Privacy Policy

1. Who we are

Ruby Cupping Services (“we”, “us”, “Ruby”) is a sole-trader complementary therapy practice providing female-only cupping and Hijama therapy by home visit. Ruby is the data controller for the personal information described in this policy. You can reach her at info@rubycuppingservices.co.uk or through the website's WhatsApp button.

2. What information we collect

When you enquire or book online

• Your name, email address and—if you choose to provide it—a phone number for Ruby to call you later
• Your home address and postcode (so Ruby can travel to you and plan her route)
• Your preferred day and time, and the therapy you are interested in
• Anything you choose to tell us in the notes or message field

At your consultation

• Relevant health history, current medication, allergies and contraindications
• Your signed consent to treatment and the details of each session (areas treated, cups used, any reactions)
• Aftercare advice given and any follow-up notes

Health information is special category data under the UK GDPR. It is collected only because it is essential to treat you safely, and it is recorded on paper consultation forms that stay with Ruby — it is never uploaded to this website or stored in an online database.

3. How we use your information

• To respond to your enquiry and arrange, confirm or reschedule a home visit
• To screen for contraindications and provide treatment safely and appropriately
• To send aftercare guidance and a follow-up check-in after your session
• To keep the treatment records a professional practitioner is expected to hold
• To publish a review, only if you have asked us to and approved the wording and name shown

We do not use your details for marketing, we do not build profiles, and we never sell or rent personal information.

4. Our lawful basis

• Contract — processing your contact and address details is necessary to arrange and deliver the visit you have requested.
• Explicit consent — for your health information, which you give when you complete and sign the consultation form. You may withdraw consent at any time, though we may then be unable to treat you.
• Legitimate interests — keeping accurate treatment records, defending any claim and protecting the safety of clients.

5. Who we share it with

Your information is shared only with the services needed to run a simple, privacy-first website:

• Web3Forms — the serverless form service that delivers your online enquiry or booking request as an email to Ruby's inbox. Submissions pass through their servers in transit; we do not store them in any database of our own.
• Vercel — the hosting platform that serves this website. Standard server logs (such as IP address and pages requested) may be processed for security and performance.
• Google (email) — Ruby's business email account, where your messages and booking requests are received and held.

We will disclose information where the law requires it, or where it is necessary to protect someone's vital interests. We do not transfer your data outside the UK except where a provider above processes it under UK-approved safeguards.

6. How long we keep it

• Enquiries that do not lead to a booking — deleted within 6 months
• Booking emails — kept for the current and previous tax year for accounting purposes
• Paper consultation and treatment records — kept for 7 years after your last session, in line with professional guidance for complementary therapists, then securely destroyed

7. Your rights

Under the UK GDPR you have the right to:

• Access a copy of the information we hold about you
• Ask us to correct anything that is inaccurate or incomplete
• Ask us to delete your information, where we no longer need to keep it
• Restrict or object to how we use it
• Withdraw consent for the use of your health information at any time
• Complain to the Information Commissioner's Office (ICO) at ico.org.uk if you are unhappy with how we have handled your data

To exercise any of these rights, email info@rubycuppingservices.co.uk. We will respond within one month.

8. Cookies & analytics

This website does not set advertising or tracking cookies and, at the time of writing, runs no third-party analytics. If privacy-respecting, cookie-free analytics are introduced in future, this policy will be updated first. Your browser may store small technical preferences (for example, font files) that are necessary for the site to work.

9. Contact & changes

Questions about this policy can be sent to info@rubycuppingservices.co.uk. We may update this policy from time to time; the date at the top of the page shows when it was last revised. See also our Terms & Conditions.