Privacy Policy

Privacy Policy

mairitaylor.com

Last updated: June 2026  ·  Next review: June 2027

This website is run by Mairi Taylor. When you contact Mairi or use this site, some of your personal information is collected. This policy explains what is collected, why, how it is kept safe, and what your rights are. If you have any questions, email Mairi directly – her contact details are at the bottom of this policy.

1. Who We Are

This Privacy Policy applies to the website mairitaylor.com, operated by Mairi Taylor as a sole trader. In this policy, “we”, “us” and “our” refers to Mairi Taylor. Mairi Taylor acts as the data controller for personal data collected through this website.

If you have any questions about this policy or about how your personal data is handled, you can contact Mairi by email at menopauserockstar@gmail.com.

2. What Personal Data We Collect and Why

We collect personal data in the following ways:

2.1 Contact Forms and Direct Enquiries

When you use a contact form on this website, or contact Mairi directly by email or through a linked social media account, you may provide:

• Your name
• Your email address
• Any additional information you choose to include in your message

Lawful basis: Legitimate interests (Article 6(1)(f) UK GDPR) — to respond to your enquiry and to conduct our business. We have a legitimate interest in responding to messages sent to us, and this interest is not outweighed by your privacy rights given the context in which you have chosen to make contact with us.

2.2 Booking and Payment Information

When you book a treatment, class, event, or programme, you will be directed to a third-party booking or payment platform (such as Acuity Scheduling, PayPal, or a similar service). Any personal or payment information you provide during this process is collected and processed by that third-party platform, not directly by this website.

You should review the privacy policy of the relevant third-party platform before completing any booking or payment. We do not store your payment card details on this website.

Following a booking, Mairi may retain basic contact information (name, email address, treatment booked, and any relevant health notes provided for professional purposes) in order to manage your appointment and fulfil her duty of care as a therapist. Health information is treated as special category data under UK GDPR (see Section 4).

Lawful basis: Contract (Article 6(1)(b) UK GDPR) — processing is necessary to perform the contract for the service you have booked. For health information provided in a therapy context: explicit consent (Article 9(2)(a)) or, where applicable, provision of health or social care (Article 9(2)(h) UK GDPR).

2.3 Website Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies and similar technologies to collect information about how visitors use this website, including:

• Which pages are visited and for how long
• How visitors arrived at the site (e.g. from a search engine, social media, or a direct link)
• Approximate geographic location (country/region level only — no precise location data)
• Device and browser type

This information is used in aggregate to understand how the website is used and to improve its content and structure. It does not directly identify you as an individual.

Google Analytics data is transmitted to and stored on Google’s servers. Google may also use this data in accordance with its own privacy policy, available at policies.google.com/privacy.

You can opt out of Google Analytics tracking at any time by: (a) adjusting your cookie preferences using the cookie consent tool on this website; (b) installing the Google Analytics opt-out browser add-on, available at tools.google.com/dlpage/gaoptout; or (c) using your browser’s private/incognito mode.

Lawful basis: Consent (Article 6(1)(a) UK GDPR) — analytics cookies are only placed if you accept them via the cookie consent tool on this website.

3. Cookies

This website uses cookies — small text files placed on your device — to make the site work properly and, with your consent, to understand how it is used.

You can change your cookie preferences at any time by clicking the “Cookie Settings” link on this website. Most web browsers also allow you to control cookies through their settings — for more information, visit www.aboutcookies.org.

4. Health Information (Special Category Data)

As a massage therapist, scar therapist, and holistic practitioner, Mairi may collect and retain health-related information about clients — for example, information about medical conditions, surgical history (including C-section or cancer treatment history), or physical symptoms relevant to the treatment you receive. This type of information is classified as “special category data” under UK GDPR and is given a higher level of protection.

Health information will only be collected where it is necessary to provide the service you have requested, to fulfil Mairi’s professional duty of care, or where you have provided explicit consent. It will be:

• Kept securely and not shared with third parties except where legally required (e.g. a safeguarding referral, or where required by a court or regulatory body)
• Retained only for as long as is necessary for the purposes for which it was collected — see Section 6 for retention periods
• Not used for any purpose other than managing your treatment and professional relationship with Mairi

Lawful basis: Explicit consent (Article 9(2)(a) UK GDPR) and/or provision of health or social care by a health professional (Article 9(2)(h) UK GDPR), depending on the nature of the service provided.

