Last updated: 26th September 2026
Who we are
Louth Traditional Thai Massage is operated by Mrs S Hill, a sole trader trading as Louth Thai Massage. We are the controller responsible for the personal information we use to manage our customer relationships and provide our massage services.
For privacy questions or requests, contact:
Email: [email protected]
Telephone/text: 07579 036959
Post: Louth Traditional Thai Massage, Waterside Cottage, Charles Street, Louth, Lincolnshire, LN11 0LE
This notice explains the information we collect, why we use it, who receives it and your rights.
Information we collect and where it comes from
We receive information directly from you when you contact us, book, buy or redeem a voucher, complete a consultation form or attend an appointment. We also receive booking and payment information through Fresha. If someone books or buys a gift for you, we may receive the details they provide for that purpose.
Depending on your interaction with us, this may include:
- Your name, email address, telephone number and relevant contact details.
- Appointment dates, treatment choices, therapist preferences and booking history.
- Messages, enquiries, feedback and information about complaints.
- Voucher purchase and redemption details, transaction amounts and payment status.
- Relevant health information you give us, such as allergies, injuries, medical conditions, medication or pregnancy, and consultation or treatment notes.
- Technical information generated when you visit our website, such as your IP address, browser details and security/server logs.
Card payments are handled and stored through our payment provider, Fresha. We do not have access to your card information except payment status and masked card details.
Please avoid including detailed medical information in public reviews or social-media comments. Contact us to discuss an appropriate way to provide information needed for your appointment.
Why we use information and our lawful bases
| Purpose | Lawful basis |
|---|---|
| Answering enquiries about an appointment, accepting bookings and providing the service you request | Taking steps at your request before a contract and performing our contract with you |
| Sending appointment confirmations, reminders and practical changes | Performing our contract with you; where appropriate, our legitimate interest in running appointments reliably |
| Managing payments, vouchers and refunds | Performing our contract with you |
| Keeping accounting records and meeting applicable legal requirements | Compliance with legal obligations |
| Handling general enquiries, protecting our systems, preventing misuse and managing complaints or legal claims | Our legitimate interests in operating and protecting the business and resolving disputes, balanced against your rights; legal obligations where applicable |
| Assessing treatment suitability and recording relevant consultation information | We obtain your explicit consent to use your health information for consultation and treatment records. |
| Sending optional marketing | Consent, or our legitimate interest in promoting our own similar services where all requirements for the electronic-marketing soft opt-in are met |
| Optional website analytics and embedded features | Consent for Google Analytics, which can be disabled in your browser; the basis for other optional features is explained in our cookie information. |
Where information is necessary to arrange your booking, process payment or assess whether we can safely provide a treatment, we may be unable to proceed without it. We will explain what is needed. You do not have to agree to optional marketing to book or receive a treatment.
Health information
Health information is given additional protection under data-protection law. We limit what we collect to information relevant to assessing suitability, adapting the appointment and keeping appropriate records. Access is restricted to people who need it for those purposes.
We obtain your explicit consent to use your health information for consultation and treatment records. You can withdraw that consent by contacting us. Withdrawal does not affect the lawfulness of earlier use. If we cannot safely assess or provide a treatment without that information, we will explain this and may be unable to continue with the appointment.
Where necessary to establish, exercise or defend legal claims, we may process relevant health information under the legal-claims condition, together with an appropriate general lawful basis. We do not use health information for advertising or marketing profiling.
Who receives information
We share only the information needed for the relevant purpose. Recipients may include:
- The therapist providing your appointment and authorised people helping administer the business.
- Fresha, for booking, customer-management and related services you use.
- Payment providers handling transactions and refunds.
- Our website-hosting, email, IT and other contracted service providers.
- Accountants, insurers and professional advisers where necessary.
- Authorities or other recipients where disclosure is required by law, or justified to protect legal rights or respond to an emergency.
Fresha processes some customer records on our behalf and also uses information as a controller for its own services. Its Privacy Notice explains those activities. For requests about your consultation records or information you provided directly to our business, contact us.
If you contact us through Facebook, Instagram or another third-party platform, that provider also processes information under its own privacy notice.
How long we keep information
We retain customer and treatment records for six years after your last appointment.
This allows us to maintain appropriate treatment records and deal with relevant accounting, insurance and legal matters. Records are securely deleted or anonymised when the retention period ends, unless there is a specific, documented reason to keep relevant information longer, such as an unresolved legal claim or a legal requirement.
The six-year period does not mean that we need to retain every piece of website or marketing data for six years. Google Analytics data, security logs and enquiries that do not lead to a booking have their own retention periods.
Where you opt out of marketing, we retain the minimum information needed to respect your choice. We do not use that record to restart marketing.
Marketing and appointment messages
Appointment confirmations, reminders and essential service messages are separate from marketing.
We use Fresha to send marketing emails about Louth Thai Massage. We do this where you have consented, or where the law permits emails about our own similar services and you were given an opportunity to opt out when we collected your details.
You can opt out through the unsubscribe facility in our marketing emails, through the relevant Fresha preferences, or by contacting us. We respect your marketing choices.
Opting out of marketing does not stop messages needed to manage an appointment you have booked.
Cookies, analytics and embedded content
Our website uses Google Analytics to help us understand how visitors find and use the site so we can improve it. This involves technical and usage information such as pages viewed, interactions, browser/device details and identifiers. Our website also uses cookies or similar technologies for relevant functions and security. Embedded content, such as Google-hosted availability information, YouTube videos or maps, may also connect your browser to the relevant provider.
You can also control cookies through your browser, although blocking some cookies may affect website features.
Keeping information secure
We use appropriate organisational and technical measures to protect information against unauthorised access, loss or misuse, and limit access according to need.
No method of transmission or storage is completely risk-free. Please contact us if you believe information relating to your appointment has been sent to the wrong person or otherwise compromised.
Your rights
Depending on the circumstances and the lawful basis for processing, you may have the right to access your personal information, correct inaccurate information, request deletion, restrict its use, object to processing or request a portable copy of certain information.
You can object to direct marketing at any time. Where we rely on consent, you can withdraw it without affecting the lawfulness of processing before withdrawal. Some rights are subject to legal conditions and exceptions; we will explain these if relevant to your request.
Contact us using the details at the start of this notice. We may need proportionate information to verify your identity. We respond within the applicable legal time limits, normally one month, and explain any lawful extension or exception.
Questions and complaints
Please contact us if you have a concern about how we use your information. You also have the right to complain to the Information Commissioner’s Office without first complaining to us. Details are available at ico.org.uk/make-a-complaint.
Changes to this notice
We may update this notice when our practices or legal requirements change. The date at the top identifies the latest version. Where required, we will draw significant changes to your attention before using your information for a new purpose.
