Privacy Policy
 

1. About This Privacy Notice

This Privacy Notice explains how MONTY collects, uses, stores and shares personal information.

It applies when you:

• Visit the MONTY website;

• Contact MONTY;

• Create a website or member account;

• Purchase a membership, plan, pass or digital product;

• Book or attend a class, appointment, workshop, event or retreat;

• Complete a health, participation or consultation form;

• Access online programmes, videos, resources or live sessions;

• Receive massage, bodywork or one-to-one support;

• Take part in a workplace, community or collaborative service; or

• Otherwise interact with MONTY.

This Notice should be read alongside the MONTY Cookie Policy, Terms & Conditions and Health & Participation Disclaimer.
 

2. Who Is Responsible for Your Information?

MONTY is operated by Justine Montgomery, trading as MONTY.

For data-protection purposes, Justine Montgomery trading as MONTY is the data controller for the personal information described in this Notice.

Website: https://www.montypractice.com
Email: themontypractice@gmail.com

References to “MONTY”, “we”, “us” or “our” mean Justine Montgomery trading as MONTY.
 

3. Information MONTY May Collect

The information collected will depend on how you interact with MONTY.

Identity and contact information

This may include:

• Your name;

• Email address;

• Telephone number;

• Date of birth;

• Website member details;

• Emergency-contact details; and

• Any contact preferences you provide.

Booking, purchase and membership information

This may include:

• Services booked or purchased;

• Membership plan and status;

• Programme enrolment;

• Class, event or appointment attendance;

• Passes, credits and transfers;

• Booking history;

• Cancellation information;

• Payment status;

• Purchase dates and amounts;

• Member-account activity; and

• Communications relating to your booking or membership.

Payment information

Payments may be processed through Wix and connected payment providers.

MONTY may receive information such as:

• Payment status;

• Transaction amount;

• Transaction date;

• Payment-provider reference;

• Refund information; and

• Limited billing details.

MONTY does not normally receive or store your complete debit or credit card details.

Health and participation information

Where relevant to safe and appropriate participation, MONTY may collect information about:

• Current or previous injuries;

• Health conditions and diagnoses;

• Pain or physical limitations;

• Recent surgery, procedures or hospital treatment;

• Pregnancy or postnatal recovery;

• Medication;

• Medical advice or activity restrictions;

• Dizziness, fainting, balance or breathing concerns;

• Joint instability or hypermobility;

• Neurological or sensory considerations;

• Allergies and sensitivities;

• Movement or positioning requirements;

• Accessibility requirements;

• Hands-on assistance preferences; and

• Other information you choose to provide about your health or participation.

Health information is special-category personal data and receives additional legal protection.

MONTY does not require you to provide an entire medical history. Please provide only information that is relevant to the service and your safe participation.

One-to-one, massage and bodywork information

Where you attend an individual appointment, MONTY may also keep:

• Consultation information;

• The reason for your appointment;

• Relevant symptoms and areas of concern;

• Treatment preferences;

• Areas discussed or worked with;

• Positioning and pressure preferences;

• Consent and boundary information;

• Brief session notes;

• Aftercare information; and

• Relevant changes discussed at later appointments.

These records are not medical records and do not contain a medical diagnosis unless you have chosen to disclose one.

Accessibility information

You may provide information about a practical barrier or adjustment that would help you access a MONTY service.

You are not normally required to disclose a diagnosis where the adjustment you need can be understood without one.

Communication information

This may include:

• Emails;

• Contact-form submissions;

• Messages;

• Booking enquiries;

• Feedback;

• Complaints;

• Survey responses;

• Requests for support;

• Social-media correspondence; and

• Communications with businesses, venues or collaborators.

Images, recordings and testimonials

Where separate permission has been obtained, MONTY may collect or use:

• Photographs;

• Video recordings;

• Audio recordings;

• Testimonials;

• Reviews;

• Feedback; and

• Participant stories.

Website and technical information

When you use the website, Wix and connected services may collect:

• IP address;

• Browser and device information;

• Approximate location derived from your connection;

• Website pages visited;

• Login and account activity;

• Time and date of visits;

• Referral source;

• Cookie choices;

• Interactions with website features; and

• Analytics information.

More information is available in the MONTY Cookie Policy.

Business and collaboration information

Where you represent another business, venue, charity, employer or organisation, MONTY may collect:

• Your name;

• Role or job title;

• Organisation;

• Business contact details;

• Contract and event information;

• Invoices;

• Booking arrangements; and

• Professional correspondence.
   

