Privacy Policy

Fortress Therapies is a trading style of Fortress Health Ltd, Popeshead Court Offices, Peter Lane, York, YO1 8SU. We are committed to protecting your privacy and handling your personal information safely, lawfully and transparently in line with UK GDPR and the Data Protection Act 2018.

This Privacy Policy explains what personal data we collect, how we use it, and your rights.

1. Who We Are

Fortress Therapies provides holistic massage therapy and wellbeing services.
If you have any questions about this policy or how your data is handled, you can contact us at:
info@fortresstherapies.co.uk

2. What Personal Data We Collect

We may collect the following information:

• Name
• Email address
• Any information you include in an enquiry form
• Health, medical and any other information you provide before or after treatment      (for safety and suitability)
• Payment information (processed securely by our payment provider)
• Website usage data such as IP address and cookies (see section 5)

This is considered “personal data” under UK GDPR.

3. How We Collect Your Data

We collect data in the following ways:

• When you complete the website enquiry form
• When you contact us by email
• When you complete a consultation form before or after treatment
• When you visit our website (cookies and analytics)

4. Why We Use Your Data (Purposes & Lawful Bases)

We process your data for the following reasons:

To respond to enquiries

Lawful basis: Legitimate interests — to respond to your request.

To provide massage therapy services safely

Lawful basis: Legitimate interests and vital interests — ensuring treatments are safe and appropriate.

To maintain records required by insurance or professional standards

Lawful basis: Legal obligation and legitimate interests.

To manage appointments, communication and customer service

Lawful basis: Legitimate interests.

We do not use your data for automated decision‑making or profiling.

5. Cookies & Website Tracking

Our website may use cookies or analytics tools to understand how visitors use the site.
This may include your IP address, browser type and pages visited.

You can control cookies through your browser settings.
 

6. Who We Share Your Data With

We only share your data with:

• Our website hosting provider (for secure form delivery)
• Our email provider
• Our insurance provider (only if required for a claim)
• Payment processors (if applicable)

We do not sell or share your data with third parties for marketing.

7. International Transfers

If any of our service providers store data outside the UK, we ensure appropriate safeguards are in place, as required by UK GDPR.

8. How Long We Keep Your Data

We keep:

• Enquiry emails: up to 12 months
• Client treatment records/consultation forms: typically, 7-8 years, as required by insurance and      industry standards
• Website  analytics data: usually 26 months (depending on provider)
• 
  

We only keep data for as long as necessary for the purpose it was collected.

9. How We Protect Your Data

We use appropriate technical and organisational measures to keep your data secure, including:

• Password‑protected devices
• Secure email
• Encrypted website hosting
• Restricted access to client records

10. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion (in some cases)
• Object to processing
• Restrict processing
• Request a copy of your data
• Withdraw consent (if consent was the lawful basis)

To exercise any of these rights, contact us at info@fortresstherapies.co.uk.

11. Direct Marketing

We do not send marketing emails unless you explicitly opt in to mailings list/newsletter.
You can unsubscribe at any time.

12. Updates to This Policy

We may update this Privacy Policy from time to time.
The latest version will always be available on our website.