Privacy Policy

Last updated: 18 August 2026.

Yutori Space respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how Yutori Space collects, uses, stores and protects your personal information when you visit our website, contact us, make a booking, receive our services, or sign up to receive communications from us. Yutori Space is a sole-trader business providing massage therapy, bodywork, holistic therapies and Embodied Resilience Coaching. For the purposes of UK data protection law, Tracey Louise Taylor trading as Yutori Space is the data controller responsible for your personal information.

1. Who we are

Business name: Yutori Space

Data controller: Tracey Louise Taylor

Address: 26 Beechey Close, Denver, Downham Market, Norfolk, PE38 0DH

Email: tracey@yutorispace.co.uk

Website: https://yutorispace.co.uk

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us using the details above.

2. The information we collect

Depending on how you interact with Yutori Space, we may collect some or all of the following information. Information you provide directly This may include: your name; email address; telephone number; booking and appointment information; information you provide when contacting us; information about your preferences and requirements; payment and transaction information; information provided when you subscribe to our email communications; information provided through consultation, intake or client forms; information about your health, physical condition, injuries, medications, allergies or other circumstances where this information is relevant to providing a safe and appropriate service; andinformation you choose to share during coaching sessions, including information relating to your wellbeing, experiences, circumstances, thoughts, feelings and goals.

You are not required to provide information that is not necessary for the service you are requesting. However, if you do not provide information that is necessary for us to assess whether a treatment or coaching service is appropriate or safe, we may not be able to provide that service.

Information collected automatically

When you visit our website, certain information may be collected automatically, including: your IP address; browser and device information; pages visited and how you interact with the website; approximate geographical information; technical information about your visit; and information collected through cookies and similar technologies. The information collected depends on the website functions, cookies and third-party services currently enabled on our website.

3. How we use your information

We may use your personal information to: respond to enquiries; arrange and manage appointments; provide massage, bodywork and holistic therapy services; provide Embodied Resilience Coaching; assess relevant information to help determine whether a service is appropriate and safe; communicate with you about your appointments or services; process payments and maintain financial records; maintain appropriate client records; provide customer service; send information relating to services you have requested; send newsletters, resources and marketing communications where you have provided the appropriate consent or where another lawful basis applies; understand how visitors use our website and improve its content, functionality and performance; maintain the security of our website and systems; comply with legal, regulatory, insurance and professional requirements; establish, exercise or defend legal claims; and manage and administer our business.

We will only use your personal information for purposes that are compatible with the reason it was collected, or where otherwise permitted by law.

4. Our lawful bases for processing your information UK data protection law requires us to have a lawful basis for processing personal information. The lawful basis we use depends on the purpose for which the information is being processed.

Contract

We may process information where this is necessary to provide a service you have requested, including arranging and managing your booking, communicating with you about your appointment and providing the service.

Legal obligation

We may process information where this is necessary to comply with a legal obligation, including accounting, taxation and other legal requirements.

Legitimate interests

We may process information where this is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests. This may include managing and administering our business, maintaining appropriate records, responding to enquiries, improving our services, maintaining website security and establishing or defending legal claims.

Consent

Where consent is the appropriate lawful basis, we will ask for your consent before processing your information for that purpose. This may include certain marketing communications and the use of non-essential cookies and similar technologies. You can withdraw consent at any time where we rely on consent as our lawful basis. This will not affect the lawfulness of processing carried out before you withdrew your consent.

5. Health and other special category information

Some information you provide to Yutori Space may constitute special category personal data under UK data protection law. This includes information concerning your health. For example, you may provide information about an injury, medical condition, medication, allergies or other health-related circumstances when discussing or receiving a treatment. You may also choose to share information relating to your mental or emotional wellbeing during Embodied Resilience Coaching. We only collect and use health-related information where it is relevant and necessary for providing an appropriate service, ensuring your safety, maintaining appropriate client records or for another lawful purpose. Where required, we will obtain an appropriate additional condition for processing special category information, which may include your explicit consent

We aim to collect only the minimum health-related information reasonably necessary for the purpose for which it is being collected. Please avoid providing unnecessary sensitive information through general website contact forms or ordinary email.

6. Booking, consultation and payment services

We use Fresha to manage bookings, appointments and client consultation information. When you make a booking or complete a consultation form through Fresha, your information is processed by Fresha on our behalf. Consultation and treatment information may include information about your health where this is relevant to providing a safe and appropriate service. We retain relevant treatment records for a minimum of seven years following the last occasion on which treatment was provided, in accordance with the requirements of our professional insurance policy. Where appropriate, records may need to be retained for longer, including where there is an ongoing or potential legal claim or another legitimate reason for continued retention. Payment information may also be processed by third-party payment providers. Yutori Space does not normally have access to your full payment card details. Fresha is a third-party service provider and processes information in accordance with its own privacy policy and data protection terms.

7. Email communications

If you choose to subscribe to our email communications, we may collect and process your name and email address to send newsletters, information, resources and marketing communications relating to Yutori Space. We use Kit as our email marketing provider. You can unsubscribe from marketing emails at any time by using the unsubscribe link included in our emails or by contacting us directly. We may retain limited information about your marketing preferences, including the fact that you have unsubscribed, so that we can respect your request not to receive further marketing communications.

