Privacy Policy
Last updated: March 28, 2026
1. Introduction
Sevastian Massage Therapy ("I", "me", "my") operates the SevMassage website and booking platform. This Privacy Policy explains how I collect, use, disclose, and safeguard your information when you visit my website and use my services.
2. Information We Collect
Personal Information
- Full name and contact details (email, phone)
- Residential address and postcode
- Booking history and service preferences
- Payment information (processed securely via Stripe)
- Medical information (allergies, preferences) you voluntarily provide
Automatically Collected Information
- IP address and device information
- Browser type and pages visited
- Cookies and tracking technologies
3. How I Use Your Information
- Process bookings and payments
- Send appointment confirmations and reminders
- Provide customer support
- Improve my services and website experience
- Send marketing communications (only with your consent)
- Comply with legal and regulatory obligations
4. Data Retention
- Booking records: Retained for 1 year, then anonymized
- Invoices & financial records: Retained for 7 years (tax compliance)
- Email communications: Retained for 90 days
- Payment information: Not stored; Stripe manages securely
- Customer accounts: Retained until deletion request submitted
5. Your Data Rights (GDPR)
Under GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Restrict Processing: Limit how I use your data
- Data Portability: Receive your data in a portable format
- Object: Opt out of marketing communications
To exercise these rights, sign in to your Client Portal and use the GDPR Data Request section, or contact me at info@sevmassage.com
6. Data Security
- All data transmitted securely via HTTPS encryption
- Payment processing handled exclusively by Stripe (PCI-DSS compliant)
- Access restricted to authorized staff only
- Regular security audits and updates
7. Third-Party Services
- Stripe: Payment processing
- Google Maps: Location services for booking
- Email service provider: Appointment confirmations and reminders
These providers have their own privacy policies and are contractually obligated to protect your data.
8. Contact Me
For privacy concerns or data requests:
Email: info@sevmassage.com
Address: 30 Whitmore Rd, Birmingham B10
Response time: 30 days (GDPR requirement)
9. Changes to This Policy
I may update this Privacy Policy periodically. I will notify you of significant changes via email or prominent notice on our website.