4. How Information Is Collected

MONTY may collect information:

• Directly from you;

• Through the MONTY website;

• Through Wix Forms, Bookings, Pricing Plans and member features;

• When you purchase, book or create an account;

• Through health and consultation forms;

• By email, contact form or social media;

• During a class, appointment, event or consultation;

• From an employer, venue, charity, organiser or partner that arranged a service;

• From a parent or guardian where participation by someone under 18 has been agreed;

• From another person making a booking on your behalf;

• From cookies and similar technologies; or

• From a collaborator where sharing is necessary and lawful.

Where information is provided by another person or organisation, MONTY will use only what is reasonably necessary for the relevant purpose.
 

5. Why MONTY Uses Personal Information

MONTY may use personal information to:

• Respond to questions and enquiries;

• Process bookings, purchases and payments;

• Create and manage website accounts;

• Provide online memberships and digital content;

• Enrol members in programmes;

• Deliver classes, appointments, workshops, events and retreats;

• Send booking confirmations and joining instructions;

• Communicate timetable, venue or service changes;

• Manage cancellations, credits, refunds and failed payments;

• Support safe and appropriate participation;

• Consider reasonable access adjustments;

• Maintain consultation and bodywork records;

• Contact an emergency contact where genuinely necessary;

• Manage customer service and complaints;

• Protect members, participants and the website;

• Prevent fraud, misuse or unauthorised account sharing;

• Maintain appropriate insurance and professional records;

• Meet tax, accounting and legal obligations;

• Manage collaborators, venues and organisational clients;

• Improve MONTY services and website content;

• Send marketing where permitted; and

• Establish, exercise or defend legal claims.
   

6. Lawful Bases for Using Personal Information

MONTY must have a lawful reason for using personal information.

Depending on the circumstances, MONTY may rely on the following lawful bases.

Contract

Information may be used where necessary to:

• Process a purchase or booking;

• Provide a membership;

• Deliver a service;

• Manage an account;

• Communicate essential service information; or

• Meet another agreement with you.

Without this information, MONTY may be unable to provide the service you have requested.

Legal obligation

Information may be used where necessary to comply with:

• Tax and accounting requirements;

• Consumer law;

• Data-protection law;

• Court orders;

• Safeguarding or reporting obligations; or

• Other applicable legal requirements.

Legitimate interests

MONTY may use information where reasonably necessary for legitimate business interests, including:

• Responding to enquiries;

• Administering bookings and services;

• Maintaining proportionate safety and attendance records;

• Protecting the website and digital content;

• Preventing fraud and account misuse;

• Improving services;

• Managing business relationships;

• Handling complaints; and

• Protecting or defending legal rights.

Before relying on legitimate interests, MONTY will consider whether the use is necessary and whether your rights and interests outweigh the business interest.

Consent

Consent may be used for:

• Optional marketing;

• Promotional photographs and recordings;

• Testimonials or participant stories;

• Certain optional communications; and

• The use of health information where explicit consent is the appropriate special-category condition.

You may withdraw consent at any time by emailing themontypractice@gmail.com

Withdrawing consent does not make earlier lawful use of the information invalid.

Vital interests

In a genuine emergency, MONTY may use or share information where reasonably necessary to protect your life or another person’s life.
 

7. Health and Special-Category Information

Health information is treated with additional care.

When MONTY collects health information, it will identify:

• An ordinary lawful basis under UK data-protection law; and

• An additional condition permitting the use of special-category data.

For health and participation forms, MONTY will normally rely on your explicit consent as the additional special-category condition.

Health information will be used only where reasonably relevant to:

• Understand factors that may affect participation;

• Discuss appropriate options or practical adjustments;

• Decide whether a service is within MONTY’s scope;

• Maintain proportionate consultation and bodywork records;

• Respond to an emergency; or

• Establish, exercise or defend a legal claim.

You can withdraw explicit consent for future use by contacting MONTY.

However, if relevant health information cannot be used, MONTY may be unable to provide a class, appointment or other service safely.

Withdrawal does not necessarily require MONTY to delete information that must lawfully be retained for insurance, legal or record-keeping purposes.

Health information will not be used to target advertising or sold to another organisation.
 

8. Emergency Contacts

Where you provide an emergency contact, you should make them aware that:

• You have supplied their name and contact details to MONTY; and

• MONTY may contact them if reasonably necessary in an emergency.

Emergency-contact information will not be used for marketing.
 

