top of page
logo

Privacy Policy

Last updated: 11-10-2026

​

1. Who We Are

​

Cairn Holistic Therapies is a massage and holistic therapy business based in Scotland, United Kingdom, operated by a sole trader.

​

We provide massage and holistic therapies and are committed to respecting your privacy and protecting the personal information you share with us. Where necessary to provide treatments safely and appropriately, we may ask for relevant health information, such as medical conditions, injuries, allergies or other factors that may affect the suitability of a treatment.

​

Cairn Holistic Therapies is a massage and holistic therapy business, not a medical practice. Our services are not a substitute for medical diagnosis or treatment.

​

Business name: Cairn Holistic Therapies
Email: Cairnht@gmail.com
Website: https://www.cairnholistic.co.uk/

​

For the purposes of UK data protection law, the sole trader operating Cairn Holistic Therapies is the data controller responsible for deciding how and why your personal information is processed.

​

2. What Information We Collect

​

We may collect and process the following categories of personal information.

Personal and contact information

  • Your name.

  • Email address.

  • Telephone number.

  • Any other contact information you choose to provide.

Booking and appointment information

  • Appointment dates and times.

  • The treatment or service you book.

  • Booking confirmations, cancellations and appointment-related communications.

  • Relevant information you provide when making or changing a booking.

Health and treatment-related information

Where relevant to the safe and appropriate provision of a massage or holistic therapy, we may ask for information such as:

  • Relevant medical conditions or health concerns.

  • Injuries, pain or areas of discomfort.

  • Allergies or sensitivities.

  • Relevant medication or other factors that may affect treatment suitability.

  • Information you share about contraindications or treatment preferences.

We aim to collect only the health information reasonably necessary for treatment suitability, safety and related record-keeping.

Health information is considered special-category personal data under UK data protection law and receives additional protection.

Payment information

Payments may be processed through Wix Payments. We may receive transaction-related information, such as payment status, transaction references and details needed to manage a booking or resolve a payment query.

Your card details are handled through the payment provider's systems. We do not intentionally store full payment card details ourselves.

Website and technical information

When you visit our website, certain information may be collected through website functionality, analytics or cookies, depending on your consent choices and applicable requirements. This may include:

  • IP address or approximate location derived from it.

  • Browser and device information.

  • Pages visited and interactions with the website.

  • Website traffic and performance information.

  • Cookie and consent preferences.

Communications

We may retain emails and other messages you send us, together with our replies, where necessary to respond to you, manage appointments or maintain appropriate business records.

​

3. How We Use Your Information
 

We may use your personal information to:

  • Manage bookings, appointments, cancellations and rescheduling.

  • Provide the massage or holistic therapy you have requested.

  • Consider whether a treatment may be suitable and identify relevant safety considerations.

  • Communicate with you about your appointment.

  • Process and reconcile payments.

  • Maintain appropriate treatment, booking and business records.

  • Respond to questions, complaints or requests.

  • Operate, maintain and improve our website.

  • Understand website performance through analytics where permitted.

  • Meet applicable legal, accounting, insurance or record-keeping obligations.

  • Establish, exercise or defend legal claims where necessary.

We do not use your contact details for promotional marketing campaigns.
 

4. Our Lawful Bases for Processing
 

Under UK data protection law, we must have a lawful basis for processing personal information. Where we process health information, we must also meet an additional condition for processing special-category data.

Depending on the circumstances, our lawful bases may include the following.

Contract

We may process ordinary personal information where necessary to take steps at your request before a booking or to fulfil our agreement to provide a booked service.

Legitimate interests

We may process certain information where necessary for our legitimate business interests, such as managing our business, maintaining appropriate records, handling enquiries and protecting against or responding to legal claims. We will consider your rights and interests when relying on this basis.

Legal obligations

We may process information where necessary to comply with applicable legal obligations, including relevant accounting or tax requirements.

Consent

We may rely on your consent for particular processing activities, such as non-essential cookies or analytics where consent is required.

Health information is special-category data. Before processing it, we must identify both an appropriate Article 6 lawful basis and an applicable Article 9 condition under UK data protection law. Where we rely on your explicit consent to process health information, we will explain what information is involved and why it is needed, and obtain and record that consent appropriately.

You may withdraw consent at any time where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. It may affect whether we can safely or appropriately provide a particular treatment if the relevant information is necessary.

The lawful basis and special-category condition used in practice must reflect our actual procedures. We will not assume that a condition intended for regulated healthcare providers automatically applies to this business.
 

5. Online Bookings Through Wix Bookings
 

We use Wix Bookings to manage online appointments.

When you book through our website, your booking information is processed using Wix's systems. This may include your name, contact details, appointment selection, booking history and information you provide through the booking process.

We use this information to administer your appointment and provide the service you have requested.

Wix processes personal information under its own terms and privacy documentation. Depending on the service and circumstances, Wix may process information on our behalf and may also process certain information for its own purposes.

You can read Wix's privacy information on the Wix Privacy Policy.
 

6. Online Payments Through Wix Payments
 

We use Wix Payments to accept online payments where available.

Payment information is processed through the payment provider's systems to complete transactions, confirm payment and help prevent or resolve payment issues.

We may receive limited transaction information, such as payment confirmation, transaction references and payment status, to manage your booking and business records.

