La Rosa Blanca

La Rosa Blanca is a wellness studio and trading name of Volt and Vector Limited, a UK-registered limited company (Company No. SC877769). Volt & Vector Limited is the data controller responsible for the collection and processing of personal data in accordance with the UK General Data Protection Regulation (UK GDPR).

Who We Are

La Rosa Blanca

5 St. Vincent Place
St. George’s Building
Glasgow G1 2DH

📞 0141 611 3255 / 07472 470108

📧 larosablancastudio@gmail.com

Operated by Volt & Vector Limited

What Information We Collect

We may collect and process the following personal information:

• Contact Details: Name, email address, and phone number.

• Booking History: Appointment details and services booked (e.g., Yoga, Reiki, Sound Healing, Massage, or Readings).

• Health & Wellbeing Data: Information provided via our client intake form, including medical conditions, injuries, or contraindications relevant to your safe participation in our services.

• Communications: Any emails, phone calls, or messages sent to us.

• Payment Details: Processed securely via third-party providers (Fresha/Stripe). La Rosa Blanca and Volt and Vector Limited do not store card or payment information.

How Your Information Is Collected

Your information may be collected when you:

• Make a booking through Fresha.

• Contact us directly by email, phone, or social media.

• Complete a client intake form via Google Forms.

• Attend a session, class, or reading at the studio.

Why We Collect Your Information

Your data is collected to:

• Manage bookings and appointments.

• Communicate with you regarding sessions or changes.

• Provide services safely and appropriately (especially regarding contraindications for Sound Healing and Indian Head Massage).

• Understand relevant health information for your wellbeing.

• Meet legal, insurance, and professional obligations.

Special Category Data: Health information is treated as sensitive personal data. We process this under the lawful basis of "provision of health or social care" and your explicit consent provided on the intake form.

How Your Information Is Stored & Protected

Your data is stored securely using:

• Password-protected booking software (Fresha).

• Secure Google Forms and Google Drive access with Two-Factor Authentication (2FA).

• Password-protected devices.

Only the business owner has authorised access to client records. We take all reasonable measures to protect your information from unauthorised access.

Sharing Your Information

Your personal data is shared only where necessary, including with:

• Fresha (booking and client management system).

• Google Forms / Google Drive (client intake information).

• Payment processors used by Fresha.

• Regulatory or Legal Bodies if required by law or for insurance purposes.

Your information is never sold, rented, or shared with third parties for marketing purposes.

How Long Your Information Is Kept

Client records are retained for as long as necessary to meet legal, insurance, and professional obligations. In the UK, health and client records are typically kept for 7 years (to comply with insurance requirements for physical therapies), after which they are securely deleted.

Your Rights

Under UK GDPR, you have the right to:

• Request access to the personal data held about you.

• Request correction of inaccurate or incomplete information.

• Request deletion of your data where legally possible.

• Withdraw consent for data processing at any time.

Requests can be made by contacting us using the details above. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you have concerns about our data practices.

Cookies & Website Use

Our website may use basic cookies or analytics tools to understand website usage and improve user experience. You can adjust your browser settings to refuse cookies if you prefer.

Changes to This Policy

This Privacy Policy may be updated from time to time to reflect changes in our services or legal requirements.