bibimcgee.co.uk
Last updated: June 2025
1. Introduction
Bibi McGee (“we”, “us”, “our”), trading as Bibi McGee Wellness, is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit bibimcgee.co.uk, use our services, or communicate with us.
We are the data controller responsible for your personal data. This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about this policy or how we handle your data, please contact us at bibimcgeemassage@gmail.com.
2. Who We Are (Data Controller)
Data Controller: Bibi McGee
Trading as: Bibi McGee Wellness
Address: East Wittering, West Sussex, PO20, United Kingdom
Phone: 07764 157679
Email: bibimcgeemassage@gmail.com
Website: bibimcgee.co.uk
3. What Personal Data We Collect
We may collect and process the following categories of personal data:
Contact & identity information:
- Full name
- Email address
- Phone number
- General location (for appointment purposes)
Health information (special category data):
- Health history, symptoms, and conditions you share during a consultation
- Information relevant to your therapy sessions (e.g. medications, medical implants)
Transaction & booking data:
- Appointment history and session notes
- Payment information (processed securely — we do not store full card details)
- Purchase history for shop products or e-book downloads
Website usage data:
- IP address and browser type (collected automatically via cookies and analytics)
- Pages visited, time spent on site, and referring URLs
Communications:
- Emails, messages, or form submissions you send to us
4. How We Collect Your Data
We collect data in the following ways:
- Directly from you — when you book an appointment, complete a consultation form, purchase a product, download our e-book, or contact us
- Automatically — through cookies and similar technologies when you browse our Website (see Section 9 for our Cookie Policy)
- From third-party platforms — if you interact with us via social media (Facebook: BibiMcGeeWellness, Instagram: @bibimcgeewellness) or booking tools
5. Legal Basis for Processing Your Data
Under UK GDPR, we rely on the following legal bases to process your personal data:
- Contract performance — to book and deliver your therapy sessions and fulfil product orders
- Legitimate interests — to respond to your enquiries, manage our business, and improve our services, where this does not override your rights
- Legal obligation — to comply with applicable laws and regulations
- Explicit consent — for processing special category health data (we will ask for your explicit consent before or during your consultation)
- Consent — for marketing communications (e.g. newsletter or promotional emails), where you have opted in
6. How We Use Your Personal Data
We use your personal data for the following purposes:
- To book, confirm, and manage your therapy appointments
- To maintain session and treatment notes relevant to your care
- To process payments and fulfil product orders
- To deliver digital products (e-book) to you
- To respond to your enquiries and communicate with you about your sessions
- To send appointment reminders
- To send newsletters or promotional content (only where you have given consent)
- To comply with our legal and regulatory obligations
- To improve our Website and services through analytics
7. Special Category Data (Health Information)
Health information is classified as “special category” data under UK GDPR and is afforded additional protection. We collect health data only where it is necessary to provide you with appropriate therapy and to ensure your safety during sessions.
We will always ask for your explicit consent before collecting and processing health information. You have the right to withdraw this consent at any time, though please be aware that withdrawing consent may affect our ability to provide you with therapy safely.
Health and session notes are stored securely and are not shared with third parties except where required by law or in an emergency situation.
8. Sharing Your Data
We do not sell, rent, or trade your personal data. We may share data only in the following circumstances:
- With service providers who assist us in operating our Website and business (e.g. website hosting, email platforms, payment processors) — these providers are contractually bound to protect your data and may only use it on our instructions
- Where required by law — for example, if we are required to disclose information to regulatory or law enforcement authorities
- In an emergency — where we reasonably believe it is necessary to protect the vital interests of you or another person
Any third parties with whom we share data are required to handle your information in accordance with UK GDPR.
9. Cookies
Our Website uses cookies to improve your browsing experience and to analyse traffic. Cookies are small text files stored on your device by your browser.
We use the following types of cookies:
- Essential cookies — necessary for the Website to function correctly
- Analytics cookies — to understand how visitors use our Website (e.g. via Google Analytics or similar tools)
- Functional cookies — to remember your preferences and settings
When you first visit our Website, you will be asked to consent to non-essential cookies. You can manage or disable cookies through your browser settings at any time, though disabling some cookies may affect Website functionality.
By continuing to use our Website after being presented with our cookie notice, you consent to the use of cookies as described above.
10. How Long We Keep Your Data
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.
As a guide:
- Therapy session and client records — retained for a minimum of 7 years following your last session, in line with standard complementary therapy practice guidelines
- Financial and transaction records — retained for 6 years in accordance with HMRC requirements
- Marketing data (email sign-ups) — retained until you unsubscribe or withdraw consent
- Website usage data — typically retained for 26 months
After the retention period has elapsed, your data will be securely deleted or anonymised.
11. Your Rights Under UK GDPR
You have the following rights in relation to your personal data:
- Right of access — to request a copy of the personal data we hold about you
- Right to rectification — to ask us to correct inaccurate or incomplete data
- Right to erasure (‘right to be forgotten’) — to request deletion of your data in certain circumstances
- Right to restrict processing — to ask us to limit how we use your data
- Right to data portability — to receive your data in a structured, commonly used format
- Right to object — to object to processing based on legitimate interests or for direct marketing
- Rights related to automated decision-making — we do not make automated decisions that significantly affect you
- Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, please contact us at bibimcgeemassage@gmail.com. We will respond to your request within one calendar month. There is no charge for exercising your rights unless requests are manifestly unfounded or excessive.
You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113, if you believe we have not handled your data in accordance with the law.
12. Data Security
We take the security of your personal data seriously. We implement appropriate technical and organisational measures to protect your information against unauthorised access, loss, destruction, or alteration.
These measures include secure email communications, password-protected devices, and careful physical storage of any paper records. However, please be aware that no method of transmission over the internet or electronic storage is entirely secure, and we cannot guarantee absolute security.
13. Third-Party Websites & Links
Our Website may contain links to third-party websites (including our social media profiles on Facebook and Instagram). This Privacy Policy applies only to bibimcgee.co.uk. We are not responsible for the privacy practices of any external websites and encourage you to review their policies directly.
14. Children’s Privacy
Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from children under the age of 18 without parental or guardian consent. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately and we will take steps to delete that information.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.
If we make significant changes, we will endeavour to notify you directly where reasonably practicable.
16. Contact Us & Complaints
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:
- Name: Bibi McGee
- Business: Bibi McGee Wellness
- Address: East Wittering, West Sussex, PO20, UK
- Phone: 07764 157679
- Email: bibimcgeemassage@gmail.com
