Privacy Policy

Last Update: May 1, 2026

Daniela Beauty and Wellness Paulo António (referred to as Daniela Beauty, “we”, “us”, or “our”) is the data controller of your personal data. This Privacy Policy explains how we collect, use, and protect your information, including any health-related information you share with us for massage and wellness treatments.

By using our website or booking our services, you acknowledge that you have read and understood this Privacy Policy.

1. Personal information we collect

We collect different types of information depending on how you interact with us.

A. Automatically collected information (Device Information)

When you visit our website, we automatically collect:

  • Web browser type and version

  • IP address

  • Time zone

  • Cookies installed on your device

  • Pages or products you view

  • Referring websites or search terms

  • How you interact with the site

This information is used only for website security, abuse prevention, and statistical analysis. It cannot be used to personally identify you.

B. Information you provide to us voluntarily

You may provide personal data when you:

  • Book an appointment

  • Fill out our client intake form (paper or digital)

  • Sign up for our newsletter

  • Contact us directly

  • Make a payment

This may include:

  • Full name

  • Address

  • Email address

  • Phone number

  • Payment information (processed securely)

  • Health-related information – see Section 2 below

2. Health information (sensitive data)

Because massage therapy requires knowledge of your physical condition, you may choose to disclose health information such as:

  • Injuries, past or present

  • Surgeries

  • Chronic conditions (e.g., fibromyalgia, arthritis)

  • Pregnancy

  • Allergies

  • Medications

  • Other relevant medical history

Legal basis for processing health data: Under Swiss FADP and GDPR, health data is considered sensitive personal data. We process it only on the following grounds:

  • Your explicit consent (given verbally or in writing)

  • The necessity of providing you with a safe and appropriate massage treatment

We will never collect more health information than is reasonably necessary for your session.

Important

You are never required to disclose more than you feel comfortable sharing. However, withholding relevant health information may affect our ability to provide safe treatment.

3. Why we process your data

We process your personal and health data for the following purposes:

  • To provide safe massage and wellness treatments – based on performance of a contract and your explicit consent (for health data)

  • To maintain professional treatment notes (SOAP notes) – based on legitimate interest and legal/insurance obligations

  • To communicate about appointments (reminders, changes, cancellations) – based on performance of a contract

  • To process payments – based on performance of a contract

  • To improve our website and services – based on legitimate interest

  • To send newsletters (only if you opted in) – based on your consent

  • To comply with legal or insurance requirements – based on legal obligation

4. Client intake form and treatment notes

Before your first session, you will be asked to complete a client intake form (paper or digital). This form collects:

  • Basic contact information

  • Relevant health history

  • Emergency contact (optional)

We also keep SOAP notes (Subjective, Objective, Assessment, Plan) from each session. These notes help us:

  • Track your progress

  • Adjust treatments safely

  • Fulfill professional and insurance requirements

Retention period for health-related notes

We retain your intake form and SOAP notes for 5 years after your last session, or as required by Swiss law and our professional insurance. After this period, they are securely destroyed (shredded or permanently deleted).

5. Consent for treatment

Before each massage session, we will ask for your verbal or written consent to:

  • Review any relevant health information

  • Perform the agreed massage treatment

You may withdraw your consent at any time during the session. Withdrawal of consent may mean we cannot continue the treatment, but you will not be penalized.

For clients under 18 years of age, a parent or guardian must provide written consent and remain on the premises during the session.

6. Confidentiality and sharing of information

We take your privacy seriously. We will never share your personal or health information with third parties except in the following limited circumstances:

  • With your explicit written permission (e.g., to coordinate with your physiotherapist or doctor)

  • When required by law (e.g., court order, suspected harm to yourself or others)

  • For insurance claims (only the minimum necessary information)

We will never sell your data to third parties.

Important note on shared spaces

Daniela Beauty operates within a shared salon environment. However, all massage treatments are conducted in a private, enclosed massage cabin. You are welcome to disclose any health information quietly inside the cabin, where we can maintain auditory privacy to a reasonable standard.

The waiting area and walkways are shared with other salon users. Please avoid discussing personal health details in these public areas. If you have any concerns about privacy, you may also write down your health information on the intake form instead of speaking it aloud.

7. Your rights

If you are a resident of Switzerland or the European Union, you have the following rights regarding your personal data:

  • Right to be informed – You have the right to know how we use your data (this privacy policy)

  • Right of access – You can request a copy of all data we hold about you

  • Right to rectification – You can correct inaccurate or incomplete data

  • Right to erasure (“right to be forgotten”) – You can request deletion of your data, subject to legal/insurance retention requirements (see section on retention of health notes)

  • Right to restrict processing – You can limit how we use your data in certain situations

  • Right to data portability – You can receive your data in a commonly used format

  • Right to object – You can object to processing based on legitimate interests

  • Rights related to automated decision-making – We do not use automated decision-making or profiling

To exercise any of these rights, contact us, and we will respond within 30 days.

Important note on erasure

We cannot delete health-related notes that are required for insurance or legal purposes until the mandatory retention period (5 years) has passed. In such cases, we will restrict access instead of deleting.

8. International data transfers

If you are a European resident, your information may be transferred outside of Europe (including to Canada and the United States) for purposes such as email hosting or payment processing. We ensure that any such transfers are protected by appropriate safeguards (e.g., Standard Contractual Clauses).

9. Links to other websites

Our website may contain links to third-party sites (e.g., booking platforms, payment processors). We are not responsible for their privacy practices. Please read their privacy policies separately.

10. Information security

We protect your information using:

  • Secure, password-protected computer servers

  • Encryption for sensitive data, where possible

  • Physical safeguards (locked filing cabinets for paper intake forms)

However, no data transmission over the internet or wireless network can be 100% guaranteed secure. You share information at your own risk.

11. Legal disclosure

We may disclose your information if required or permitted by law, for example:

  • To comply with a subpoena or court order

  • To protect our rights or safety

  • To investigate fraud

  • To respond to a government request

12. Children's privacy

Our services are not directed at children under 16 without parental supervision. For clients under 18, a parent or guardian must provide written consent and remain present during the session. We do not knowingly collect data from unaccompanied minors.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on our website with the effective date. Significant changes will be communicated to active clients via email or in person.

14. Contact information

For any questions about this Privacy Policy or to exercise your rights:

Daniela Beauty and Wellness Paulo António

Bachlettenstrasse 8

4054 Basel

+41 78 302 53 22

Email: danielabeautyandwellness@gmail.com