Payment providers may process information in accordance with their own privacy notices, terms and legal obligations.

We do not intentionally store full payment card details on our own systems.
 

7. Cookies, Analytics and Website Tools
 

Our website uses Wix and may use associated website tools to provide functionality, understand website performance and support search-engine visibility.

Wix Analytics

We use Wix Analytics to understand how visitors use our website and to assess website performance. Depending on the analytics configuration, this may involve cookies or similar technologies and the collection of technical or usage information.

Promote SEO

We use Promote SEO as a website search-engine optimisation tool to help manage or improve the website's visibility in search results. The information processed depends on the tool's functionality and configuration.

Usercentrics

We use Usercentrics to manage cookie consent on our website. It provides a mechanism for visitors to review and manage their consent preferences.

Your cookie choices

Where required by law, non-essential cookies and similar tracking technologies will only be activated after you have given valid consent. You should be able to reject non-essential cookies as well as accept them, and change your preferences later.

You can use the cookie-consent controls available on our website to review or change your preferences.

The presence of a cookie banner alone does not guarantee that all cookies and tracking technologies are configured correctly. We aim to ensure that our website's actual behaviour matches the choices visitors make and the requirements of applicable law.
 

8. Marketing Communications
 

We do not send promotional marketing emails or text messages.

We may contact you where reasonably necessary to manage a booking, confirm or change an appointment, respond to an enquiry or communicate important information about a service you have requested. These are service-related communications rather than promotional marketing.
 

9. How We Store and Protect Your Information
 

We take reasonable and appropriate steps to protect personal information against unauthorised access, accidental loss, misuse, alteration or disclosure.

Depending on the information concerned, safeguards may include access controls, account security, password protection and the use of established third-party service providers.

No method of transmitting or storing information online is completely secure. We cannot guarantee absolute security, but we take reasonable steps to protect the information we hold and limit access to those who need it for legitimate purposes.
 

10. How Long We Keep Your Information
 

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including appointment administration, appropriate record-keeping, legal obligations and the establishment or defence of legal claims.

Different types of information may be retained for different periods.

Booking, payment and accounting records may need to be retained for applicable tax, accounting or legal requirements.

Health and treatment-related records may be retained for an appropriate period where necessary for treatment-related record-keeping, insurance requirements or potential legal claims. The appropriate period depends on the circumstances and any applicable professional, insurer or legal requirements.

We will establish and follow a retention period for treatment records that reflects our actual obligations and insurance arrangements. We will not keep information indefinitely without a valid reason. When information is no longer needed, we will take reasonable steps to delete it or securely dispose of it.
 

11. Who We Share Your Information With
 

We do not sell your personal information.

We may share relevant information with service providers where necessary to operate our business and deliver our services. These may include:

  • Wix – website hosting and related website services.

  • Wix Bookings – appointment scheduling and booking administration.

  • Wix Payments – payment processing.

  • Wix Analytics – website analytics.

  • Usercentrics – cookie consent management.

  • Promote SEO – website search-engine optimisation.

  • Other service providers – where necessary for website operation, security, technical support or business administration.

We may also disclose information where required by law, to comply with a lawful request, or where reasonably necessary to establish, exercise or defend legal claims.

Where third parties process personal information on our behalf, we take reasonable steps to ensure that appropriate data protection arrangements are in place.

Some service providers may process information outside the United Kingdom. Where this occurs, applicable UK data protection requirements concerning international transfers must be met.
 

12. Your Data Protection Rights
 

Under UK data protection law, you may have the right to:

  • Access – request a copy of the personal information we hold about you.

  • Rectification – ask us to correct inaccurate or incomplete information.

  • Erasure – ask us to delete information in certain circumstances.

  • Restriction – ask us to restrict processing in certain circumstances.

  • Object – object to certain processing, including processing based on legitimate interests.

  • Data portability – request certain information in a portable format where the legal conditions apply.

  • Withdraw consent – withdraw consent where processing is based on consent.

These rights are subject to legal conditions and exemptions. For example, we may need to retain some information to meet legal obligations or establish or defend legal claims.

To exercise your rights, contact us at Cairnht@gmail.com. We may need to verify your identity before responding.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), if you believe your personal information has been handled improperly.
 

You can find information about your rights and how to complain at https://ico.org.uk/.

 

13. External Links
 

Our website may contain links to external websites or third-party services.

If you follow an external link, that website will have its own privacy practices and policies. We are not responsible for the privacy, security or content of external websites.

We encourage you to review the privacy policy of any external website before providing personal information.
 

14. Changes to This Privacy Policy
 

We may update this Privacy Policy from time to time to reflect changes in our business, website, service providers, data-processing practices or legal requirements.

The latest version will be published on our website with its updated date.
 

15. Contact Us

If you have any questions about this Privacy Policy, how we use your information or how to exercise your data protection rights, please contact:

Cairn Holistic Therapies
Email: Cairnht@gmail.com
Website: https://www.cairnholistic.co.uk/
 

16. Governing Law
 

This Privacy Policy is governed by the laws of Scotland.

Any disputes relating to this Privacy Policy will be subject to the jurisdiction of the Scottish courts, subject to any mandatory legal rights or protections that apply.
 

bottom of page