser settings. Note: Some cookies are essential for booking functionality.
Data Sharing
We never sell your data. We only share with trusted service providers (Stripe, email service) under strict contracts.
Data Protection Officer
If you have concerns about how we handle your data, you can contact us or lodge a complaint with the UK Information Commissioner's Office (ICO).
ICO Contact: ico.org.uk/make-a-complaint/
Questions?
Email us at info@sevmassage.com