Privacy Policy
Privacy Policy
She & Serenity | Women’s Holistic Massage & Wellbeing
Last updated: 13 October 2026
1. Introduction
At She & Serenity, your privacy, comfort and wellbeing matter to us. We are committed to treating your personal information with the same care, respect and confidentiality that we bring to our treatments.
This Privacy Policy explains how we collect, use, store and protect your personal information when you visit our website, book an appointment, receive a treatment or interact with us online.
We handle your information in accordance with applicable UK data protection and privacy laws, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
2. Who we are
She & Serenity provides women-focused holistic massage and wellbeing treatments in Cowbridge, South Wales.
She & Serenity is responsible for deciding how and why your personal information is used.
Contact details
Business name: She & Serenity
Website: https://sheandserenity.co.uk
Booking platform: Acuity Scheduling
Email: [Insert your business email address]
Business address: [Insert your business address, if applicable]
Please contact us using the details above if you have questions about this policy or wish to exercise your data protection rights.
3. Information we collect
We may collect the following types of personal information.
Personal and contact information
Your name, email address, telephone number and any other contact details you choose to provide.
Appointment and booking information
Information about your appointments, including the treatments you book, appointment dates and times, cancellations, booking history and relevant communications.
Appointments are managed through Acuity Scheduling, which may process personal information on our behalf in accordance with its applicable terms and privacy arrangements.
Health and consultation information
Before your treatment, we ask you to complete a paper health or consultation form. This may include information about:
Relevant medical history and current health concerns.
Pregnancy or post-surgical recovery, where relevant to your treatment.
Allergies, injuries, medications or other treatment considerations.
Your physical wellbeing and any areas requiring particular care.
Other information you choose to disclose that is relevant to your treatment.
Health information is special category personal data under UK GDPR and requires additional protection.
Please only provide information relevant to your treatment and safety.
Payment information
We may retain payment confirmations, transaction details and accounting records. Where a third-party payment provider processes your payment, that provider may handle your payment information under its own privacy arrangements.
Website and marketing information
We may collect information about how visitors use our website, interact with our social media content or respond to our marketing campaigns.
Depending on your cookie preferences and the tools in use, this may include website usage data, device and browser information, advertising interactions and online identifiers collected through Google Analytics and Meta tracking technologies.
4. How we collect your information
We collect information when you:
Book an appointment through Acuity Scheduling.
Complete a paper health or consultation form before a treatment.
Contact us by email, telephone or social media.
Subscribe to our email newsletter.
Visit our website or interact with our advertising, subject to applicable cookie and privacy requirements.
Provide feedback or communicate with us about your experience.
5. How we use your information
We use your personal information to:
Manage appointments and provide our massage and wellbeing services.
Contact you about bookings, changes and cancellations.
Assess relevant health considerations and provide treatments safely.
Maintain appropriate consultation and treatment records.
Process payments and meet accounting obligations.
Respond to enquiries and customer feedback.
Understand website performance and improve our services.
Measure advertising performance and, where permitted, support relevant marketing.
Send newsletters and information about treatments, offers and wellbeing services where legally permitted.
Comply with applicable legal, insurance and professional obligations.
We do not sell your personal information.
6. Our lawful basis for processing
We only use personal information where we have an appropriate lawful basis.
Depending on the circumstances, these bases may include:
Contract: Processing necessary to manage your booking and provide the service you request.
Legitimate interests: Processing necessary to manage our business, respond to enquiries, maintain appropriate records and improve our services, where your rights do not override those interests.
Legal obligation: Processing necessary to meet applicable legal, tax and accounting requirements.
Consent: Processing based on your consent, including
This website uses cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app. For information about viewing the cookies dropped on your device, visit The cookies Squarespace uses.
These necessary and required cookies are always used, which allow Squarespace, our hosting platform, to securely serve this website to you.
These analytics and performance cookies are used on this website, as described below, only when you acknowledge our cookie banner. This website uses analytics and performance cookies to view site traffic, activity, and other data.