top of page

Privacy Notice

Last updated: 10 September 2026
 

Rinyapat Thai Massage respects your privacy and is committed to protecting your personal information.

 

1. Who is responsible for your information?
 

The data controller is:

Rinyapat Thai Massage
Owner and therapist: Rinyapat Edwards (JuJu)
Business address: 131 Gravel Road, Bromley BR2 8PW
Email: rinyapat.thaimassage@gmail.com
Telephone: 07738662693

 

2. Information collected
 

Depending on how you contact or book with Rinyapat Thai Massage, information may include:
 

  • Your name, address and contact details

  • Date of birth

  • Emergency contact information

  • Appointment and payment details

  • Consultation forms

  • Relevant health, medication and treatment information

  • Treatment notes and aftercare recommendations

  • Messages sent by email, telephone, WhatsApp or the website

  • Marketing preferences

  • Technical website information, such as cookie or analytics data
     

Health information is treated as special-category personal data and receives additional protection.

 

3. Why your information is used
 

Your information may be used to:

​

  • Respond to enquiries

  • Arrange and manage appointments

  • Assess whether treatment is appropriate

  • Personalise and safely provide your treatment

  • Maintain treatment and consent records

  • Process payments and provide receipts

  • Send appointment confirmations and reminders

  • Manage cancellations, complaints or insurance matters

  • Meet legal, regulatory, licensing, tax and insurance requirements

  • Send marketing communications where you have chosen to receive them

  • Maintain the security and operation of the website and booking system

     

4. Lawful bases
 

Personal information may be processed because:
 

  • It is necessary to take steps at your request or provide your booked service.

  • It is necessary to comply with a legal obligation.

  • It supports legitimate business interests, such as managing appointments, maintaining appropriate records and responding to complaints.

  • You have given consent, including consent for optional marketing.
     

Where health information is required, explicit consent will normally be requested. Other lawful conditions may apply where processing is necessary to establish, exercise or defend legal claims or meet applicable legal obligations.
 

You may withdraw consent at any time, although records already required for legal, insurance or legitimate professional purposes may still need to be retained.

 

5. Sharing your information
 

Personal information is not sold.

​

Information may be shared only when reasonably necessary with service providers such as:

​

  • The website and booking platform

  • Payment-processing providers

  • Email, telephone or appointment-reminder providers

  • Accountants, professional advisers or insurers

  • IT and secure data-storage providers

  • Regulators, licensing authorities, courts or law-enforcement bodies when legally required
     

Only the information necessary for the relevant purpose will be shared.

​

Some service providers may process information outside the United Kingdom. Where this happens, appropriate legal safeguards will be used as required by UK data-protection law.
 

​

6. How long information is kept

​

Client consultation, consent and treatment records will generally be retained for seven years after the final treatment, or longer where required by the insurer, regulator or applicable law.

​

Records relating to children may need to be retained until the client reaches at least 25 years of age, subject to current insurance and professional requirements.

​

Payment and tax records may be kept for the period required by HMRC. Enquiry information that does not lead to a booking will be deleted when it is no longer reasonably needed.

​

These periods should be checked against the requirements of Rinyapat Thai Massage’s insurer and professional membership body.

Security.

​

Reasonable organisational and technical measures are used to protect personal information against unauthorised access, alteration, disclosure or loss.

​

Access is limited to those who genuinely need the information. However, no internet or electronic-storage system can be guaranteed to be completely secure.
 

​

7. Marketing

​

Marketing messages will only be sent when you have consented or where another lawful basis permits it.

​

You can unsubscribe at any time by using the unsubscribe option provided or contacting Rinyapat Thai Massage directly. Stopping marketing messages will not prevent essential appointment communications.
 

​

8. Your rights

​

Depending on the circumstances, you may have the right to:

​

  • Request access to your personal information

  • Correct inaccurate or incomplete information

  • Request deletion of your information

  • Restrict how your information is used

  • Object to certain processing

  • Request the transfer of eligible information

  • Withdraw consent

  • Complain about how your information has been handled
     

Some rights are subject to legal exceptions, including professional, insurance and record-keeping obligations.

To exercise your rights, contact rinyapat.thaimassage@gmail.com.

​

You may also complain to the Information Commissioner’s Office:

​

Information Commissioner’s Office
Website: www.ico.org.uk
Telephone: 0303 123 1113
 

​

9. Cookies and third-party services

​

The website may use essential cookies and, with your permission where required, analytics or marketing cookies. More information should be provided through the website’s cookie notice or cookie-settings panel.

​

External platforms such as Wix, payment providers or WhatsApp operate under their own privacy policies.
 

​

10. Changes to this notice

 

This Privacy Notice may be updated when business practices, services or legal requirements change. The latest version will be published on the website with its revision date.

bottom of page