Last updated: 28/08/2025

At The Loft, we respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use, and store your information in line with the General Data Protection Regulation (GDPR).

1. Who we are

The Loft provides massage and reflexology treatments from Kilpedder.
Our contact details:
Email: theloftbylindsayevans@gmail.com
Phone: 085 735 9749

2. What information we collect

We may collect:

Personal details – such as your name, email address, phone number, and booking details.
Health information – only when provided by you on consultation forms, to ensure treatments are safe and appropriate.
Payment information – if you pay online, processed securely via third-party providers (e.g., Stripe, PayPal, Square).
Website usage data – such as cookies and analytics (see our Cookie Policy).

3. How we use your information

We use your information to:

Book and manage appointments.
Provide safe and effective treatments.
Send booking confirmations, reminders, or follow-up emails (with your consent).
Comply with legal and insurance requirements.

4. Legal basis for processing

We process your personal data on the following grounds:

Contract – to provide you with treatments you’ve booked.
Consent – for health information and marketing emails.
Legal obligation – for insurance or accounting requirements.

5. Data storage & retention

Consultation forms are stored securely (digitally or on paper) and kept for 7 years, as required by insurance.
Contact details for marketing are kept until you unsubscribe.
Payment data is not stored by us but handled by secure third-party providers.

Squarespace Data Storage

The Loft uses Squarespace to host this website. Squarespace stores data in Tier III data centers in the United States, using geographically distributed networks to ensure security and reliability. All Squarespace services comply with GDPR and the EU-U.S. Data Privacy Framework, ensuring that any personal data transferred from the EEA is handled in line with EU standards.

• More details on data storage: Where Squarespace stores data

• Privacy practices: Squarespace Privacy Policy

6. Sharing your data

We do not sell your data. We only share it with:

Payment providers (for transactions).
Insurance providers or legal authorities (if required by law).

7. Your rights under GDPR

You have the right to:

Access the data we hold about you.
Correct inaccuracies.
Request deletion of your data (where legally possible).
Withdraw consent at any time.
Lodge a complaint with the Data Protection Commission (DPC) in Ireland.

8. Contact us

If you have questions about this policy or how we handle your data, contact us at:
Email: theloftbylindsayevans@gmail.com
Phone: 085 735 9749