top of page

Privacy Policy


Ember Flow is committed to protecting your privacy and handling your personal information with care, respect, and transparency. This policy explains how your data is collected, used, and stored when you visit my website, make an enquiry, or book a treatment.

 

​

1. Who I Am
 

Ember Flow is a small, independent massage and aromatherapy practice run by Hannah.

 

If you have any questions about this policy or your data, you can contact me at: Emberflow@outlook.com

​

2. What Information I Collect

 

I may collect and store the following personal information:

 

  • Your name

  • Email address

  • Phone number

  • Booking details

  • Health or consultation information you choose to share

  • Payment-related information (processed securely via third-party providers)

​

This information may be collected through:

 

  • Online booking forms

  • Contact forms

  • Email or message enquiries

  • Gift voucher purchases

​

3. Why I Collect Your Information

​

Your information is collected only where necessary, to:

 

  • Manage bookings and appointments

  • Communicate with you about your treatment

  • Provide safe, appropriate, and tailored massage sessions

  • Meet professional, insurance, and legal obligations

  • Process payments and gift vouchers

​

Your data is never collected unnecessarily and is only used for the purposes listed above.

 

4. Health Information

​

Any health or consultation information you provide is treated with extra care and confidentiality. This information is used solely to ensure your treatment is safe, appropriate, and supportive of your needs.

 

Health information is never shared without your explicit consent unless legally required.

 

5. How Your Data Is Stored

​

Your information is stored securely using trusted platforms, such as:

 

  • Wix (website and booking system)

  • Email services

  • Secure digital records

  • Secure paper records

​

Reasonable steps are taken to protect your data from loss, misuse, or unauthorised access.

​

6. Sharing Your Information

​

Your personal data is never sold or shared with third parties for marketing purposes.

 

Information may only be shared when necessary with:

 

  • Payment processors (to complete transactions)

  • Legal or regulatory bodies, if required by law

 

 

7. How Long Your Data Is Kept

​

Your data is kept only for as long as necessary to:

 

  • Provide services

  • Meet legal, professional, and insurance requirements

​

You may request deletion of your data at any time, where legally appropriate.

 

​

8. Your Rights

 

Under UK GDPR, you have the right to:

 

  • Access the personal data I hold about you

  • Request corrections to inaccurate information

  • Request deletion of your data

  • Withdraw consent at any time

  • Ask how your data is being used

​

To exercise any of these rights, please contact me using the details above.

​

9. Cookies

​

This website may use essential cookies through Wix to ensure it functions correctly. These cookies do not collect personally identifiable information beyond what is necessary for the website to operate.

​

10. Changes to This Policy

​

This privacy policy may be updated from time to time to reflect changes in services or legal requirements. Any updates will be posted on this page
 

A Final Note
Your trust matters deeply to me. Any personal or health information you share is treated with care, discretion, and respect — creating a space where you can feel safe, held, and supported from your first interaction onward.

bottom of page