Legal

Privacy Policy

Last updated: 11 June 2026

This Privacy Policy explains how Proud Mu'min Method Hijama collects, uses and protects personal information when you visit this website, request an appointment, contact us or receive treatment.

1. Who We Are

Proud Mu'min Method Hijama is responsible for the personal information collected through this website and during the booking process.

For privacy questions or data rights requests, contact us at hello@proudmumin.com.

2. Personal Information We Collect

We collect only the information needed to manage enquiries, bookings, treatment suitability and website operation.

Contact and identity details

  • Full name
  • Email address
  • Phone number

Booking details

  • Selected treatment
  • Preferred appointment date and time
  • Booking reference
  • Booking status

Payment details

  • Deposit amount and payment status
  • Stripe checkout and payment reference IDs
  • Limited booking metadata needed to match your deposit to your appointment request

Treatment and suitability information

  • Notes you choose to provide in the booking form
  • Information shared before or during a consultation, which may include health, medication, allergy, pregnancy, surgery or condition details

Consent records

  • Confirmation that you accepted the Terms & Conditions
  • Treatment consent and risk acknowledgements
  • The date and time those confirmations were recorded

Technical information

  • Basic server logs and security information such as IP address, browser details, request time and pages requested
  • Information needed to keep the website available, secure and working correctly

3. Health and Sensitive Information

Information about your health, medications, allergies, pregnancy status, medical history or treatment suitability may be special-category data under UK data protection law.

We only ask for this information where it is relevant to providing the combined Hijama and massage therapy session, consultation, safety screening or aftercare. Please do not include unnecessary sensitive information in the booking notes.

4. How We Use Your Information

  • Respond to enquiries and appointment requests
  • Check availability and manage bookings
  • Take and reconcile appointment deposits
  • Assess whether a requested treatment may be suitable before confirmation
  • Prepare for consultations and provide aftercare or follow-up communication
  • Keep treatment, consent and appointment records
  • Manage cancellations, disputes, complaints, insurance matters or legal claims
  • Maintain website security, prevent misuse and diagnose technical issues
  • Comply with legal, regulatory, tax or accounting obligations

5. Lawful Bases for Processing

We rely on different lawful bases depending on the reason we use your information:

  • Contract or steps before a contract: to handle appointment requests, treatment bookings and related communication.
  • Explicit consent: where you provide health-related information or confirm treatment consent and risk acknowledgements.
  • Legitimate interests: to operate the website, protect the service, keep appropriate records, manage disputes and improve client administration.
  • Legal obligations: where records must be kept for tax, accounting, insurance, legal or regulatory reasons.

If you withdraw consent for health-related processing, we may be unable to provide or continue treatment, but this will not affect processing that was lawful before consent was withdrawn.

6. Booking Form and Consent Records

When you submit a booking request, the website records your selected appointment details, contact details, any notes you provide, and the required consent confirmations shown in the booking form.

Online booking requests are not final appointments until confirmed by us. We may contact you by phone or email to confirm details, ask follow-up questions or rearrange availability.

If you pay an appointment deposit online, Stripe processes the payment and sends us payment status and reference information so we can match the deposit to your booking request.

7. Sharing Your Information

We do not sell personal information. We may share information only where needed for the purposes described in this policy.

  • Website hosting, database and infrastructure providers, including Cloudflare, which hosts the website and booking database
  • Payment processors, including Stripe, where you choose to pay an appointment deposit online
  • Email, phone or communication providers used to respond to enquiries and appointment requests
  • Professional advisers, insurers, accountants or legal advisers where necessary
  • Regulators, law enforcement, courts or public authorities where required by law

8. Website Technologies and Third Parties

This website does not use advertising trackers or analytics scripts. It may use essential technical data needed to deliver pages, protect the website and process booking requests.

The site loads fonts and icons from Google Fonts. Your browser may contact Google servers to retrieve those assets. Social links to Instagram or TikTok are ordinary external links; those services receive data only when you choose to open them.

9. International Processing

Some service providers may process or store information outside the UK. Where this happens, we expect appropriate safeguards to be used, such as contracts or transfer mechanisms recognised by UK data protection law.

10. How Long We Keep Information

We keep personal information only for as long as needed for the purpose it was collected, including appointment administration, treatment records, aftercare, accounting, insurance, legal or complaint handling requirements.

Booking and treatment-related records may be kept for up to seven years after your last appointment or interaction, unless a longer period is required for legal, insurance or dispute reasons. Enquiries that do not become bookings are deleted or anonymised when they are no longer needed.

11. Keeping Information Secure

We use reasonable technical and organisational measures to protect personal information, including secure website hosting, controlled access to booking records and limiting information to what is needed for the service. No website or online transmission can be guaranteed completely secure.

12. Your Rights

Under UK data protection law, you may have the following rights depending on the circumstances:

  • Request access to the personal data held about you
  • Ask for inaccurate or incomplete data to be corrected
  • Ask for data to be erased where there is no longer a valid reason to keep it
  • Ask for use of your data to be restricted in certain circumstances
  • Object to processing based on legitimate interests
  • Request a copy of data you provided in a portable format where this right applies
  • Withdraw consent where processing relies on consent, without affecting earlier lawful use of the data

To exercise these rights, contact us using the details above. We may need to verify your identity before responding.

13. Complaints

Please contact us first if you have a privacy concern so we can try to resolve it. You also have the right to complain to the UK Information Commissioner's Office.

ICO website: ico.org.uk/make-a-complaint

14. Changes to This Policy

We may update this Privacy Policy when the website, booking process or legal requirements change. The latest version will be published on this page with the updated date above.