Shan Yuet Wellness is registered on the Information Commissioner's Office Register; registration number ZC090926.

Shan Yuet Wellness is committed to protecting your privacy and handling your personal data with care and respect. This Privacy Notice explains how we collect, use, store, and protect personal information in accordance with UK data protection law, including the UK General Data Protection Regulation (UK GDPR).

1. Who We Are

Shan Yuet Wellness is a sole trader business providing mobile Thai massage services in Edinburgh. For the purposes of data protection law, Shan Yuet Wellness is the data controller. If you have any questions about this Privacy Notice or how your data is handled, please contact: Email: hillandmoon@shanyuetwellness.com

2. Purpose of This Privacy Notice

This Privacy Notice explains what personal data we collect, how we use it, and how we protect it. It applies to personal data collected through our website, bookings, consultations, communications, and during the provision of our services.

You should read this Privacy Notice alongside any other privacy information we may provide when collecting or processing your personal data, so you are fully aware of how and why we use it.

3. What Personal Data We Collect

We process personal data to meet our legal, contractual, and professional obligations and to provide our services. This may include:

Identity Data: name, title
Contact Data: email address, phone number, home address (for mobile services)
Financial Data: payment and transaction details
Transactional Data: details of services provided and payments made
Technical Data: IP address, browser type and version, device information, and usage data when visiting our website
Profile Data: booking history, preferences, feedback
Health Information: information you voluntarily provide to ensure treatments are safe (e.g. injuries, pregnancy, allergies)
Special Category Data

Due to the nature of massage therapy, we may need to process sensitive personal data (known as special category data) relating to your health. This information is collected only where necessary, kept confidential, and used solely to ensure your safety and wellbeing.

3.1 Personal Data of Third Parties

If you book on behalf of another person, we may collect their personal data for the purposes outlined in this Privacy Notice.

3.2 Failure to Provide Personal Data

Where personal data is required by law or necessary to provide our services, failure to provide this information may mean we are unable to fulfil or enter into a contract with you. If this occurs, we will inform you at the time.

4. How Personal Data Is Collected

We collect personal data through:

Direct interactions: when you make a booking, complete a contact or consultation form, communicate by email, phone, WhatsApp, message, or provide information before or during a session

Website interactions: technical data collected through cookies or similar technologies

Third parties: such as analytics providers (e.g. Google Analytics) or advertising platforms where applicable

5. Why We Use Your Personal Data

We use personal data to:
Manage bookings and provide massage services
Assess suitability for Thai massage and ensure client safety
Communicate before and after sessions
Meet professional, legal, tax, and insurance requirements
Your data is not used for marketing purposes without your consent.

6. Legal Basis for Processing

We process personal data under the following lawful bases:

Consent: for health information and marketing communications
Contract: to provide booked services
Legal obligation: for accounting, insurance, or regulatory purposes

You may withdraw consent at any time.

7. How Data Is Stored and Protected

Personal data is stored securely using password-protected devices and secure systems. Access is limited to the therapist only.

For personal safety reasons, your appointment location may be shared with a trusted family member (e.g. spouse) solely to ensure the therapist’s safety. No other personal details are shared, and this information is not used for any other purpose.

We take reasonable steps to protect your data from loss, misuse, or unauthorised access.

8. Sharing of Personal Data

We do not sell or share your personal data for marketing purposes.
Personal data may be shared only where necessary, including with:
Payment service providers
Accountants or insurers
Legal or regulatory authorities
Website analytics services (e.g. Google Analytics)
Online reviews (such as Google Reviews) are voluntary and public; no personal data is posted by us without consent.

9. How Long We Keep Your Data

Personal data is retained only for as long as necessary:
Client and financial records may be kept for up to 7 years for legal, tax, or insurance purposes
Data is securely deleted when no longer required

10. Your Rights

Under UK GDPR, you have the right to:
Be informed about how your data is used
Access your personal data
Request correction of inaccurate data
Request deletion of your data
Withdraw consent at any time
Object to or restrict processing
Lodge a complaint with the Information Commissioner’s Office (ICO)
ICO website: www.ico.org.uk

11. Marketing Preferences

You may opt out of marketing communications at any time by following the unsubscribe link in messages or by contacting us at: hillandmoon@shanyuetwellness.com

This does not affect essential communications related to booked services.

12. Updates to This Privacy Notice

This Privacy Notice may be updated from time to time. The most current version will always be available on this website.