Privacy Policy

Last updated: February 2026

1. Who we are

Cocoon Therapy - Massage & Wellness is a women-only massage therapy practice based in East Putney, London. We are the data controller for the personal information you provide to us.

Contact: hello@cocoontherapy.co.uk  |  07933 274028

2. What data we collect

We collect personal information in three ways:

When you book or contact us:

  • Name, email address, and phone number
  • Booking history and booking details

When you complete our client forms:

  • Health history, medical conditions, and medications
  • Areas of concern, treatment preferences, and goals
  • Signed consent and liability release

When you visit our website:

  • Basic visit logs (page requests and timestamps) for operational purposes

3. How we use your data

We use your information solely to provide and improve your treatment:

  • To assess suitability for treatment and adapt sessions to your needs
  • To contact you about appointments or respond to enquiries
  • To comply with our professional duty of care

We do not sell, rent, or share your personal data with third parties for marketing purposes.

Payments are processed securely through SumUp, which operates under its own privacy policy. We do not store your payment card details.

4. Legal basis for processing

Under UK GDPR, we rely on the following legal bases:

  • Explicit consent — for processing special category health data collected via our intake and liability forms
  • Contract — to fulfil your booking and deliver your treatment
  • Legitimate interests — for basic website visit logging to keep the site secure and operational

5. How we store your data

Your client forms and treatment notes are stored securely on password-protected systems. We take reasonable precautions to protect your information from unauthorised access, loss, or disclosure.

We retain client records for a minimum of 7 years after your last appointment, in line with professional and legal requirements. After this period, records are securely deleted.

6. Your rights

Under UK GDPR, you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate or incomplete data
  • Erasure — request deletion of your data (subject to legal retention obligations)
  • Restriction — ask us to limit how we use your data
  • Withdraw consent — at any time, where processing is based on consent
  • Portability — receive your data in a structured, machine-readable format

To exercise any of these rights, contact us at hello@cocoontherapy.co.uk. We will respond within 30 days.

If you have a concern about how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

7. Changes to this policy

We may update this policy from time to time. The current version will always be available on this page with the date it was last revised.

8. Contact

For any questions about this policy or your data, please contact:

Cocoon Therapy - Massage & Wellness
hello@cocoontherapy.co.uk
07933 274028