top of page

Privacy policy

Offer a wonderful moment of relaxation and well-being to people you love!

HOW WE USE YOUR PERSONAL INFORMATION

IDENTITY AND CONTACT DETAILS OF CONTROLLER

Audrey's Massages is a controller of personal information for the purposes of the General Data Protection Regulation (GDPR).

My contact details for data protection purposes are as follows:

Audrey Juquel

260a kilburn lane, W104BA

audrey.juquel@gmail.com

07385159432

PURPOSE OF THIS PRIVACY POLICY

This Privacy Policy tells you what to expect when Audrey's Massages processes personal information.

It applies to information collected about our customers that benefit from our massage and wellness services.

This Privacy Policy explains the legal basis for which we process personal information.

WHY DO WE COLLECT AND STORE PERSONAL INFORMATION?

Audrey's Massages needs to process and store personal information about customers in order to arrange meetings and provide massage and wellness services. We will also do this for the purpose of sending commercial information.

LEGAL BASIS FOR PROCESSING

There are a few main legal bases for which we are processing your data:

“the data subject has given consent to the processing of his or her personal data for one or more specific purposes” – we rely on consent given by you to process your data. We as the service provider ask for your freely given consent and you as the service user acknowledge that consent can be withdrawn at any time by contacting us at: audrey.juquel@gmail.com

“processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child” – we might use legitimate interest to contact or send you information about our services and products based on the services and products you have previously enquired or used. You as the service user acknowledge that we will stop sending you and information at your request. You can request this by contacting us anytime at audrey.juquel@gmail.com

Other reasons where we might process personal information under GDPR are:

“processing is necessary for compliance with a legal obligation to which the controller is subject” – where we are under a legal obligation or an obligation under a contract to process / disclose the information

“processing is necessary in order to protect the vital interests of the data subject or of another natural person” – where we need to protect the vital interest (your health and safety)

INFORMATION WE MAY HOLD ABOUT YOU AND HOW WE USE IT

The information we hold about you strictly concerns our relationship with you, the process or booking treatments and attending and providing our services.

The information we hold about you may contain:

  • Full name

  • Address

  • Email address

  • Phone number

We use this information to identify you as a service requestor, and to be able to attend to your location or the location commonly agreed in order to provide our services.

We might collect information about your medical condition, any medication that you might take and also any allergies you might suffer from, in order to tailor our service to your needs. We rely on consent in order to process these special categories of personal data and we ask for it part of our Client Intake Form that you fill in when you come at your first appointment.

HOW WE MANAGE YOUR PERSONAL INFORMATION

We process your personal information in accordance with the principles of GDPR.

We will treat your personal information fairly and lawfully and we will ensure that information is:

  • Processed for limited purposes

  • Kept up-to-date, accurate, relevant and not excessive

  • Not kept longer than it is necessary

  • Kept secure

Access to personal information is restricted to authorised individuals on a strictly need to know basis.

We are committed to keeping your personal details up to date, and we encourage you to inform us about any changes needed to ensure your details are accurate.

We will not discuss your personal information with anyone other than you, unless you have given us prior written authorisation to do so.

PERIODS FOR WHICH WE STORE YOUR INFORMATION

We will only hold your records during the period of our relationship with you and for a set period afterwards to allow us to meet our legal obligations including resolving any follow up issues between us.

SHARING YOUR PERSONAL INFORMATION

Only Audrey's Massages will have access to your personal information, however, there may be times when we will share relevant information with third parties for the purposes as outlined, or where we are legally required to do so.

  • to comply with the law

  • where there is a clear health or safety risk to an individual or members of the public

 

YOUR RIGHTS UNDER GDPR

As a data subject, you have certain rights under GDPR:

ACCESS TO PERSONAL INFORMATION

Under the GDPR, you have a right to ask us what personal information we hold about you,

and to request a copy of your information. This is known as a ‘subject access request’

(SAR). SARs need to be made in writing and we ask that your written request is accompanied by proof of your identity. We have one calendar month within which to provide you with the information you’ve asked for although we will try to provide this to you as promptly as possible.

RECTIFICATION

If you need us to correct any mistakes contained in the information, we hold about you, you

can let us know by contacting us at: audrey.juquel@gmail.com

ERASURE (‘RIGHT TO BE FORGOTTEN’)

You have the right to ask us to delete personal information we hold about you.

RESTRICTION ON PROCESSING

You have the right to require us to stop processing your personal information.

When processing is restricted, we are allowed to store the information, but not do anything with it. You can do this where:

  • you challenge the accuracy of the information (we must restrict processing until we have verified its accuracy)

  • you challenge whether we have a legitimate interest in using the information

  • if the processing is a breach of the GDPR or otherwise unlawful

  • if we no longer need the personal data but you need the information to establish, exercise or defend a legal claim.

If we have disclosed your personal information to third parties, we must inform them about the restriction on processing, unless it is impossible or involves disproportionate effort to do so.

We must inform you when we decide to remove the restriction giving the reasons why we did this.

OBJECTION TO PROCESSING

You have the right to object to us processing your personal data, you can do this where:

  • you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) of GDPR, including profiling based on those provisions.

(e) processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller

(f) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

  • where personal data is being processed for marketing.

RIGHT TO DATA PORTABILITY

You have the right to ask us to move, copy or transfer your personal data from an IT environment to another in a safe and secured way. The right only applies to personal data you have provided to us where the reason we are relying on to use the information is either your consent or for the performance of a contract. It also only applies when processing is carried out by us using automated means.

FURTHER INFORMATION

You also have the right to withdraw your consent for us to process your personal information at any time. If the basis for which we are processing your information is consent, then we will stop processing your data immediately. If there are other lawful bases through which we can contact you, we might use those reasons.

bottom of page