JUST LYMPHATIC PRIVACY AND COOKIE POLICY

Last updated: 22 July 2026

ABOUT THIS POLICY

This Privacy and Cookie Policy explains how Just Lymphatic collects, uses, stores and shares personal information when you use the Just Lymphatic mobile application, make or manage a booking, receive a treatment, contact us or otherwise use our services.

For UK data protection law, Just Lymphatic is the data controller for the personal information described in this policy.

Contact email: justmassage.bm@gmail.com

INFORMATION WE MAY COLLECT

Depending on how you use our services, we may collect:

Identity and contact information, such as your name, email address, telephone number and address where required.
Account information, including login details, preferences and account activity.
Booking and service information, including appointment dates and times, selected treatments, booking history, cancellations and booking communications.
Health and consultation information that you choose to provide and that is reasonably required to assess treatment suitability or provide a safe lymphatic treatment. This may include information about medical conditions, surgery, injuries, allergies, pregnancy, medication, mobility, swelling, pain or treatment preferences. Health information is special-category personal data and is handled with additional care.
Payment and transaction information, including the amount paid, payment status, refunds and limited payment references. Card and digital-wallet details are processed securely by the relevant payment provider. Just Lymphatic does not normally receive or store your complete card details.
Communications, including emails, messages, enquiries, feedback, reviews and customer-support requests.
Images or files that you voluntarily provide when relevant to an enquiry, consultation or treatment request.
Device and technical information, such as your device type, operating system, app version, language, IP address, approximate location derived from an IP address, diagnostic information and app usage.
Marketing and notification preferences, including whether you have agreed to receive promotional emails or push notifications.

We do not ask you to provide more personal or health information than is reasonably necessary.

HOW WE COLLECT INFORMATION

We may collect information:

Directly from you when you create an account, book or attend an appointment, complete a consultation, make a payment, contact us or change your preferences.
Automatically when you use the app through essential app technologies, logs, cookies or similar technologies.
From service providers involved in delivering the app, bookings, payments, notifications, analytics or customer support.

HOW WE USE YOUR INFORMATION

We may use your information to:

Create and manage your account.
Arrange, confirm, change or cancel appointments.
Provide lymphatic treatments and assess whether a treatment is suitable and safe.
Take payments, issue refunds and maintain transaction records.
Communicate with you about bookings, services, enquiries and support.
Send appointment reminders, service messages and important app updates.
Send marketing communications or promotional notifications where permitted.
Personalise and improve the app and our services.
Monitor performance, diagnose faults and protect the app, customers and business against fraud, misuse and security threats.
Comply with legal, accounting, tax, insurance and regulatory obligations.
Establish, exercise or defend legal claims.

OUR LAWFUL BASES

Under UK data protection law, we rely on one or more of the following lawful bases:

Contract: when processing is necessary to arrange a booking or provide a treatment or service you have requested.
Legal obligation: when we must keep or use information to comply with the law.
Legitimate interests: when processing is reasonably necessary to operate and improve Just Lymphatic, communicate with customers, protect our systems, prevent fraud and manage the business, provided those interests are not overridden by your rights.
Consent: when you have made a clear choice, including for certain marketing communications, optional notifications, device permissions or uses of health information. You may withdraw your consent at any time. This will not affect processing that took place before consent was withdrawn.

When we process health information or other special-category information, we will also rely on an appropriate condition under Article 9 of the UK GDPR. This will normally be your explicit consent. In limited circumstances, another condition may apply, including when processing is necessary to establish, exercise or defend a legal claim.

If information is required to provide a booking or treatment and you do not provide it, we may be unable to complete the booking or safely provide the requested service.

MARKETING AND PUSH NOTIFICATIONS

We may send marketing emails or push notifications only when we have a lawful basis to do so.

You can unsubscribe from marketing emails using the link contained in the message, change notification permissions through your device settings or contact us at justmassage.bm@gmail.com.

Administrative messages about an existing booking, payment, account, safety matter or significant service change are not considered marketing and may still be sent when necessary.

WHO WE MAY SHARE INFORMATION WITH

We may share personal information when reasonably necessary with:

Booking and appointment-management providers, including Setmore.
Payment providers, including Stripe, Apple Pay or Google Pay where selected.
App hosting, development and support providers, including Solves App.
Email, push-notification, cloud-storage, security, analytics and technical-support providers.
Professional advisers, insurers, accountants, auditors or legal representatives.
Regulators, law-enforcement bodies, courts or other authorities when disclosure is required or permitted by law.

These providers may process information on our behalf or, in some circumstances, act as separate data controllers under their own privacy policies.

Just Lymphatic does not sell your personal information.

INTERNATIONAL DATA TRANSFERS

Some service providers may process information outside the United Kingdom.