5. Who We Share Your Data With

We do not sell, rent, or trade your personal data. We may share limited data with the following third parties, only to the extent necessary to operate this website and deliver our services:

We may also disclose personal data if required to do so by law, by a court order, or by a regulatory authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Mairi Taylor, our clients, or others.

6. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purposes for which it was collected, and in accordance with our legal obligations. Our general retention periods are:

7. Your Rights Under UK GDPR

Under UK data protection law, you have the following rights in relation to your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you (a “Subject Access Request”). We will respond within one month of receiving your request. There is no charge for this in most circumstances.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you have the right to ask us to correct it.

Right to Erasure (“Right to Be Forgotten”)

In certain circumstances, you have the right to ask us to delete your personal data — for example, if you withdraw consent and there is no other lawful basis for continuing to hold it, or if the data is no longer necessary for the purpose for which it was collected. Note that we may not always be able to comply with a request for erasure where we are required to retain data to comply with a legal obligation (e.g. financial records for HMRC).

Right to Restrict Processing

You have the right to ask us to temporarily stop processing your data in certain circumstances — for example, while you contest its accuracy, or while we are assessing a request for erasure.

Right to Data Portability

Where we process your data by automated means and on the basis of consent or contract, you have the right to receive a copy of that data in a structured, commonly used, machine-readable format, and to ask us to transfer it to another organisation where technically feasible.

Right to Object

You have the right to object to processing of your personal data where we rely on legitimate interests as the lawful basis. We will stop the processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms.

Rights in Relation to Automated Decision-Making

We do not carry out any automated decision-making or profiling that produces legal or similarly significant effects on you.

To exercise any of these rights, please contact Mairi by email at menopauserockstar@gmail.com. We will respond to all requests within one month. We may need to verify your identity before processing a request.

8. Links to Other Websites

This website contains links to third-party websites, including social media platforms (such as Facebook and Instagram), booking platforms, and payment providers. We are not responsible for the privacy practices or content of those websites. We encourage you to read the privacy policy of any third-party website you visit.

9. How We Keep Your Data Secure

We take appropriate technical and organisational measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include:

• This website is served over HTTPS (encrypted connection)
• Access to client records and mailing lists is limited to Mairi Taylor personally
• Third-party platforms used to process data (email marketing, bookings, payments) are reputable providers with their own security certifications and data protection commitments

No method of transmission over the internet or method of electronic storage is 100% secure. While we take all reasonable steps to protect your personal data, we cannot guarantee absolute security.

10. International Data Transfers

Some of the third-party services we use (including Google Analytics and certain email marketing platforms) may transfer and store your data outside the United Kingdom. Where this occurs, the transfer will be subject to appropriate safeguards — such as Standard Contractual Clauses approved by the UK Information Commissioner’s Office (ICO), or the provider’s participation in a recognised adequacy framework — to ensure your data receives a comparable level of protection.

11. How to Make a Complaint

If you are unhappy with how we have handled your personal data, please contact Mairi in the first instance at menopauserockstar@gmail.com. We will do our best to resolve your concern.

If you remain unsatisfied after contacting us, you have the right to make a complaint to the UK’s supervisory authority for data protection:

Information Commissioner’s Office (ICO)Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF Tel: 0303 123 1113 Website: ico.org.uk

12. Changes to This Privacy Policy

This policy was last updated in June 2026 and is scheduled for review no later than June 2027. We may update it from time to time to reflect changes in our practices, services, or legal obligations. When we make significant changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

If we make changes that materially affect how we use your personal data, we will take reasonable steps to notify you – for example, by sending a notice to mailing list subscribers.

13. Contact Details

If you have any questions about this Privacy Policy or about how your personal data is handled, please contact:

Mairi Taylor: mairitaylor.com Email: menopauserockstar@gmail.com