Policy
Privacy policy
Short and free of legalese: what I need to know about you, why I need it and what I do with it.
Last updated: 19 August 2026
Who processes your data
The data controller is Lenka Šínová, company ID 86981731, registered at Václava Trojana 1505/16, 104 00 Prague 10 – Uhříněves. You can reach me at lenkas108@gmail.com or on+420 777 285 075.
What I collect
- When you book: your name, phone number and sometimes an email address — so I know who I’m expecting and can let you know if anything changes.
- Before the massage: whatever you tell me about your health — injuries, surgery, pregnancy, allergies to oils. I only write these down when I need them to give you the massage safely.
- When you pay by bank transfer: the transfer details that show up on my statement.
- Visiting the website: the site collects only the technical data it needs to work. I don’t use Google Analytics or any advertising trackers.
Why I process it
- Performance of a contract — so I can give you the massage and agree a time with you.
- Legal obligation — I’m required by law to keep accounting and tax records.
- Legitimate interest — so I can remind you of your appointment or get back to you about a question.
- Consent — if you give it to me, for example for photographs or for publishing a review. You can withdraw your consent at any time.
How long I keep it
- Client contact details: for as long as you keep coming, and for 3 years afterwards.
- Notes about your health: for as long as you keep coming, and for 3 years afterwards.
- Accounting records: 10 years, as required by the Accounting Act and the VAT Act.
- WhatsApp messages and emails: usually 1 year, unless they are part of a booking.
Who I share it with
I never sell your personal data or pass it on to anyone for marketing purposes. I only share it where it is genuinely necessary:
- with the accountancy firm that handles my books,
- with the booking system provider (Booqito) if you book online,
- with my email and messaging providers (Google, WhatsApp / Meta),
- with public authorities, where the law requires it.
The booking system and the messaging tools are separate controllers or processors with privacy policies of their own.
Cookies and analytics
This site uses no advertising or analytics cookies and builds no profile of you. Only the technical data needed to display the page is stored. That’s why you won’t find an annoying cookie banner here.
If you open the embedded Google map or the booking widget, third-party content loads and that third party may set its own cookies under its own rules.
Your rights
Under the GDPR you have the right to:
- know what data I hold about you and receive a copy of it,
- have it corrected if it’s inaccurate,
- have it erased, if I no longer need it for a legal reason,
- restrict the processing or object to it,
- withdraw any consent you’ve given me, at any time,
- lodge a complaint with the Office for Personal Data Protection.
Just drop me a line at lenkas108@gmail.com. I’ll reply within 30 days at the latest.
Security
Paper notes are kept locked away at the studio. Electronic records live on devices protected by a password and two-factor authentication. I’m the only one with access.
Changes to this policy
I may update this policy when the way I work changes. You’ll always find the current version on this page, along with the date it was last updated.
This policy is written to be understood, not to read like a legal document. Before the site goes live I’d recommend having an accountant or a solicitor check it over, so that it matches how the studio actually runs.