9. Workplace, Community and Organisational Services

Where a business, employer, charity, venue or other organisation arranges a MONTY service, it may provide limited information such as:

• Participant names;

• Work contact information;

• Attendance details;

• Access requirements; or

• Relevant event arrangements.

MONTY will not normally share detailed health information with an employer or organiser without your permission.

MONTY may provide an organiser with:

• General attendance information;

• Practical booking information;

• Anonymised or combined feedback; or

• Information necessary to manage a health or safety incident.

Where an organisation is independently responsible for information it collects, its own privacy notice will also apply.
 

10. Collaborators, Guest Practitioners and Venues

MONTY may work with independent venues, practitioners, teachers, facilitators, caterers, retreat providers, charities, employers and other organisations.

Where reasonably necessary, MONTY may share limited information such as:

• Your name;

• Booking status;

• Dietary information;

• Access requirements;

• Emergency information; or

• Information needed to deliver the agreed service.

Only information reasonably necessary for the relevant purpose will be shared.

Where a collaborator independently determines how they use personal information, they will be a separate data controller and may provide their own privacy notice.

MONTY is not responsible for the independent data-protection practices of another controller.
 

11. Who Information May Be Shared With

Where necessary and lawful, information may be shared with:

• Wix;

• Payment processors;

• Website, booking and form providers;

• Video-hosting and video-conferencing platforms;

• Email and communication providers;

• Cloud-storage and software providers;

• Accountants and bookkeepers;

• Insurers;

• Professional, legal or technical advisers;

• Venues and event providers;

• Collaborators and guest practitioners;

• Employers, charities or organisers that purchased a service;

• Emergency services;

• Government, tax or regulatory authorities;

• Courts or law-enforcement bodies; and

• Another party where required to establish, exercise or defend legal rights.

Service providers acting on MONTY’s instructions are expected to use information only for the agreed service and to apply appropriate safeguards.

MONTY does not sell personal information.
 

12. Third-Party Platforms and Links

The website and services may use or link to third-party platforms, including:

• Wix;

• Payment providers;

• Video players;

• Video-conferencing platforms;

• Spotify;

• YouTube;

• Instagram;

• Social-media platforms; and

• Other booking, community or communication services.

Those platforms may collect information directly from you and process it under their own privacy notices.

MONTY does not control every aspect of an independent platform’s data use.
 

13. International Data Transfers

Some technology providers may store or process information outside the United Kingdom.

Where personal information is transferred internationally, MONTY will rely on the protections used by the relevant provider, which may include:

• UK adequacy regulations;

• An approved UK International Data Transfer Agreement;

• The UK Addendum to approved contractual clauses;

• Contractual and technical safeguards; or

• Another legally recognised transfer mechanism.

You may contact MONTY for further information about relevant international transfers.
 

14. Marketing

MONTY may send occasional information about:

• Classes;

• Events;

• Retreats;

• Membership content;

• New services;

• Resources; and

• Business updates.

Marketing will be sent only where there is an appropriate legal basis.

Where consent is used, the marketing option will be separate, optional and not selected in advance.

You can unsubscribe:

• By using the unsubscribe link in an email; or

• By contacting themontypractice@gmail.com.

Withdrawing from marketing does not prevent essential communications about a booking, purchase, membership, account, payment or safety matter.

MONTY will not use health information for targeted marketing.
 

15. Photographs, Recordings and Testimonials

MONTY will seek separate permission before intentionally using an identifiable photograph, recording, testimonial or personal story for promotional purposes.

Promotional consent is optional and is not required to purchase or attend a service.

You may withdraw consent for future use by emailing themontypractice@gmail.com.

Withdrawal may not affect:

• Use that occurred lawfully before consent was withdrawn;

• Material already printed or distributed; or

• Content that cannot reasonably be recalled.

MONTY will consider reasonable requests to remove digital content under its control.
 

16. Cookies and Website Analytics

The MONTY website uses cookies and similar technologies.

Essential cookies may be required for:

• Website security;

• Member login;

• Bookings;

• Checkout;

• Payments; and

• Saving cookie choices.

Non-essential analytics, functional or marketing cookies will be managed through the website’s cookie-consent system where required.

Further information is provided in the MONTY Cookie Policy.
 

17. Automated Decision-Making

MONTY does not currently use personal information to make solely automated decisions that produce legal or similarly significant effects.

Wix, payment providers or fraud-prevention services may use automated systems as part of security, payment or account processing. Their own privacy information explains how those systems operate.
 

