Privacy Policy

Effective Date: 15/04/2025

CityLux Ltd (“CityLux”, “we”, “us”, or “our”) is committed to protecting the privacy and security of our clients, therapists, partners, and website users. This Privacy Policy outlines how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR).


1. Who We Are

CityLux Ltd

Company Number: 09658595

Registered Office: 3rd Floor Suite, 207 Regent Street, London, W1B 3HH

Contact Email: [email protected]


2. Information We Collect

We may collect and process the following types of personal data:

Clients:

•Full name, contact details (email, phone number)

•Booking history and preferences

•Address/location of appointment

•Payment method (via third-party processor – we do not store card details)

Therapists (Freelancers):

•Full name, contact and address details

•Proof of ID and qualifications

•UTR and NI number

•Right to work documents

•Insurance details

•Availability and booking records

Website Users:

•IP address, browser type, pages visited

•Contact form entries


3. How We Use Your Data

We use your data to:

•Fulfil your bookings and manage appointments

•Provide support and communication about services

•Match clients with therapists based on preferences and availability

•Comply with legal and tax obligations

•Improve our website and customer experience


4. Legal Basis for Processing

We process personal data under one or more of the following lawful bases:

Consent – when you voluntarily provide data (e.g., contact form)

Contractual necessity – to fulfil your booking or onboarding

Legal obligation – for tax, accounting, or compliance

Legitimate interests – such as service improvements and fraud prevention


5. Sharing Your Data

We do not sell your data. We may share data with:

•Freelance therapists you’ve booked (limited to what they need)

•IT and software providers (e.g., booking system, cloud storage)

•Legal, tax, or regulatory authorities if required

All third-party processors are GDPR-compliant and subject to confidentiality obligations.


6. Data Retention

Clients: Booking and contact records are kept for 6 years for legal/accounting purposes

Therapists: Records are retained during the contract term and for 6 years thereafter

Website visitors: Analytics data is anonymised and retained for 26 months


7. Your Rights

You have the right to:

•Access the personal data we hold about you

•Correct inaccuracies

•Request erasure (in some cases)

•Restrict or object to certain processing

•Data portability (where applicable)

•Withdraw consent (if that was the lawful basis)

To exercise any of these rights, please contact: [email protected]


8. Security

We implement appropriate technical and organisational measures to protect your data, including:

•Encrypted communication via SSL

•Restricted access to data

•Secure cloud infrastructure


9. Cookies & Tracking

Our website may use cookies and analytics tools to improve performance. You can control or disable cookies via your browser settings.


10. Third-Party Links

Our website may link to other sites. We are not responsible for their content or privacy practices. Always read the privacy policy of any site you visit.


11. Changes to This Policy

We may update this Privacy Policy periodically. The latest version will always be posted on our website with the “Effective Date” noted above.


12. Contact Us

If you have questions about this policy or how your data is handled, contact:

Data Protection Officer

CityLux Ltd

[email protected]

You also have the right to file a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.