Privacy notice

Which data do we process?

We process only the information needed to schedule, provide, change or cancel an appointment.

• name, email address and telephone number;
• for a home appointment: the address you provide;
• the selected treatment, duration, price, date, time, booking reference and status;
• any optional note added to the booking;
• technical delivery information for confirmation emails;
• a one-way hash of the network address for security and abuse prevention.
• for the questionnaire: selected answers, language, submission time and any text entered voluntarily; the questionnaire does not ask for a name or contact details.

Do not enter your name, contact details, medical information or other sensitive data in free-text fields. Please discuss information needed for a treatment directly with Relax Bridge.

Purposes and legal bases

Booking and contact details are processed to handle your request, record the appointment and communicate with you about it. The legal basis is the performance of a contract or steps taken before entering into one.

Information forming part of the financial administration is processed to comply with legal obligations. Limited technical data is processed on the basis of the legitimate interest in securing the website and booking system and preventing abuse.

Booking details are not used for newsletters or other marketing without separate, freely given consent.

Questionnaire answers are processed to understand preferences in aggregate and improve the services and availability offered by Relax Bridge. This is based on the legitimate interest in providing a thoughtful service; no direct identifiers are requested and answers are not linked to a booking.

Who receives the data?

Only Relax Bridge and service providers needed for hosting, database management and transactional email may process the data. These providers act on behalf of Relax Bridge and receive access only as needed for their task.

Personal data is not sold. If a provider processes data outside the European Economic Area, appropriate GDPR safeguards are used, such as an adequacy decision or standard contractual clauses.

How long is data retained?

Booking and contact details that do not form part of the tax administration are generally deleted or anonymised no later than two years after the appointment. Information that forms part of legally required financial records may be retained for seven years.

Technical security and email-delivery data is kept only as long as needed for security, troubleshooting and reliable delivery. A longer period applies only where required by law or needed for a legal dispute.

Individual questionnaire answers are retained for no more than two years. They are then deleted or kept only as combined statistics that cannot be linked to a person.

Security

Relax Bridge uses appropriate technical and organisational measures, including encrypted connections, restricted access to the administration area, protected passwords and request rate limiting. No online service can guarantee absolute security.

Cookies

The public website does not use advertising or analytics cookies. The protected administration area uses only a strictly necessary session cookie to keep the administrator signed in; it is not used to track visitors.

Your privacy rights

You may request access, correction, erasure, restriction or portability of your personal data. You may also object to processing based on a legitimate interest. Where processing relies on consent, you may withdraw it at any time. A legal retention duty may mean that some information cannot be erased immediately.

Relax Bridge does not use booking details for automated decision-making or profiling.

Changes

This privacy notice may be updated when the website, booking system or legal requirements change. The latest version is always published on this page.