Privacy Policy

Last updated: 27 August 2026

This Privacy Policy explains how goodmassage (“we”, “us”) collects, uses, and protects personal data when you use the website at goodmassage.so and related features (the “Service”). We aim to collect as little as possible.

1. Who is responsible

The data controller is [LEGAL ENTITY + ADDRESS]. For any privacy question or to exercise your rights, contact privacy@goodmassage.so. If we have no establishment in the EU/UK, our representative is [EU/UK REPRESENTATIVE].

2. Data we collect

Data you give us

  • Account data: your email address, a display name, and your chosen city or area.
  • Activity you create: favourites, verified visits, reviews and ratings, perk redemptions, and any messages you send us.
  • If you claim a studio: the contact details and proof you provide for that claim.

Data collected automatically

  • A coarse, approximate location derived from your IP address, used to show nearby studios and to protect the Service. Precise location is used only if you explicitly allow it in your browser, and is not stored in links or shared.
  • Basic technical and security data: IP address, device and browser information, and request logs, used to run the Service, prevent abuse, and enforce rate limits.
  • Strictly necessary cookies for sign-in sessions. We do not use advertising or cross-site tracking cookies.

Data from other sources

Studio listings are compiled from third-party and public sources, including OpenStreetMap and Overture Maps data, geocoding providers, and studios’ own public websites. This can include business contact details that, for a sole trader, may be personal data.

3. How and why we use data, and our legal bases

  • To provide the Service (accounts, favourites, verified visits, reviews, perks): to perform our agreement with you (GDPR Art. 6(1)(b)).
  • To run a useful, trustworthy directory, including compiling listings, screening, measuring handoffs, securing the Service, and preventing abuse: our legitimate interests (Art. 6(1)(f)).
  • To send the optional monthly digest: only with your consent (Art. 6(1)(a)), which you can withdraw at any time.
  • To meet legal obligations and defend legal claims: Art. 6(1)(c) and (f).

4. Reviews are public

Reviews you publish, together with a pseudonymous display name (for example a first name and last initial) and the rating, are shown publicly on the studio’s page. Do not include information you want to keep private.

5. Sharing and processors

We do not sell personal data. We share it only with service providers who process it on our behalf under contract, including:

  • hosting and delivery (our cloud hosting provider);
  • database and authentication (our managed database and auth provider);
  • third-party sign-in, if you choose it (for example Google, for the sign-in step only);
  • an email provider, to send magic links and, if you opt in, the digest;
  • a privacy-friendly, cookieless analytics provider that gives us aggregate usage statistics (such as page views) without tracking you across sites or storing profiles about you;
  • where required, professional advisers, or authorities in response to a valid legal request.

6. Studios and individuals in listings

We list studios on the basis of our legitimate interest in running a public directory of businesses. If a listing concerns you as an individual, you may object to or request removal or correction of it at privacy@goodmassage.so, and we will act on valid requests.

7. International transfers

Some providers may process data outside your country, including outside the EEA/UK. Where they do, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

8. Retention

We keep account and activity data for as long as your account is active, and delete or anonymise it within a reasonable period after you close your account, except where we must keep certain records to comply with law, resolve disputes, or enforce our terms. Security logs are kept only as long as needed for their purpose.

9. Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent at any time without affecting prior processing. You can delete your account and its data yourself from your profile. To export your data or make any other request, contact privacy@goodmassage.so. You also have the right to complain to your data protection supervisory authority.

10. Children

The Service is not directed to children and is intended for adults. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will remove it.

11. Security

We use reasonable technical and organisational measures to protect personal data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

12. Changes

We may update this Policy. Material changes take effect when we post the updated Policy with a new date. Please check back periodically.

13. Contact

Questions or requests: privacy@goodmassage.so. See also our Terms of Service.