Skip to main content
Brazilian Massage

Legal

Privacy Policy (UK GDPR)

Last updated: May 2026

⚠️ Placeholder copy for review by a UK-qualified solicitor before launch.

1. Who we are

Brazilian Massage Ltd is the data controller for personal data processed via this site. Contact: privacy@serenefind.uk.

2. Data we collect

  • Account data: name, email, role, password hash.
  • Therapist data: business details, location, qualifications, verification documents.
  • Usage data: page views, search queries, device info.
  • Messaging data: messages exchanged via the platform.

3. Lawful basis

We process data under (a) contract — to operate your account, (b) legitimate interests — site security and fraud prevention, and (c) consent — analytics and marketing emails.

4. Sharing

We share data with our processors: Supabase (hosting), Stripe (payments), Mapbox (geocoding), Resend (email). All are GDPR-compliant.

5. Retention

Account data is kept while your account is active and for 6 years after closure for tax records. Verification documents are deleted on verification or rejection.

6. Your rights

Under UK GDPR you can request access, correction, deletion, restriction, portability, or object to processing. Use our data request page when signed in, or email privacy@serenefind.uk.

7. Cookies

See our Cookie Policy.

8. Complaints

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.