Privacy Policy

Last updated: 09/09/26

1. Who we are

This website, continuumcm.co.uk (the "Site"), is operated by Continuum ("we", "us", "our"), a sole trader based in the United Kingdom.

If you have any questions about this policy or how we handle your personal data, you can contact us at:

Email: Contact@continuumcm.co.uk

For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), we are the "data controller" of the personal data described in this policy.

2. What data we collect

We collect the following categories of personal data:

a) Information you give us directly

  • Contact details submitted through our contact form (e.g. name, email address, phone number, message content)

  • Billing and payment details when you purchase our services (e.g. name, billing address, payment card details — processed via our payment provider, see Section 4)

  • Your email address if you sign up to our mailing list, along with any preferences you set

b) Information collected automatically

  • Analytics and usage data, such as pages visited, time spent on the Site, device and browser type, and approximate location, collected via cookies and similar technologies

3. How we use your data and our legal basis

Purpose Type of data Legal basis under UK GDPR Responding to enquiries made via our contact form Contact details, message content Legitimate interests (to respond to enquiries) Providing our services and processing payments Contact and billing/payment details Performance of a contract Sending marketing emails (only if you've opted in) Email address, preferences Consent Understanding how visitors use our Site and improving it Analytics/cookie data Consent (for non-essential cookies) Complying with our legal and tax obligations Billing records Legal obligation

We do not use your data for any automated decision-making or profiling that produces legal or similarly significant effects on you.

4. Third parties we share data with

We use the following third-party services to help run our Site and business. Each processes personal data on our behalf, or as their own controller, in line with their own privacy policies:

  • Booking and practice management - Jane App — to manage appointment bookings, client intake forms and treatment notes. Jane is GDPR-compliant and we store data with them on a UK-based server.

  • Payment processing - SumUp — to securely process card payments. We do not store your full card details ourselves.

  • Email marketing Jane App - to manage our mailing list and send newsletters or updates, if you've subscribed.

  • Website analytics - Google Analytics — to understand how visitors use our Site, using cookies (see Section 7).

Some of these providers may be based outside the UK, including in the United States. Where this is the case, we ensure appropriate safeguards are in place, such as the provider being certified under an approved data transfer framework or standard contractual clauses being used.

We do not sell your personal data to third parties.

5. Client health and treatment records

Before your first treatment, we ask you to complete an intake form covering relevant medical history, injuries, and contraindications (for example, pregnancy, recent surgery, allergies, or medical conditions that may affect treatment). We also keep brief notes after each session about the treatment given and any relevant observations.

This information counts as "special category data" under UK GDPR, meaning it receives extra legal protection. We only collect and use it to:

  • Assess whether a treatment is safe and appropriate for you

  • Tailor your treatment to your needs

  • Maintain a safe, accurate record of the care we've provided, in line with good practice for massage and bodywork therapists

Legal basis: We rely on your explicit consent to collect and use this health information. You can withdraw this consent at any time, though we may need to decline or adjust treatment if we no longer hold information necessary to treat you safely.

Retention: We keep treatment records for as long as you remain a client, and for a reasonable period afterwards (typically up to 7 years from your last treatment) in line with standard practice for holistic therapists, in case of any future queries or professional indemnity requirements. After this, records are securely deleted.

Confidentiality: Treatment records are kept confidential and are not shared with third parties, except where required by law or, in a medical emergency, to protect your health and safety. We store this information securely using Jane App, our booking and practice management platform (see Section 4).

6. How long we keep your data

We keep personal data only for as long as necessary for the purposes it was collected:

  • Contact form enquiries: typically up to 12 months, unless a longer period is needed to resolve an ongoing matter

  • Billing and payment records: as required by UK tax law, generally 6 years

  • Mailing list data: until you unsubscribe or ask us to delete it

  • Analytics data: as set by the retention settings of our analytics provider (typically 14–26 months)

7. Cookies

Our Site uses cookies and similar technologies to:

  • Enable core site functionality

  • Understand how visitors use the Site (analytics cookies)

You can control or disable cookies through your browser settings, and where we use non-essential cookies (such as analytics), we will ask for your consent via a cookie banner before they are set. Blocking some cookies may affect how the Site functions.

8. Your rights

Under UK data protection law, you have the right to:

  • Access the personal data we hold about you

  • Rectify inaccurate or incomplete data

  • Erase your data ("right to be forgotten") in certain circumstances

  • Restrict how we use your data

  • Object to processing based on legitimate interests or for direct marketing

  • Data portability, where technically feasible

  • Withdraw consent at any time, where processing is based on consent (e.g. marketing emails, non-essential cookies)

To exercise any of these rights, contact us at Contact@continuumcm.co.uk. We will respond within one month, as required by law.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk, if you believe we have not handled your data properly.

9. Data security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse, including using reputable third-party providers who maintain their own security standards for payments and data processing.

10. Children's data

Our Site is intended for business use and is not directed at children. We do not knowingly collect personal data from anyone under the age of 13.

11. Changes to this policy

We may update this policy from time to time, for example to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated "last updated" date.

12. Contact us

If you have any questions about this policy or how your data is handled, please contact:

Continuum Email: Contact@continuumcm.co.uk Website: continuumcm.co.uk