8. Website analytics

We use Google Analytics and Wix Analytics to understand how visitors use our website and to help us improve its content, functionality and performance. Analytics may involve the collection of information such as: • • • • • pages visited; approximate location; device and browser information; how visitors interact with the website; and information about how visitors arrive at and navigate through the website. Where required by law, non-essential analytics cookies and similar technologies will only be used after you have provided consent through our cookie settings. Google Analytics and Wix Analytics are third-party services and may process information in accordance with their own privacy policies.

9. Cookies

Our website uses cookies and similar technologies. Some cookies are necessary for the website to function properly, maintain security or provide services you have specifically requested. Other cookies, including certain analytics cookies, are non-essential and require your consent before they are placed on your device where required by law. Our website uses Wix's cookie-management functionality to allow visitors to manage their cookie preferences. You can change or withdraw your cookie preferences through the cookie settings available on our website. Further information about the specific cookies used on the website may be provided through our cookie settings or Cookie Policy.

10. Who we share your information with

We may share personal information with trusted third parties where this is necessary for us to operate our business and provide our services. These may include: Wix, our website provider; Fresha, our booking, appointment and client management provider; Kit, our email marketing provider; Google, in connection with Google Analytics; payment service providers; IT, software and cloud service providers; accountants and professional advisers; insurers where reasonably necessary; legal or regulatory authorities where we are legally required to do so; and other service providers where this is necessary to provide a service you have requested

We do not sell your personal information. We only share personal information where there is a lawful basis for doing so and take reasonable steps to ensure that third-party providers process your information appropriately.

11. International transfers

Some of the third-party services we use may process or store personal information outside the United Kingdom. Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that your information continues to receive an appropriate level of protection under UK data protection law. The privacy policies of the relevant third-party providers may contain further information about international transfers.

12. How long we keep your information

We only retain personal information for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, accounting, insurance and professional requirements. Different types of information may therefore be retained for different periods. Treatment and consultation records: We retain massage, bodywork and other treatment consultation and treatment records for a minimum of seven years following the last occasion on which treatment was provided, in accordance with the requirements of our professional insurance policy. Where a client is a minor, records may be retained for at least seven years after they reach the age of 18. In certain circumstances, including where there may be an ongoing or potential legal claim, records may need to be retained for longer. Booking and transaction information: We retain information for the period necessary for accounting, tax, business record-keeping and other legal requirements. Marketing information: We retain your marketing information while you remain subscribed, together with information necessary to record your marketing preferences and any request to unsubscribe. When personal information is no longer required, we will securely delete it or anonymise it where appropriate.

13. How we protect your information

We take reasonable technical and organisational measures to protect your personal information against accidental loss, unauthorised access, misuse, alteration or disclosure. We use reputable third-party providers and take reasonable steps to ensure that personal information is handled securely. However, no method of transmitting information over the internet or storing information electronically can be guaranteed to be completely secure.

14. Your data protection rights Under UK data protection law

You may have rights including: the right to be informed about how your personal information is used; the right to access the personal information we hold about you; the right to ask us to correct inaccurate or incomplete information; the right to ask us to erase your personal information in certain circumstances; the right to ask us to restrict processing in certain circumstances; the right to object to certain processing, including direct marketing; the right to data portability in certain circumstances; and the right to withdraw consent where we rely on consent as our lawful basis. These rights are not absolute and may not apply in every situation. If you wish to exercise one of your rights, please contact: tracey@yutorispace.co.uk We may need to verify your identity before responding to a request.

15. Direct marketing

If you have opted to receive marketing communications from Yutori Space, you can change your mind at any time. Every marketing email will include an unsubscribe option. You can also contact us at tracey@yutorispace.co.uk to ask us to stop sending marketing communications. We will respect your marketing preferences and will not continue sending marketing communications where we are required by law to stop.

16. Children's information

Our services and website are intended primarily for adults. We do not knowingly collect personal information from children through our website unless this is necessary in connection with a service and appropriate arrangements have been made. If you believe that a child has provided personal information to us without appropriate consent, please contact us.

17. Third-party websites

Our website may contain links to websites operated by other organisations, including social media platforms and other third-party services. This Privacy Policy applies only to Yutori Space and information processed by us. We are not responsible for the privacy practices or content of third-party websites. You should review the privacy policies of those websites before providing them with personal information.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal requirements or how we process personal information. The latest version will always be published on this page, with the date of the most recent update shown at the top.

19. Complaints

If you have concerns about how we have handled your personal information, please contact us first so that we have an opportunity to address your concerns. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO). Further information about making a complaint is available from the ICO: https://ico.org.uk/make-a-complaint/

20. Contact us

If you have any questions about this Privacy Policy, how we use your personal information, or wish to exercise your data protection rights, please contact: Tracey Louise Taylor trading as Yutori Space, 26 Beechey Close Denver Downham Market Norfolk PE38 0DH

Email: tracey@yutorispace.co.uk