Legal

Privacy Policy

Last updated 8 September 2026

This policy explains what we do with your personal information when you contact us or use this website. We have tried to write it in plain English rather than legal language. If anything is unclear, please ask and we will explain it.

We take discretion seriously. Given the nature of our work, we understand that privacy matters to our clients more than most, and we have kept the amount of information we collect to the minimum we need.

Who we are

Tantric Massage London operates this website and is the data controller for the information described here. That means we decide what personal information is collected and what happens to it.

You can reach us at:

The information we collect

When you contact us. If you use the enquiry form, we receive your name, your email address, your telephone number if you choose to give one, and whatever you write in the message. If you call, text or message us on WhatsApp, we hold your number and the content of that conversation. If you email us, we hold your email address and the content of your email.

When you make a booking. We note the date and time of your appointment and anything you have told us that is relevant to the session, such as a preference for a particular therapist. We do not ask for health information. If you volunteer something about your health, treat it as your choice to do so, and we will keep it only as long as it is useful to you.

When you visit this website. Our hosting provider records technical information automatically, including your IP address, the type of browser and device you are using, and the pages you request. This happens on any website and is necessary to deliver pages and to defend against attacks.

We do not collect anything else. There is no account to create, no newsletter, no advertising network, and no profiling. We do not buy personal information from anyone, and we never sell yours.

UK data protection law requires us to have a specific reason for using your information. Ours are as follows.

To answer your enquiry and arrange your appointment. Our basis is that you have asked us to, which the law treats as steps taken at your request before entering a contract, and afterwards as performance of that contract.

To keep the website working and secure. Our basis is legitimate interests. We have a genuine interest in the site staying online and resisting abuse, this cannot be achieved without processing technical data, and it has minimal impact on you.

To understand how the website is used. Our basis is your consent, which you give through the cookie banner or the controls further down this page. You can withdraw it at any time and nothing is recorded once you do.

To meet legal obligations. Occasionally we may have to keep or disclose information because the law requires it.

Cookies

A cookie is a small file a website stores on your device. This site uses very few, and the analytics ones only run if you say yes.

Strictly necessary

These are set by Cloudflare, who deliver and protect this website. They are used to tell genuine visitors apart from automated traffic. Under the Privacy and Electronic Communications Regulations these are exempt from consent, because the site cannot be provided reliably without them. They carry no advertising function and are not used to identify you personally.

Statistics, only with your permission

If you agree, we use Google Analytics to count visits and see which pages people read. It tells us which services interest people and where the site is confusing. It does not tell us who you are, and we have configured it so that no advertising or personalisation features are enabled.

Until you accept, these do not run at all. We use Google’s consent mode, which means analytics starts in a denied state on every page and only activates once you have opted in.

Every cookie in both categories is listed in full at the end of this page, with its provider, purpose and lifetime.

Changing your mind

Use the cookie settings on this page at any time, or the small icon in the bottom corner of every page. Your choice is remembered on the device you are using, so if you use another browser or clear your browsing data you will be asked again. You can also block or delete cookies in your browser settings, though blocking the strictly necessary ones may stop parts of the site working.

Who else sees your information

We keep the list of third parties short and deliberately boring.

Cloudflare hosts this website and delivers the enquiry form to our inbox. They act on our instructions as our processor.

Google, if and only if you have agreed to analytics, receives the usage data described above as our processor.

Our email provider holds the messages you send us, in the same way any email provider does.

We do not share your information with advertisers, data brokers or anyone else for marketing. We would only disclose it beyond the above if the law obliged us to, or to establish or defend a legal claim.

Information sent outside the UK

Cloudflare and Google are United States companies and your information may be processed outside the UK. Where that happens, the transfer is covered by the safeguards UK law requires, which in practice means the UK extension to the EU Standard Contractual Clauses, or the UK’s adequacy regulations for the EU and for the US Data Privacy Framework. You are entitled to ask us for details of the safeguards that apply.

How long we keep it

We keep enquiries and booking correspondence for as long as we are dealing with you and for up to two years afterwards, so that we can pick up where we left off if you return. After that we delete it.

Website analytics, where you have consented, is retained by Google for 14 months and then deleted automatically.

Security logs held by Cloudflare are kept for a short period only, typically days rather than months.

If you ask us to delete your information sooner, we will, unless we are required to keep it.

Keeping your information safe

The website is served entirely over an encrypted connection. Enquiries are sent directly to our own mailbox and are not stored in a database on this website, because a database we do not have is a database nobody can breach. Access to our email is limited to the people who need it. We do not keep client records on paper.

No system is perfect, and we will tell you and the Information Commissioner promptly if something goes wrong in a way that is likely to affect you.

Your rights

Under UK GDPR you have the right to:

  • ask what personal information we hold about you and get a copy
  • have inaccurate information corrected
  • have your information deleted
  • ask us to restrict what we do with it
  • object to processing we carry out on the basis of legitimate interests
  • receive information you gave us in a portable format
  • withdraw consent at any time, which for analytics you can do on this page

Exercising these rights is free, and we will respond within one month. Just email or call us. We may ask a question or two to check we are speaking to the right person, which protects you rather than us.

Complaints

If you are unhappy with how we have handled your information, please tell us first and we will try to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK regulator:

  • Website: ico.org.uk/make-a-complaint
  • Helpline: 0303 123 1113
  • Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF

Age

Our services and this website are intended for adults aged 18 and over. We do not knowingly collect information about anyone under 18. If you believe a minor has contacted us, please let us know and we will delete the information.

Changes

If we change this policy we will update the date at the top and, where the change is significant, ask for your cookie choice again. This version is dated 8 September 2026.