18. Data Security

MONTY takes reasonable technical and organisational measures to protect personal information.

These may include:

• Password-protected accounts;

• Access controls;

• Secure website and payment platforms;

• Device security;

• Multi-factor authentication where available;

• Restricted access to health and consultation information;

• Secure storage;

• Careful information-sharing practices;

• Regular review of stored information; and

• Deleting or anonymising information that is no longer required.

No internet or storage system can be guaranteed completely secure.

Please avoid sending unnecessary health or sensitive information through ordinary email, social-media messages or other insecure channels.
 

19. How Long Information Is Kept

MONTY keeps personal information only for as long as reasonably necessary for the reason it was collected and to meet legal, tax, insurance and professional requirements.

General retention periods are:

Financial and transaction records

Normally retained for at least six years after the relevant financial or tax period.

Membership and booking information

Normally retained for the duration of the relationship and for up to six years afterwards where needed for accounting, contractual or legal purposes.

Health, consultation and bodywork records

Normally retained for up to seven years after the last relevant service, or longer where reasonably required by an insurer, safeguarding concern, legal claim or service involving someone under 18.

General enquiries

Enquiries that do not lead to a booking or service will normally be retained for up to two years.

Complaints and incidents

Retained for as long as reasonably necessary to investigate, respond, meet insurance requirements and protect legal rights.

Marketing information

Retained until you unsubscribe, consent is withdrawn or the information is no longer reasonably required.

Limited information may remain on a suppression list to ensure that an unsubscribe request continues to be respected.

Photographs, testimonials and promotional material

Retained while consent remains valid and the material continues to be relevant, subject to any request to withdraw consent for future use.

Website and cookie information

Retained according to the duration and settings of the relevant cookie, platform or technology provider.

Retention periods may be shortened or extended where there is a lawful and documented reason.
 

20. Your Data-Protection Rights

Depending on the circumstances, you may have the right to:

• Ask whether MONTY holds information about you;

• Request a copy of your personal information;

• Ask for inaccurate or incomplete information to be corrected;

• Ask for information to be deleted;

• Ask for processing to be restricted;

• Object to certain uses of your information;

• Receive certain information in a portable format;

• Withdraw consent;

• Object to direct marketing; and

• Raise a data-protection complaint.

These rights are not absolute. Legal, insurance, safeguarding or record-keeping exceptions may apply.

To exercise a right, email:

themontypractice@gmail.com

Please explain which right you wish to exercise and the information involved.

MONTY may request reasonable evidence of identity before releasing or changing personal information.

MONTY will normally respond within the period required by data-protection law.
 

21. Data-Protection Complaints

To raise a concern or complaint about how MONTY has collected, stored, used or shared your personal information, email:

themontypractice@gmail.com

Please use “Data Protection Complaint” in the subject line where possible and include:

• Your name;

• What you believe has happened;

• The information involved;

• Relevant dates; and

• The outcome you are seeking.

MONTY will:

• Provide a clear way for you to raise the complaint;

• Acknowledge receipt within 30 days;

• Make appropriate enquiries without undue delay;

• Keep you informed where appropriate; and

• Explain the outcome without undue delay.

You also have the right to complain to the Information Commissioner’s Office.

Details of how to contact the Information Commissioner’s Office are available through its official website.
 

22. Personal-Data Breaches

If MONTY becomes aware of a personal-data breach, it will assess:

• What information is involved;

• Who may be affected;

• The possible risks;

• What steps can reduce harm; and

• Whether the breach must be reported.

Where required by law, MONTY will notify the Information Commissioner’s Office and affected individuals.
 

23. Information About Children

MONTY’s general website, memberships and services are intended primarily for adults.

MONTY will not knowingly collect information from someone under 18 through an adult service without appropriate arrangements.

Where participation by someone under 18 has been agreed:

• A parent or legal guardian may be required to provide information and consent;

• Only information reasonably necessary for participation will be collected; and

• Additional safeguarding and retention requirements may apply.

24. Changes to This Privacy Notice

MONTY may update this Privacy Notice to reflect:

• Changes to services;

• Changes to the website or technology;

• Changes to how information is used;

• New providers or collaborations; or

• Changes to data-protection law.

The latest version will be published on the MONTY website with the updated date.

Where a change materially affects how existing information is used, MONTY will provide additional notice where reasonably required.

25. Contact MONTY

For questions about this Privacy Notice, requests concerning your personal information or data-protection complaints, contact:

Justine Montgomery trading as MONTY
Email: themontypractice@gmail.com