How we look after your information

1. Who we are

This website and our booking service are run by RAHMATHERAPY LIMITED (company number 16769945), trading as Rahma Therapy. We are the data controller responsible for your personal information — the organisation that decides how and why it's used.

You can reach us by email at rahmatherapy@outlook.com or by phone on 07798897222.

2. What we collect

When you make a booking or get in touch with us, we collect:

• Your name, phone number and email address.
• Your address, town or city, area and postcode, plus any access or parking notes, so we can find and reach you.
• Whether the booking is for yourself, someone else, or a group, plus the gender of the person being treated — including your own if the booking is for you — and the names and genders of anyone else included.
• The treatments you choose and your preferred date and time.
• Any treatment notes you add about what you'd like help with.
• Any health or safety notes you choose to share — for example allergies, medication, pregnancy, recent surgery, injuries or skin concerns. This is optional, used only to help us deliver your treatment safely, given with your consent, and you can ask us to remove it at any time.
• If you book for other people, any notes you add about them. Those notes are about someone else, not you, and may include information about that person's health too.

3. Why we use it

• To provide the treatment and booking service you ask us for — necessary to fulfil our agreement with you.
• To handle any health or safety information you choose to share — only with your explicit permission, given when you confirm your booking, which you can withdraw at any time.
• To send you booking-related emails, such as confirmations and reminders — necessary to fulfil our agreement with you.
• For analytics, but only once you've given us your consent through the cookie banner. See our cookies page for what we use and how to change your choice.
• To keep records for insurance and legal purposes — our legitimate business interest in protecting the company and meeting our legal obligations.

4. Who helps us run the site

We use a small number of trusted providers to run our site and booking service. They only process personal information on our instructions, for these purposes:

• Supabase — stores our booking and client database.
• Resend — sends booking and service emails on our behalf.
• Cloudflare — hosts the site and protects it from abuse.
• Sentry — reports technical errors so we can fix problems; personal information is scrubbed before it reaches Sentry.
• Google — provides website analytics, but only runs once you've given cookie consent for it.

5. Where your data goes

Some of the providers above may process data outside the UK, including in the United States. Where that happens, the transfer is protected either by the UK Extension to the EU-US Data Privacy Framework or by UK-government-approved standard contractual terms, whichever applies to that provider.

6. How long we keep it

We keep booking, treatment and enquiry records for as long as they're needed — for the care we've given you, and to meet our legal, insurance and accounting obligations. How long that is depends on the type of record and which of those obligations applies to it, rather than a fixed period. You can ask what we hold about you, or ask us to delete it, using the contact details in “Who we are” above. Analytics information, where you've given consent for it, is kept according to Google's own retention settings.

7. Your rights

You have the right to:

• ask to see the personal information we hold about you;
• ask us to correct anything that's wrong;
• ask us to delete your information;
• ask us to restrict how we use it, or object to us using it;
• ask for a copy of your information in a portable format; and
• withdraw your consent at any time, for anything we rely on your consent for, such as health information you've shared.

To use any of these rights, contact us using the details in “Who we are” above.

8. Concerns and complaints

If you're unhappy with how we've handled your personal information, please contact us first so we can try to put things right. If you're still not satisfied, you also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent regulator for data protection: ico.org.uk · 0303 123 1113.

9. No automated decision-making

We do not use automated decision-making or profiling to make decisions about you. Every booking is reviewed and handled by a member of our team.