When personal information is transferred internationally, reasonable steps will be taken to ensure an appropriate legal safeguard is used. This may include UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses or another lawful transfer mechanism.

You may contact us for further information about the safeguards relevant to your information.

HOW LONG WE KEEP INFORMATION

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including any legal, accounting, insurance, safety and dispute-resolution requirements.

Retention periods vary according to the type of information. When deciding how long to retain information, we consider:

The nature and sensitivity of the information.
Why the information is required.
Legal, professional or insurance requirements.
The risk of harm caused by unauthorised use or disclosure.

Typical retention periods may include:

Enquiries and routine correspondence: generally up to 12 months after the matter has been resolved.
Account information: while the account remains active and for a reasonable period after it has been closed.
Booking, payment and transaction records: generally up to six years when required for accounting, tax, contractual or legal purposes.
Consultation, treatment and health records: for the period reasonably required for safe treatment, insurance and legal-claim purposes. This may be several years after your last treatment.
Marketing information: until you opt out or the information is no longer reasonably required.
Technical and security records: for a limited period appropriate for troubleshooting, security and fraud prevention.

Information may temporarily remain within secure backups before being overwritten or deleted.

We may retain information for longer when required by law or when a complaint or legal claim is anticipated or ongoing.

SECURITY

We use reasonable organisational and technical measures designed to protect personal information against loss, misuse, unauthorised access, alteration or disclosure.

These measures may include access controls, secure service providers, encrypted information transfers and staff or contractor confidentiality requirements.

No online service can guarantee complete security. You are responsible for keeping your login details confidential and should contact us if you believe your account or personal information has been compromised.

YOUR DATA-PROTECTION RIGHTS

Depending on the circumstances and the lawful basis being used, you may have the right to:

Request access to your personal information.
Ask us to correct inaccurate or incomplete information.
Ask us to erase your information.
Ask us to restrict how your information is used.
Object to certain processing, including direct marketing.
Receive certain information in a portable format or ask for it to be transferred to another organisation.
Withdraw your consent at any time when processing relies on consent.

THE RIGHT TO OBJECT

You have the right to object at any time to the use of your personal information for direct marketing.

You may also object to processing based on legitimate interests. We will stop the processing unless we have compelling legitimate grounds to continue or the information is required for legal claims.

To exercise any of these rights, email justmassage.bm@gmail.com.

We may need to verify your identity before completing a request. We normally respond within one month, although the law allows additional time in certain circumstances. Some rights are subject to legal exceptions.

ACCOUNT DELETION

When account deletion is available inside the app, you may use that feature.

You may also request account deletion by emailing justmassage.bm@gmail.com.

Deleting an account does not require us to delete information that must be retained for legal, accounting, safety, insurance or legal-claim purposes.

COOKIES AND SIMILAR TECHNOLOGIES

The Just Lymphatic app and any related web pages may use cookies, software-development kits, local storage, device identifiers, pixels or similar technologies.

These technologies may be used for:

Strictly necessary purposes, including signing you in, keeping the app secure, remembering a booking session and enabling payments.
Functionality, such as remembering preferences and settings.
Performance and analytics, such as understanding app reliability, detecting errors and measuring how features are used.
Communications, including delivering requested push notifications and measuring basic delivery or engagement.

Non-essential cookies or similar technologies will only be used when permitted by law and, where required, after you have been given a choice.

Refusing or blocking certain technologies may affect the functionality of the app or related web pages.

You can manage browser cookies through your browser settings and app permissions through your device settings.

Push notifications can be disabled through the notification settings on your device. Resetting or removing the app may also remove some information stored locally on your device.

THIRD-PARTY LINKS AND SERVICES

The app may contain links to third-party websites, social-media services, booking pages or payment services.

Those organisations are responsible for their own privacy practices. We recommend reading their privacy policies before providing personal information.

CHANGES TO THIS POLICY

We may update this policy when our services, providers or legal obligations change.

The latest version will be made available through the app or another appropriate location. The “last updated” date at the beginning of this policy will also be revised.

We may provide an additional notice when a change materially affects how personal information is used.

CONTACTING JUST LYMPHATIC

If you have questions, requests or concerns about this policy or how Just Lymphatic uses your personal information, please contact:

Just Lymphatic
Email: justmassage.bm@gmail.com

COMPLAINTS TO THE ICO

Please contact Just Lymphatic first so that we have an opportunity to resolve your concern.

You also have the right to complain to the UK Information Commissioner’s Office:

Website: https://ico.org.uk/make-a-complaint/
Telephone: 0303 123 1113
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom

Making a complaint to Just Lymphatic does not affect your right to complain to the Information Commissioner’s Office or seek another legal remedy.