Last updated: 14 October 2026.
Who is responsible for your information?
Ezra Therapy is operated by Matthew Gair, who is responsible for personal information used in connection with Ezra Therapy appointments.
You can ask about privacy or exercise your data-protection rights using my business WhatsApp contact: 07482 132773. My studio is in Pontypridd; the private residential address is not displayed on this site.
Information I collect
For enquiries and appointments I may receive your name, contact details, preferred massage, appointment date and duration, relevant communications, and your postcode or visit address when you ask about mobile services.
Before a massage, I discuss relevant medical conditions or injuries verbally to check suitability. I do not use written or digital health questionnaires or keep treatment notes from those discussions. Please avoid including detailed medical information in online booking forms or ordinary messages. If you send health details through a message, they may remain in that conversation and need additional protection.
I also keep appropriate booking, treatment-charge and accounting information such as the service price, payment method, amount actually received and payment date. Payment is by cash or bank transfer after the appointment, with no booking deposit required.
Why I use your information
I use booking and contact information to respond to enquiries, arrange appointments, provide the massage you request and send necessary appointment information. The usual legal basis for these activities is taking steps before, or performing, a contract with you (UK GDPR Article 6(1)(b)).
I keep appropriate accounting information to meet legal obligations (Article 6(1)(c)). I may handle proportionate business correspondence to resolve genuine concerns or protect legal rights where my legitimate interests apply (Article 6(1)(f)).
I do not automatically add massage clients to promotional mailing lists. I do not make automated decisions about people that have legal or similarly significant effects.
Health information sent in messages
Health information is especially sensitive under data-protection law. My standard suitability conversation is verbal and is not turned into a written treatment record. If you send medical details through WhatsApp, Beacons or another online message, the platform may store that message. I aim to minimise such information and use it only where necessary to respond to you or arrange safe treatment. Where recorded health data needs to be processed, an appropriate UK GDPR lawful basis and additional special-category condition are required. Please contact me if you have a concern about sensitive details you have already sent.
Other services used
I use Beacons for online appointment bookings and Google Calendar to manage availability and confirmed appointments. I use Google Drive for private business administration. WhatsApp and Instagram are operated by Meta when you contact me through those services. Financial transactions also involve the relevant banks.
This informational website is intended to be hosted by Netlify. It does not contain a customer booking form of its own. Netlify may process technical information such as internet connection details, device or browser information and security logs to deliver and secure the site. Where lawfully required, information may be supplied to appropriate professional advisers or public authorities.
I do not sell my client records or share private treatment information for unrelated advertising.
International handling
Some providers may process information outside the United Kingdom. Beacons states that it is based in the United States and may transfer data to other countries. Google also uses infrastructure internationally. Netlify publishes information about its international data-processing arrangements, including the UK extension to the EU–US Data Privacy Framework and data-processing terms. Meta services operate internationally.
You can read the providers’ privacy information here: Beacons, Google, Netlify and WhatsApp. Contact me for further information about safeguards applicable to your information.
How long I keep information
My normal target is to retain relevant confirmed client booking, appointment, consent documentation (where any exists) and financial records for up to seven years where this is needed for accounting, business administration, insurance, complaints or legal claims. Legal requirements or an ongoing matter may require a longer period.
An enquiry that does not become a booking is not automatically kept for seven years: I only retain it for as long as the enquiry and reasonable follow-up justify. I do not create written treatment notes from verbal health discussions. Personal information should be deleted or anonymised sooner when there is no longer a lawful reason to retain it.
Your rights
Depending on the circumstances you may have rights to access or correct your information, ask for deletion or restriction, object to certain processing or receive certain information in a portable format. Where processing is based on consent, you can withdraw that consent.
To exercise a right, contact me via WhatsApp. You may also complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint.
Cookies and external links
This website’s current design does not include analytics cookies, advertising pixels, third-party embedded booking forms or tracking scripts. Netlify may process technical request information needed for hosting and security. Optional Netlify Web Analytics is not enabled as part of this website design.
When you follow a link to Beacons, WhatsApp, Instagram or another third-party service, that provider’s own website and privacy practices apply.