Privacy Policy

Book My Massage is an online directory and marketplace platform operated by XDezo Limited, a company registered in England and Wales.

• Company Name: XDezo Limited
• Company Number: 16447007

For the purposes of data protection law, XDezo Limited is the data controller responsible for personal data processed through the Platform.

We collect only the personal data necessary to operate and improve the Platform.

a. Information You Provide to Us

• Name
• Email address
• Phone number (if provided)
• Enquiry or contact form details
• Account information (if you create an account)
• Reviews, ratings, or other content you choose to submit

b. Information Collected Automatically

When you use the Platform, we may collect:

• IP address
• Device, browser, and operating system information
• Usage data such as pages visited and interactions

This information is collected through cookies and similar technologies. Please see our Cookie Policy for full details.

Book My Massage:

• does not collect or store payment card details
• does not process customer payments
• does not provide massage or wellness services
• does not collect medical or health information

Any payment or service-related data is handled directly by independent service providers, not by us.

We use personal data only where permitted by law and only for legitimate purposes, including to:

• operate and maintain the Platform
• respond to enquiries and support requests
• enable account features (where applicable)
• pass enquiry details to service providers at your request
• display reviews and user-generated content
• improve Platform performance and user experience
• monitor misuse, fraud, or security risks
• comply with legal or regulatory obligations

We do not sell personal data.

Under UK GDPR, we process personal data on the following lawful bases:

• Consent – where you have given explicit consent (for example, marketing communications or non-essential cookies)
• Contractual necessity – where processing is required to provide Platform features you request
• Legitimate interests – to operate, secure, and improve the Platform
• Legal obligation – where processing is required by law

We may share personal data only where necessary, including with:

• independent service providers you choose to contact through enquiries or booking requests
• technical service providers that support Platform operations (for example, hosting or analytics providers)
• legal or regulatory authorities where required by law

Each recipient is required to handle personal data securely and in accordance with applicable data protection laws.

Massage therapists and businesses listed on the Platform are independent third parties.

If you submit an enquiry or booking request, your information will be shared directly with the relevant service provider so they can respond.

Once your data is shared, that provider acts as an independent data controller. You should review their privacy policies separately.

Some service providers we use to operate the Platform may process data outside the UK.

Where this occurs, we ensure appropriate safeguards are in place, such as:

• UK adequacy regulations, or
• approved contractual safeguards

to protect your personal data.

We retain personal data only for as long as necessary to:

• fulfil the purposes outlined in this Privacy Policy
• comply with legal, regulatory, or accounting obligations

When personal data is no longer required, it is securely deleted or anonymised.

Under UK GDPR, you have the right to:

• access your personal data
• request correction of inaccurate data
• request deletion of your data
• restrict or object to processing
• request data portability
• withdraw consent at any time (where processing is based on consent)

To exercise your rights, please contact us using the details below. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

We implement appropriate technical and organisational measures to protect personal data against:

• unauthorised access
• loss or misuse
• alteration or disclosure

However, no online platform can guarantee absolute security.

We use cookies and similar technologies in accordance with our Cookie Policy. You can manage or withdraw your cookie preferences at any time using our cookie settings.

The Platform is not specifically directed at children.

We do not knowingly collect personal data from children.

Any age-related suitability, consent, or safeguarding requirements for services are the responsibility of independent service providers, not Book My Massage.

We may update this Privacy Policy from time to time to reflect:

• legal or regulatory changes
• platform updates
• changes in our data practices

Any updates will be posted on this page with an updated “Last Updated” date.

If you have any questions about this Privacy Policy or how we handle personal data, please contact us at:

privacy@bookmymassage.co.uk