Privacy policy
Last updated: 12 October 2026
This explains what information I collect when you book or have a massage with Method., why I need it, who helps me handle it, and your rights. In short: I only collect what I need to book and treat you safely, I never sell it, and your health information stays private.
Who I am
Method. is run by Sheba, based in London. I'm the data controller for the information below. Contact me about anything on this page at hello@methodmassage.co.uk.
What I collect
- Booking details: your name, email, phone number, the address of your home, hotel or office, and the treatment, date and time you choose.
- Payment: handled by Stripe. I see that you've paid and the amount, but never your full card details. If you tick Stripe's "save my card" box, Stripe keeps your card for next time and your phone keeps a private pass to it; you can remove the card any time in the Method. app.
- The Method. app: if I invite you to the app, the session notes I send you are encrypted with a private key that only your phone and my notes hold, so the copy kept online for your app cannot be read by anyone else, including the host. The same goes for any preferences you save in the app. If you switch on notifications, your phone's notification address and your choices (on my way, openings, a rebook reminder) are stored so I can reach you. You can switch them off at any time in the app or your phone settings.
- Booking records: when you book or send a request, your name, contact details, appointment details and booking-form answers are kept in a private record on my website host, so I can prepare your client file. Only I can open it, with a passcode.
- Health information: anything relevant to treating you safely, such as medication, pregnancy, injuries, conditions and areas to avoid. This is a special category of data under UK GDPR, so it gets extra care (see below).
- Session notes: what we worked on, how you responded and what you'd like next time, so each session builds on the last.
- Messages: anything you send me by email, WhatsApp or the website forms.
- Membership and corporate enquiries: the details you give on those forms.
- Gift vouchers: the buyer's name and email, the name (and email, if we send it to them) of the person receiving it, the message, and any note to tailor the session. Kept until the voucher is used or expires, then for accounting only.
- Thank-you and friend codes: the client's first name next to their code, so I know whose friend booked.
Why I use it, and the legal basis
| What for | Legal basis |
|---|
| Taking and managing your booking, payment, confirmation and reminders | To carry out our contract |
| Treating you safely and planning future sessions | Your explicit consent for health information, given when you book or before we start. You can withdraw it at any time, though I may then be unable to treat you safely. |
| Keeping records for insurance, tax and accounting | Legal obligation and legitimate interests |
| Sending your private session page, aftercare and an occasional rebooking reminder | Legitimate interests (looking after existing clients). You can opt out any time. |
| Marketing emails, if you sign up | Your consent. Unsubscribe any time. |
Your health information and session notes
- My session notes are kept in an encrypted, passcode-locked tool on my own device. They aren't uploaded to this website or shared with anyone.
- Your session page (aftercare, body map, progress) lives only inside the private link I send you. Nothing about you is stored on this website, and search engines can't find it. Anyone you forward the link to can open it, so keep it to yourself.
- Your health information never goes on your session page.
- I never put your details into public AI tools.
- I'll only share health information if you ask me to (for example, with your GP), or if the law requires it or someone's life is at risk.
Who helps me handle your information
These services process data on my behalf, only for the purposes above:
| Service | What it does |
|---|
| Netlify | Hosts this website, its booking forms and gift voucher and code records |
| Stripe | Takes card payments and memberships |
| Google (Calendar, Workspace) | Holds my booking diary and email |
| Resend and Zapier | Send booking confirmations and emails |
| ntfy | Sends me a phone alert when a booking comes in |
| WhatsApp | If you choose to message me there |
| Mapbox, SoundCloud, Google Fonts | Show the area map, play the Method playlist and load the site's fonts. They only load when you reach that part of the page. |
Some of these are based outside the UK, mainly in the USA. Where that happens, the transfer is covered by UK-approved safeguards, such as the UK–US data bridge or standard contractual clauses.
I never sell your information or share it for anyone else's marketing.
Cookies and browser storage
This site doesn't use advertising or tracking cookies. It uses your browser's own storage for a few small conveniences: remembering a promo code during your visit and keeping the playlist going between pages. The map, music player and fonts are third-party services that may set their own cookies when they load.
If analytics or advertising tags are added later, this section and a cookie banner will be updated first.
How long I keep it
- Session notes and health information: 7 years after your last appointment, so I can answer any question about your treatment and meet insurance requirements. Then they're deleted.
- Booking and payment records: 6 years after the end of the tax year they relate to, as HMRC requires.
- Enquiries that don't lead to a booking: up to 12 months.
Your rights
You can ask me to:
- give you a copy of the information I hold about you
- correct anything that's wrong
- delete it, where I'm not required to keep it
- stop or limit how I use it, or object to it
- send it to you or someone else in a usable format
- withdraw consent at any time
Email hello@methodmassage.co.uk and I'll reply within one month. It's free.
If you're unhappy with how I've handled your information, please tell me first so I can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Changes
If I change how I use your information, I'll update this page and the date at the top.