Privacy Policy
This Privacy Policy explains how personal information is collected, used, and protected when you use this website, contact Eva Nagy, or book massage sessions.
This website is operated by Eva Nagy, a sole trader providing massage therapy services in Surrey, including mobile massage sessions in Oxshott, Cobham, Esher, and surrounding areas, as well as private practice appointments in Cheam.
1. Contact Details
Business name: Eva Nagy
Contact email: eva.massages@icloud.com
Location: SM2 6EJ · Surrey · United Kingdom
If you have any questions about this Privacy Policy or how your information is handled, you can contact me using the details above.
2. Information Collected
Depending on how you interact with the website or services, the following information may be collected:
Contact Information
-
Name
-
Email address
-
Phone number
-
Address or postcode
-
Information provided through enquiry forms, WhatsApp, email, or text message
Appointment Information
-
Session preferences
-
Availability and booking information
-
Communication regarding appointments
Health and Consultation Information
As part of providing massage therapy safely and appropriately, health-related information may be collected where relevant, including:
-
Medical conditions
-
Injuries
-
Areas of pain, tightness, or tension
-
Contraindications
-
Consultation forms and treatment notes
This information is treated as confidential and handled with appropriate care.
Website Usage Information
This website may collect limited technical information automatically through cookies and standard Wix analytics tools, including:
-
Device type
-
Browser type
-
General location data
-
Pages visited
-
Time spent on the website
No advertising or retargeting cookies are currently used.
3. How Information Is Used
Personal information may be used for the following purposes:
-
Responding to enquiries
-
Arranging and managing appointments
-
Providing massage therapy services safely
-
Maintaining treatment records where required
-
Communicating about appointments or changes
-
Managing payments and invoices
-
Improving website functionality and performance
-
Meeting legal or professional obligations
Information is only used where there is a legitimate reason to do so.
4. Legal Basis for Processing
Under UK GDPR, personal information is processed on one or more of the following legal bases:
-
Consent
-
Legitimate interests
-
Contractual necessity
-
Legal obligations
-
Provision of health-related services
Health-related information is only collected where relevant to providing massage therapy safely and appropriately.
5. How Information Is Stored
Reasonable steps are taken to protect personal information from loss, misuse, unauthorised access, or disclosure.
Information may be stored securely through:
-
Wix website systems
-
Email
-
Password-protected devices
-
Secure digital notes
-
Paper consultation forms where applicable
Only information necessary for the operation of the business and provision of services is retained.
6. Sharing Information
Personal information is not sold or shared for marketing purposes.
Information may occasionally be shared where necessary with:
-
Payment providers
-
Professional advisers or accountants
-
Legal or regulatory authorities where required by law
All reasonable steps are taken to ensure any third parties handle information appropriately.
7. Payments
Payments for massage therapy services are accepted by bank transfer, cash, or contactless payment via PayPal point-of-sale.
No card details are stored by Eva Nagy. Contactless payments are processed through PayPal. PayPal's privacy practices can be found at: https://www.paypal.com/uk/legalhub/privacy-full
8. Cookies
This website uses cookies and similar technologies to:
-
Ensure the website functions correctly
-
Understand how visitors use the website
-
Improve website performance and user experience
Only essential and standard analytics cookies are currently used.
A cookie consent banner is provided where required.
You can manage or disable cookies through your browser settings.
9. Data Retention
Personal information is retained only for as long as reasonably necessary for:
-
Providing services
-
Maintaining appropriate business records
-
Legal, insurance, or professional requirements
Health-related consultation notes may be retained for a reasonable professional period where appropriate.
10. Your Rights
Under UK GDPR, you may have the right to:
-
Request access to your personal information
-
Request correction of inaccurate information
-
Request deletion of information where appropriate
-
Object to certain uses of information
-
Request restriction of processing
-
Withdraw consent where consent is relied upon
Requests can be made by contacting:
11. Children and Young Persons
Massage services may occasionally be provided to individuals under 18 with appropriate parental or guardian consent.
Information relating to minors is handled with additional care and confidentiality.
12. External Services
This website is hosted through Wix.
Wix may process technical data necessary for website hosting, security, analytics, and functionality.
More information about Wix's privacy practices can be found at:
https://www.wix.com/about/privacy
13. Changes to This Policy
This Privacy Policy may occasionally be updated to reflect changes in services, legal requirements, or website functionality.
The latest version will always appear on this page.
14. Complaints
If you believe your information has been handled improperly, you have the right to contact the UK Information Commissioner’s Office (ICO).
Website:
https://ico.org.uk
Last updated: May 2026