Last updated: 19/05/2026

At MassageUp, we respect your privacy and are committed to protecting your personal data.
This policy explains how we collect, use, and protect any personal information that you provide to us through our website, email, when booking our on-site massage services as well as the health information provided via your consultation forms.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Business Name: Massage Up
Business Type: Freelance on-site massage service
Owner: Julie Gable
Email: info@massageup.co.uk
Website: www.massageup.co.uk

We are the data controller responsible for your personal information.

We may collect and process the following types of personal data:

• Contact details – name, email address, phone number, and company/organisation name.

• Booking information – service type, date, location, and preferences.

• Billing details – invoice address and payment information (if applicable).

• Communications – any messages or feedback you send via email or website forms.

• Health information (special category data) – information you or your employees/clients provide about physical health, such as injuries, medical conditions, pregnancy, or other relevant details that allow us to assess whether massage treatment is appropriate and to adapt the service safely.

How We Use Your Booking Information?

We use your personal information to:

• Process bookings and provide our services.

• Respond to enquiries or requests.

• Send booking confirmations and invoices.

• Maintain records for accounting and tax purposes.

• Improve our services and website experience.

We will only use your data for the purposes for which it was collected and where we have a lawful basis, such as legitimate interest, performance of a contract, or consent.

How and Why We Collect Health Information?

• We collect limited health information to ensure client safety during a massage treatment.

• This information is typically gathered through a short confidential consultation form or pre-session checklist completed by each participant.

• We process this data on the lawful basis of:

  • Explicit consent (Article 9(2)(a) UK GDPR), and

  • Legitimate interest in ensuring the safety and wellbeing of clients during massage sessions.

We will never use this health information for marketing or any purpose unrelated to providing the treatment.

We retain your personal data only for as long as necessary:

• Booking and client records: up to 6 years (for accounting/tax purposes). After this period, your data will be securely deleted.

• Marketing contacts: to inform you about any news or offering. You can contact us at anytime at info@massageup.co.uk to let Massage Up know if you wish to be removed from our marketing contact list.

How We Store and Protect Health Data

• Consultation forms (paper or digital) are kept secure and confidential, accessible only to the massage therapist providing the service.

• Health information is not shared with the patient’s employer or other third parties.

• These records are retained for up to 5 years in line with Insurance Policy. After this period they are securely destroyed.

We take appropriate technical and organisational measures to keep your personal information safe, including:

• Password-protected systems and devices.

• Secure online booking and payment platforms.

• Restricted access to client information.

Your data is never sold, rented, or shared with third parties for marketing purposes.

We may share your information with trusted third parties only when necessary, such as:

• Payment processors (e.g. Stripe, PayPal).

• Email or website hosting providers.

• Accountants or legal advisors (for compliance).

All third parties are required to respect the security of your data and act in accordance with UK data protection law.

You have the right to:

• Access the personal data we hold about you.

• Request correction or deletion of your data - with the exception of health data as per insurance requirement.

• Object to or restrict processing.

• Lodge a complaint with the Information Commissioner’s Office (ICO):www.ico.org.uk

To exercise your rights, please contact us at info@massageup.co.uk

When it comes to health data, each participant has the right to:

• Withdraw consent at any time.

• Request access to their health data.

• Receive assurance that their health details will never be disclosed without consent.

Requests can be made at any time by contacting info@massageup.co.uk

Our website may use cookies to improve user experience and analyse site performance. You can manage or disable cookies through your browser settings.

We may update this policy from time to time.

The latest version will always be posted on this page with the updated date at the top.