*Last updated: 16 January 2026*

This Privacy Policy explains how personal data is collected, used, stored, and protected when you visit or use this website.

## 1. Data Controller

The data controller for this website is:

**Dan Joy**
Legal status: Sole Trader
Business address: **47 Toms Lane, Kings Langley, WD4 8NA, United Kingdom**
Email: hello@ceremonialmassage.com

Dan Joy is responsible for ensuring that personal data is processed in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

## 2. What This Policy Covers

This Privacy Policy applies to your use of this website, including:

* browsing the site;
* booking or purchasing services;
* purchasing products via the webshop;
* accessing online courses and digital content;
* signing up to newsletters or mailing lists;
* appearing in or using the therapist/practitioner listing.

This website may contain links to third-party websites. This Privacy Policy does not apply to those websites.

## 3. What Personal Data We Collect

Depending on how you use the website, we may collect:

* identity data (name);
* contact data (email address, phone number);
* transaction data (payments, purchases – processed by third-party payment providers);
* account or course access data (login details, progress);
* technical data (IP address, browser type, device information);
* communications data (messages sent via contact forms or email);
* practitioner listing data (publicly shared professional information).

We do not knowingly collect data relating to children, criminal convictions, or special category data unless explicitly and lawfully required.

## 4. How Personal Data Is Collected

Personal data is collected when you:

* submit forms on the website;
* make a purchase or booking;
* sign up for emails or updates;
* communicate directly by email;
* use the website, via cookies and analytics tools.

## 5. Legal Bases for Processing

Personal data is processed on the following lawful bases:

* your consent;
* performance of a contract;
* compliance with legal obligations;
* legitimate interests (such as operating and improving the website and services).

## 6. How Personal Data Is Used

Personal data may be used to:

* provide and manage services, courses, and products;
* process payments and provide access to digital content;
* communicate with you regarding bookings, purchases, or enquiries;
* send emails or updates where consent has been given;
* maintain practitioner listings;
* improve the website and user experience;
* comply with legal, tax, and accounting obligations.

## 7. Marketing Communications

Where you have opted in, you may receive emails relating to services, courses, or updates. You can withdraw your consent at any time by using the unsubscribe link or contacting us directly.

We do not send spam and do not sell personal data.

## 8. Cookies and Analytics

This website uses cookies and similar technologies to ensure proper functioning and to understand how the site is used.

You can manage or disable cookies through your browser settings. Further details may be provided in a separate Cookie Policy.

## 9. Data Sharing

Personal data may be shared only where necessary with trusted third parties, such as:

* payment processors;
* website hosting providers;
* email and course platforms;
* analytics providers.

Therapists or practitioners listed on the website operate independently. Any data you share directly with them is subject to their own privacy practices.

## 10. International Data Transfers

Where personal data is transferred outside the UK, appropriate safeguards are applied to ensure equivalent levels of protection.

## 11. Data Retention

Personal data is retained only for as long as necessary to fulfil its purpose or to meet legal requirements. Retention periods vary depending on the type of data.

## 12. Data Security

Appropriate technical and organisational measures are in place to protect personal data against loss, misuse, unauthorised access, or disclosure.

## 13. Your Rights

Under UK GDPR, you have the right to:

* access your personal data;
* request correction or deletion;
* restrict or object to processing;
* withdraw consent at any time;
* request data portability;
* lodge a complaint with the Information Commissioner’s Office (ICO).

## 14. Contact

For questions about this Privacy Policy or your personal data, contact:

Email: hello@ceremonialmassage.com

—

*This document is a general legal framework and does not constitute legal advice.*