Privacy Policy
Effective Date: 15/04/2025
CityLux Ltd (“CityLux”, “we”, “us”, or “our”) is committed to protecting the privacy and security of our clients, therapists, partners, and website users. This Privacy Policy outlines how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR).
1. Who We Are
CityLux Ltd
Company Number: 09658595
Registered Office: 3rd Floor Suite, 207 Regent Street, London, W1B 3HH
Contact Email: [email protected]
2. Information We Collect
We may collect and process the following types of personal data:
Clients:
•Full name, contact details (email, phone number)
•Booking history and preferences
•Address/location of appointment
•Payment method (via third-party processor – we do not store card details)
Therapists (Freelancers):
•Full name, contact and address details
•Proof of ID and qualifications
•UTR and NI number
•Right to work documents
•Insurance details
•Availability and booking records
Website Users:
•IP address, browser type, pages visited
•Contact form entries
3. How We Use Your Data
We use your data to:
•Fulfil your bookings and manage appointments
•Provide support and communication about services
•Match clients with therapists based on preferences and availability
•Comply with legal and tax obligations
•Improve our website and customer experience
4. Legal Basis for Processing
We process personal data under one or more of the following lawful bases:
•Consent – when you voluntarily provide data (e.g., contact form)
•Contractual necessity – to fulfil your booking or onboarding
•Legal obligation – for tax, accounting, or compliance
•Legitimate interests – such as service improvements and fraud prevention
5. Sharing Your Data
We do not sell your data. We may share data with:
•Freelance therapists you’ve booked (limited to what they need)
•IT and software providers (e.g., booking system, cloud storage)
•Legal, tax, or regulatory authorities if required
All third-party processors are GDPR-compliant and subject to confidentiality obligations.
6. Data Retention
•Clients: Booking and contact records are kept for 6 years for legal/accounting purposes
•Therapists: Records are retained during the contract term and for 6 years thereafter
•Website visitors: Analytics data is anonymised and retained for 26 months
7. Your Rights
You have the right to:
•Access the personal data we hold about you
•Correct inaccuracies
•Request erasure (in some cases)
•Restrict or object to certain processing
•Data portability (where applicable)
•Withdraw consent (if that was the lawful basis)
To exercise any of these rights, please contact: [email protected]
8. Security
We implement appropriate technical and organisational measures to protect your data, including:
•Encrypted communication via SSL
•Restricted access to data
•Secure cloud infrastructure
9. Cookies & Tracking
Our website may use cookies and analytics tools to improve performance. You can control or disable cookies via your browser settings.
10. Third-Party Links
Our website may link to other sites. We are not responsible for their content or privacy practices. Always read the privacy policy of any site you visit.
11. Changes to This Policy
We may update this Privacy Policy periodically. The latest version will always be posted on our website with the “Effective Date” noted above.
12. Contact Us
If you have questions about this policy or how your data is handled, contact:
Data Protection Officer
CityLux Ltd
You also have the right to file a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.