Privacy Policy

A legal disclaimer

Last updated: 11th November 2026.

This privacy policy explains how I collect, use and protect your personal information when you visit my website, book a treatment or contact me. I take your privacy seriously, especially because some of the information I hold is about your health.

Who I am

Claire Bernard Massage is run by Claire Bernard, a sole trader, providing deep tissue massage and natural lifting face massage in Windsor, Berkshire. I am the data controller for the personal information described in this policy.

Email: claire@clairebernard.co.uk
Phone: 07990 538 751
Address: Vansittart Road, Windsor, Berkshire SL4 5DA.

The Information I collect

When you book or contact me:

Your name, phone number and email address
Your appointment details and booking history
Messages you send me by email, text, phone or social media

For your treatment (health information):

Details of injuries, medical conditions, medication, pregnancy and anything else that affects whether a treatment is safe and suitable for you.
Notes I make about each treatment, such as areas worked on, techniques used and how you responded.
Details of your GP, physiotherapist or other healthcare practitioner, if you share them.

Health information is "special category" data under UK data protection law and is given extra protection. I only collect what I need in order to treat you safely.

For children and teenagers (aged 9 to 18):

I collect the same information about the young person, plus the name and contact details of the parent or guardian. A parent or guardian completes the booking and consultation form, gives consent for the treatment and stays in the therapy room throughout the session.

When you visit my website:

Technical information such as your IP address, browser type and the pages you visit, are collected through cookies (see section 9)
Any information you enter into a form on the website

How and why I use your information

UK data protection laws require me to have a lawful reason for using your information. Mine are:

My Data Uses:

Managing your bookings, sending appointment confirmations and reminders, and answering your questions
Using your health information to plan and carry out a safe treatment, and keeping treatment notes
Keeping financial records for tax purposes
Keeping treatment records in case of an insurance claim or complaint
Sending occasional news, offers and notifications
Storing data on how people use my website so I can keep it up-to-date

My lawful reasons:

To provide the treatment you have asked for (contract)
Your explicit consent, given on the consultation form
To meet my legal obligations
My legitimate interests in protecting my business, and for establishing or defending legal claims
Upon your consent, which you can withdraw at any time
Upon your consent through the cookie banner

I will never sell your information or use it for anything you would not reasonably expect or agree to.

Sharing your health information with other practitioners

I will only share your health information with your GP, physiotherapist or another practitioner if you ask me to or give me your permission. The only exception is if I am required to by law, or if I believe someone is at serious risk of harm.

Who else may handle your information

I use a small number of trusted services to run my business. They only use your information on my instructions and must keep it secure:

Wix hosts my website and any website forms
Calendly manages online bookings and the booking questions you answer
IONOS for email
Lloyds Bank to process payments
Whitefield Tax Ltd my accountant or bookkeeper for my financial records
My insurer or legal advisers: only if there is a claim or complaint

Some of these services store data outside the UK. Where they do, your information is protected by safeguards required under UK law, such as UK adequacy regulations or approved data transfer agreements.

How long I keep your information

Treatment and consultation records: 5 years after your last treatment
Records for under-18s: until the young person turns 23
Financial records: 6 years, as required by HMRC
Enquiries that don't lead to a booking: up to 12 months
Marketing list: until you unsubscribe

After these periods, I securely delete or shred your information.

Keeping your information safe

Paper records are kept in a locked filing cabinet.
Digital records are stored on password-protected devices and accounts, with two-step verification where available.
Only I have access to your treatment records.
If there is ever a data breach that puts your rights at risk, I will tell you.

Your rights

You have the right to:
See the information I hold about you (a subject access request)
Correct information that is wrong or incomplete
Ask me to delete your information, although I may need to keep some records for legal, insurance or tax reasons
Ask me to limit how I use your information
Object to how I use your information
Receive a copy of the information you gave me, in a format you can pass to someone else
Withdraw your consent at any time, for example to marketing emails or to me holding your health information. Withdrawing consent for your health information means I may not be able to treat you safely.

To use any of these rights, email or phone me using the details in section 1. I will reply within one month. There is usually no charge.

Cookies

My website is built on Wix, which uses cookies: small files stored on your device. Essential cookies keep the website working and secure. Other cookies, such as those that measure visits, are only used if you agree through the cookie banner. You can change your choice at any time through the banner or your browser settings.

Questions and complaints

If you have a question or concern about how I handle your information, please contact me first using the details in section 1. You can do this however suits you, by email, phone or text, and you don't need to use any formal wording. I will acknowledge your complaint within 30 days, look into it and let you know the outcome without undue delay.

Changes to this policy

I may update this policy from time to time. The date at the top shows when it was last changed.