Privacy Policy

Meraki Thai Therapy – Hampton Hill
Last updated: 14/04/2025

At Meraki Thai Therapy, we are committed to protecting your privacy and ensuring that your personal information is handled in a safe, secure, and transparent manner. This policy outlines how we collect, use, store, and protect your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Meraki Thai Therapy is a registered massage and wellness business based at:
📍 171a High Street, Hampton Hill, TW12 1NL
📞 07915765805
📧 merakithaihamptonhill@gmail.com

2. What Information We Collect

We may collect the following personal data from you:

• Name, contact number, and email address
• Medical history and health information (to provide safe and appropriate treatment)
• Treatment notes and preferences
• Payment information (if applicable)
• Emergency contact details (where necessary)

3. Why We Collect Your Data

We process your data to:

• Provide tailored and safe therapeutic treatments
• Manage appointments and customer communications
• Maintain accurate client records as required by insurers and local authorities
• Comply with legal and regulatory requirements (e.g. licensing and health & safety)

We only collect information that is relevant and necessary for your care.

4. Legal Basis for Processing

Under UK GDPR, the lawful bases we rely on to process your information are:

• Consent – you have given us clear permission to process your data
• Contractual obligation – to provide services requested by you
• Legal obligation – for compliance with licensing or insurance requirements
• Vital interests – in the case of an emergency or health concern

5. How We Store & Protect Your Data

All personal data is stored securely, either in locked physical storage or encrypted digital systems. We take appropriate security measures to protect your data from unauthorised access, disclosure, alteration, or destruction.

Only authorised personnel have access to client data.

6. Data Retention

Client records will be retained for a period of 7 years from the date of the last treatment, or longer where required (e.g. for minors, until 7 years after they turn 18), in accordance with legal and insurance requirements. After this period, your data will be securely destroyed or deleted.

7. Sharing of Personal Data

We do not share your personal information with third parties unless:

• It is required by law (e.g. for regulatory or legal purposes)
• You have given explicit consent
• It is necessary to protect your vital interests (e.g. in a medical emergency)

We will never sell or rent your information to third parties.

8. Your Rights Under UK GDPR

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data (subject to legal and insurance requirements)
• Withdraw your consent at any time
• Object to or restrict how your data is processed
• Lodge a complaint with the Information Commissioner’s Office (ICO)

You can contact the ICO via www.ico.org.uk or call 0303 123 1113.

9. Contact Us

To exercise any of your rights, or if you have questions or concerns about your data, please contact:

Data Controller
Meraki Thai Therapy
📞 07915765805
📧 merakithaihamptonhill@gmail.com

10. Updates to This Policy

We may review and update this Privacy Policy from time to time. The most recent version will always be available at our premises and on our website.