Root & Breed Spa – Holistic Massage & Wellness Therapy
Last updated: August 2025

Root & Breed Spa is committed to protecting your privacy and personal data. This Privacy Policy outlines how we collect, use, and safeguard the personal information you provide when visiting our website or booking a treatment.

By using our website or submitting information to us, you agree to the practices outlined below.

Who We Are

Root & Breed Spa is a sole proprietorship offering holistic massage and wellness therapy. We act as the data controller for your personal data, meaning we determine the purpose and means of processing your personal information in line with applicable UK GDPR laws.

Personal Information We Collect

When you visit the Root & Breed Spa website or book an appointment, we may collect the following:

Automatically Collected:

  • Your browser type and version

  • IP address and location

  • Device type and operating system

  • Time zone and language settings

  • Pages you visit and how you interact with the site

  • Referring websites or search terms

This is referred to as “Device Information”, used for analytics, security, and improving your user experience.

Directly Provided by You:

  • Full name

  • Email address

  • Telephone number

  • Billing and contact address

  • Medical or health-related information (as part of your treatment consultation)

  • Payment details (via secure third-party processors)

  • Social media or marketing consent (optional)

Why We Process Your Data

We collect and process your data to:

  • Provide safe, personalized massage therapy services

  • Confirm and manage bookings and cancellations

  • Communicate updates or service-related information

  • Comply with UK GDPR and professional record-keeping obligations

  • Prevent fraud, abuse, or harm to our business or clients

  • Share optional content (e.g., social media) only with explicit consent

We only collect what is necessary and never sell your information.

Your Rights (UK & EU Residents)

As a resident of the UK or EU, you have the legal right to:

  • Access your personal data

  • Request corrections (rectification)

  • Request deletion (erasure)

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent at any time

  • File a complaint with the ICO (Information Commissioner’s Office)

To exercise any of these rights, contact us at:
📧 hello@rootandbreedspa.co.uk

Cookies & Tracking Technologies

We use cookies to:

  • Analyse site traffic and visitor behaviour

  • Improve user experience

  • Remember your preferences

Some cookies are essential for the site to function, while others (marketing, analytics) are optional. You may disable cookies via your browser settings. Our site may include third-party tools (e.g., embedded videos, appointment software) which may also use cookies.

Data Retention

Client and treatment data is retained for up to 7 years, as required under UK holistic therapy insurance and professional standards. After this period, data is securely deleted.

Security of Your Information

We take the protection of your data seriously and use:

  • Secure servers and SSL encryption

  • Password-protected files and systems

  • Controlled internal access

  • Professional third-party booking and payment processors with strict security compliance

No system is 100% immune, but we continuously review and improve our safeguards.

Photo & Social Media Consent

We never share your photos, videos, or identifying content without written consent. You will be presented with a separate Media Consent Form if we request to capture or share any content during your session. This is entirely optional, and consent can be withdrawn at any time.

Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for their privacy practices or content. Please review the privacy policy of any external site you visit.

Legal Disclosure

We may disclose personal data:

  • If required by law or court order

  • To protect our legal rights, safety, or the safety of others

  • In response to legal requests or fraud investigations

Changes to This Policy

We may occasionally update this policy to reflect operational, legal, or regulatory changes. Updates will be posted on this page with a new “last updated” date.

Contact Us

If you have any questions about this Privacy Policy or how your personal data is handled, please contact:

Root & Breed Spa
📧 Email: hello@rootandbreedspa.co.uk
📍 Based in Cardiff | By Appointment Only