Privacy Policy

1. Who We Are

Vento Wellness Ltd ("Vento," "we," "us") provides chair massage, Office Reset sessions, Hatha yoga, and sound bath healing across London. Our registered contact email is jennifer@ventowellness.com. This policy covers our website ventowellness.com and the Vento Wellness app for iPhone and Android. Our services are for businesses and are not directed at children under 18.

2. Information We Collect

We may collect the following personal data when you enquire about or book our services:

• Contact details , name, email address, phone number, office postcode.
• Company information , company name, company size, role.
• Service preferences , programmes of interest, scheduling requirements, health-relevant notes you choose to share.
• Technical data . IP address and browser type, recorded automatically in server logs when you use our website. We do not use analytics or advertising tracking tools.
• Payment and billing details , billing contact name, email address, company name, billing address and VAT number where provided. Card payments are handled by Stripe; we never see or store your full card details.
• Account and sign-in details , clients, therapists and staff can create an account with an email address and password, or sign in with Google or Apple, in which case we receive your name and email address from that provider.
• Booking schedule details , for chair massage bookings, the names of colleagues and any notes the client or our team add to the day's schedule (for example "Massage 3, Sam, prefers light pressure"). Only the client, the Vento team and the therapist assigned to that booking can see them.
• Therapist details , for therapists who apply to work with us: contact and address details, qualifications, insurance, Right to Work information, bank details for payment, and availability.

3. How We Use Your Information

• To respond to your enquiries and provide quotes.
• To deliver, schedule, and manage our wellness services.
• To send service-related communications (confirmations, reminders, follow-ups).
• To take payments and issue invoices and receipts.
• To maintain, secure, and improve our website.
• To comply with legal and regulatory obligations.

We will never sell your personal data to third parties.

4. Legal Basis for Processing

We process your personal data under one or more of the following bases as defined by the UK General Data Protection Regulation (UK GDPR):

• Consent , when you submit an enquiry form or contact us directly.
• Contractual necessity , to fulfil a booking or service agreement.
• Legitimate interest , to improve our services and website experience.

5. Data Sharing

We share limited data with trusted service providers who help us run Vento: Supabase (database, file storage and sign-in), Cloudflare (website hosting), Resend (email delivery), Apple and Google (app distribution and optional sign-in) and Stripe (payments, see below). When a therapist is assigned to your booking they see the booking details they need on the day, including the address, on-site contact and the schedule. All third parties are required to handle your data in accordance with applicable data protection law. We do not transfer personal data outside the UK/EEA without adequate safeguards.

Card payments and invoices are processed by Stripe. Vento does not store card details. To take payment and issue invoices we share billing contact details (name, email address, company name and billing address) and, where provided, your VAT number with Stripe. Stripe processes some of this data on our behalf and acts as an independent controller for other purposes, such as fraud prevention and meeting its own regulatory obligations; see Stripe's privacy policy at stripe.com/privacy.

You may choose to sign in with Google or Apple. If you do, we receive your name and email address from that provider in order to create and secure your account; we do not receive your password.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described above, or as required by law. Enquiry data is typically retained for up to 24 months after your last interaction with us. Booking records and invoices are kept for 6 years because UK accounting law requires it.

7. Your Rights

Under the UK GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Object to or restrict processing.
• Data portability.
• Withdraw consent at any time.

To exercise any of these rights, please contact us at jennifer@ventowellness.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

8. Cookies & Local Storage

Our website uses only essential cookies and browser storage, to keep therapists and staff signed in, to remember your language preference, and to complete a booking. We do not use analytics or advertising cookies. If you pay online you are redirected to Stripe's secure checkout page, which sets its own cookies for payment security and fraud prevention. You can manage cookies and site data through your browser settings.

9. Our App

The Vento Wellness app lets clients see their bookings, pay and set the day's schedule, and lets therapists see their bookings, availability and profile. The app keeps you signed in by storing a session token securely on your device. It does not use advertising identifiers, analytics or tracking, does not access your location, contacts or photos, and does not send push notifications. Card payments open Stripe's secure checkout in your browser.

10. Deleting Your Account

You can delete your account at any time: in the app, open Profile and tap Delete account; on the website, sign in and go to ventowellness.com/account/delete; or email jennifer@ventowellness.com and we will do it for you within 30 days. When you delete your account:

• Your login is removed and you can no longer sign in to Vento.
• Therapists: your profile, contact and bank details, documents, photo, availability and upcoming booking assignments are deleted.
• Clients: your login is unlinked from your company details and you lose access to your bookings online.

We keep past booking records and invoices, with names only, for 6 years because UK accounting law requires it. If you use the same login for another Pinkwhale Studio app, that app's account is not affected.

Questions about privacy, bookings, insurance, or these Terms? Email jennifer@ventowellness.com.