Search...
London School of Massage - Privacy Policy
London School of Massage (LSM, we, us, our) is committed to protecting personal information and processing it in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and Data Protection Act 2018.
This policy explains how we process personal information relating to our courses, educational services, website, learning platform, student communications and clinic activities.
1. Data Controller
London School of Massage is responsible for the personal information processed for the purposes described in this policy.
Address: 455 Caledonian Road, London N7 9BA
Email: info@londonschoolofmassage.co.uk
Telephone: 020 7700 3777
2. Information Collected
Depending on the relevant service, LSM may collect:
- Names, contact details and identification information
- Enrolment details, qualifications and professional experience
- Attendance, coursework, examination and assessment records
- Payment, invoice, transaction and refund information
- Communications, complaints and administrative records
- Relevant health, medical or accessibility information
- Learning platform activity, access and security records
- Photographs and video recordings
- Marketing preferences and relevant communication records
- Website usage and cookie information
Information may be collected directly from individuals or, where appropriate, from awarding organisations, payment providers and other relevant parties.
3. Purposes and Lawful Bases
LSM processes personal information where necessary for:
Course bookings and delivery: Administering enrolments, providing training, managing payments, issuing educational resources and fulfilling contractual obligations. The relevant lawful basis is normally contractual necessity.
Examinations and qualifications: Maintaining student records, administering assessments and sharing necessary information with awarding organisations. Processing may be based on contractual necessity, legal obligations or legitimate interests, as applicable.
Financial administration: Managing payments, refunds, financial records and legally recoverable amounts. Processing may be based on contractual necessity, legal obligations or legitimate interests.
Security and dispute management: Protecting learning systems, investigating misuse, handling complaints and defending legal claims. The relevant lawful basis may be legitimate interests or legal obligations.
Student and clinic safety: Assessing practical treatment suitability and maintaining necessary clinic information. The applicable lawful basis and additional special-category condition will be determined according to the specific processing activity.
Marketing and promotion: Communicating information about courses, services and events and undertaking appropriate promotional activities. Processing will rely on consent or legitimate interests where legally appropriate and will comply with applicable electronic marketing requirements.
LSM will identify and document the appropriate lawful basis before carrying out processing.
4. Medical and Special-Category Information
LSM may process relevant health information where necessary for practical training, reasonable adjustments, clinical safety or treatment administration.
Such information will be processed only where an appropriate Article 6 lawful basis and Article 9 special-category condition apply.
Access will be restricted to authorised persons with a legitimate requirement to use the information.
Medical and health information will not be used for unrelated promotional activities.
5. Photography and Video Recording
LSM may take photographs and make recordings during training for educational, website, social media and promotional purposes.
Where appropriate, LSM may rely on legitimate interests for proportionate photography or filming, following an assessment of the relevant privacy implications.
Specific permission will be obtained where required, particularly where a student is prominently featured in promotional material.
Students who do not wish to be identifiable in promotional content should notify LSM so that appropriate arrangements can be made.
Individuals retain applicable rights to object to processing or withdraw consent where consent is the lawful basis.
Requests concerning published material will be handled in accordance with applicable data protection legislation.
6. Marketing Communications
LSM may communicate with students, graduates and prospective students about its courses, training programmes and related services.
Marketing communications will be issued in accordance with applicable UK GDPR and Privacy and Electronic Communications Regulations requirements.
Where permitted, LSM may rely on the existing customer soft opt-in arrangements or appropriate consent.
Individuals may unsubscribe or object to direct marketing at any time.
Necessary course administration, payment, examination and student service communications are not optional marketing communications.
7. Sharing Information
LSM does not sell personal information.
Where reasonably necessary and lawful, information may be shared with:
- Awarding and accrediting organisations
- Examination and assessment providers
- Payment processors and financial institutions
- Website hosting and IT service providers
- Learning management and digital platform providers
- Professional advisers and insurers
- Marketing and feedback service providers
- Regulatory and legal authorities where required
Relevant information may be disclosed in responding to payment disputes, fraud concerns, regulatory enquiries or legal proceedings, subject to applicable data protection requirements.
Appropriate safeguards and contractual arrangements will be maintained where required.
8. Learning Platform and Account Security
LSM may process learning platform login records, access activity and security information for account administration, system protection, licensing compliance and prevention of unauthorised use.
Access to such information is restricted to authorised personnel and relevant service providers.
Monitoring will be proportionate, limited to legitimate purposes and conducted in accordance with applicable law.
9. Data Storage and Security
LSM takes appropriate technical and organisational measures to safeguard personal information.
These may include access controls, confidentiality arrangements, secure service providers, account security procedures and measures to protect information against unauthorised access or disclosure.
Personal information will be accessible only to individuals or organisations with an appropriate need to process it.
10. Retention of Information
LSM retains personal information only for as long as necessary for the relevant purpose, taking account of legal, regulatory, contractual, educational and legitimate business requirements.
Retention is determined according to the following criteria:
- Student enrolment and qualification records: applicable awarding-body requirements, verification needs and relevant limitation periods
- Financial records: applicable accounting, tax and regulatory requirements
- Examination and assessment information: awarding-body requirements and the need to manage appeals or disputes
- Medical and clinic records: applicable professional obligations, safeguarding needs and relevant retention guidance
- Marketing information: continuing lawful marketing eligibility, preferences and withdrawal records
- Platform security records: system security, investigation needs and applicable retention limits
- Photographs and recordings: the purpose of the material, applicable lawful basis and continuing necessity
Information will be deleted, anonymised or otherwise appropriately managed when no longer required.
11. International Transfers
Where personal information is transferred outside the United Kingdom, LSM will use an applicable lawful transfer mechanism or exception.
Where required, details of the applicable safeguards and how to obtain further information will be provided upon request.
12. Individual Rights
Depending on the circumstances and applicable law, individuals may have rights to:
- Access their personal information
- Correct inaccurate information
- Request erasure
- Restrict processing
- Object to processing
- Request data portability
- Withdraw consent where processing relies on consent
- Challenge certain automated decisions where applicable
Right to object: Individuals may object to processing based on legitimate interests. Individuals may object to direct marketing at any time, and LSM will stop processing their personal information for that purpose.
Requests can be sent to info@londonschoolofmassage.co.uk.
LSM may request reasonable verification of identity where necessary.
Requests will be handled within the timescales prescribed by applicable legislation.
13. Cookies and Website Technologies
LSM may use cookies and similar technologies for website functionality, security, account access, analytics and related purposes.
Where consent is legally required, it will be obtained before the relevant technologies are used.
Information about the cookies and technologies used, and applicable choices, will be made available through LSM's website.
14. Third-Party Services
LSM may provide links to independently operated third-party websites or services.
Individuals should review the privacy information provided by those organisations.
15. Complaints
Privacy enquiries and complaints should be directed to:
info@londonschoolofmassage.co.uk
Individuals also have the right to complain to the Information Commissioner's Office:
16. Changes to This Policy
LSM may update this Privacy Policy to reflect changes in its services, systems, operations or applicable law.
Material changes will be communicated where legally required.
The latest version will be published on LSM's website.
London School of Massage
455 Caledonian Road
London N7 9BA
Email: info@londonschoolofmassage.co.uk
Telephone: 020 7700 3777
Massage to a Higher Level.
Effective Date: 27th October 2026