Effective date: 25 August 2026
Zen Zone Brighton (“we”, “us”, “our”) is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).
We are the data controller for the personal data described in this policy.
1. Who we are
Zen Zone Brighton
230 Eastern Road, Kemptown, Brighton BN2 5JJ
Email: [email protected]
Phone: 07442 577878
2. Information we collect
- Contact details: name, email address, phone number.
- Appointment details: booking dates, service requested, notes relevant to your visit.
- Health information: details you choose to share on a consultation form before treatment (e.g. injuries, medical conditions, pregnancy, allergies) so we can provide massage and holistic therapy safely.
- Payment information: processed by our payment provider, SumUp — we do not store your full card details ourselves.
- Website usage data: via cookies (see section 6).
Health information is “special category data” under UK GDPR. We only collect it with your explicit consent, given when you complete a consultation form, and only use it to assess whether a treatment is safe and appropriate for you.
3. How we use your information and our legal basis
| Purpose | What we use it for | Legal basis |
|---|---|---|
| Booking and managing appointments | Name, contact details, appointment details | Performance of a contract with you |
| Providing treatment safely | Health information from your consultation form | Your explicit consent (special category data) |
| Taking payment | Payment processed via SumUp | Performance of a contract; legal obligation (accounting records) |
| Appointment reminders | Contact details | Legitimate interests (running the business efficiently) |
| Newsletters | Email address, only if you opt in | Your consent |
| Bookkeeping and tax records | Name, payment records | Legal obligation (HMRC requirements) |
You may withdraw consent (for health data or newsletters) at any time — see section 7.
4. Who we share your information with
We use the following trusted service providers to help run the business. Each processes your data under its own privacy policy:
- Treatwell — online booking platform
- SumUp — payment processing
- Google — email (Gmail) and related tools
- Our website hosting provider — to run zenzonebrighton.com
We do not sell your personal data. Some of these providers may process data outside the UK; where they do, they operate under recognised legal safeguards such as the UK’s International Data Transfer Agreement, EU/UK adequacy decisions, or Standard Contractual Clauses.
5. How long we keep your information
- Consultation and treatment records: kept for as long as you remain a client and for a period afterwards in line with our professional insurance requirements (we keep this for 7 years after your last treatment).
- Booking and contact details: kept for as long as needed to provide our services, then deleted or anonymised.
- Payment and accounting records: kept for 6 years, as required by HMRC.
- Newsletter subscriptions: kept until you unsubscribe.
6. Cookies
Our website uses cookies. Strictly necessary cookies (needed to run the site) are used automatically. Any other cookies — for example analytics or marketing cookies — are only set with your consent, which you can give or withdraw using our cookie banner when you first visit the site.
7. Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data, where applicable
- Restrict how we use your data
- Object to certain processing, including direct marketing
- Data portability — receive your data in a portable format
- Withdraw consent at any time, where we rely on consent (e.g. health data, newsletters), without affecting processing carried out before withdrawal
To exercise any of these rights, contact us using the details in section 1.
You also have the right to complain to the UK’s data protection regulator:
Information Commissioner’s Office (ICO)
Website: ico.org.uk
Phone: 0303 123 1113
8. Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects on you.
9. Keeping your data secure
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse.
10. Changes to this policy
We may update this policy from time to time. The effective date at the top of this page shows when it was last revised.
11. Contact us
Zen Zone Brighton
230 Eastern Road, Kemptown, Brighton BN2 5JJ
Email: [email protected]
Phone: 07442 577878