Privacy and cookie policy

Controller

Manual Therapies · Strandhaven 111 · 2665 Vallensbæk Strand · CVR 43897470 · phone +45 31 70 44 50 · hello@manualtherapies.dk · panikami@gmail.com.

Data we process

For bookings we process name, email, phone, selected treatments, therapist, appointment time, payment or gift card status, and appointment messages. Gift card and series orders include buyer and recipient details. Physical goods orders may include delivery address and order details. Health information supplied in a questionnaire or to a therapist is processed only where a valid legal basis and exception for sensitive data apply. Do not put health information in general free-text fields.

Purposes and legal basis

We use data to perform contracts, manage bookings, deliver goods and gifts, send necessary confirmations and reminders, keep accounts and respond to enquiries. Legal bases include performance of a contract, legal obligations and, where applicable, our legitimate interest in secure operation. Newsletters and optional marketing require a separate lawful basis or consent.

Access and processors

Administrators can see contact details and clinic-wide finances. Therapists see only their own appointments, client names and relevant treatment information; they can message clients through the system without seeing phone numbers or email addresses. Data is stored on the clinic’s Hostinger server. Hostinger SMTP handles email and txty.dk (https://txty.dk/) handles SMS. We arrange necessary processor agreements and share data only for these purposes or as required by law.

SMS provider

We use txty.dk (https://txty.dk/) for SMS about bookings, changes, cancellations and enabled reminders, as well as other SMS messages you have chosen to receive. When a message is sent, the recipient’s phone number, message content and delivery information are processed through txty.dk. We send only information needed for the message; health notes and questionnaire answers are not included in SMS messages.

Online payment with Flatpay / Frisbii

For online payments, necessary order and payment information is sent to Flatpay / Frisbii, including the payer’s name, email, amount, currency and an order reference. Card details are entered directly in the provider’s secure payment form. Manual Therapies stores the transaction reference and payment status, but not full card numbers or security codes. The payment provider also processes information under its own terms and legal obligations. See the provider’s privacy policy at flatpay.com and frisbii.com.

Security and retention

We use role-based access, encrypted transport, protected integration keys and backups. We keep data as needed for contracts, relevant treatment records, accounting and legal claims. Retention varies by data type and legal requirement; data is erased or anonymized when no longer needed.

Cookies and measurement

Necessary features work without analytics or marketing consent. On your first visit you can reject optional cookies, accept all or choose categories. Analytics and marketing are off by default. Change or withdraw your choice through Cookie settings in the footer. Declining does not prevent access to treatments or booking. After consent, Google Analytics 4 may use _ga and _ga_* to distinguish visits and measure general page views and booking steps.

We configure new Analytics cookies for a maximum of 180 days. The provider is Google Ireland Limited. Technical data may include IP address, browser, device details and visited pages. Our events do not send client names, contact details, notes or questionnaire answers. Google Ads results are read separately from the clinic’s advertising account. After consent, Meta Pixel from Meta Platforms Ireland Limited measures visits and booking events. _fbp and, where applicable, _fbc may be stored for up to 90 days.

Manual Therapies uses mt_campaign_touch_v1 for up to 30 days to remember recognised Meta or Google campaign parameters and associate a booking with a campaign. Unknown sources are not assigned to campaigns. Analytics and campaign measurement require the corresponding choices.

Your rights

Where applicable, you may request access, correction, erasure, restriction and portability, and object to processing. You may withdraw consent without affecting earlier lawful processing. Contact hello@manualtherapies.dk or panikami@gmail.com. You can complain to the Danish Data Protection Agency at datatilsynet.dk.

Campaign measurement and marketing access

With marketing consent, we may associate a booking with recognised campaign parameters within a 30-day window. Declining consent, changing devices or missing parameters can prevent attribution. The marketing workspace shows pseudonymous booking references, appointment time, therapist, treatment, new/existing-client status and reconciliation status. The marketing person cannot access client names, emails, phone numbers, health notes or questionnaires. Pseudonymous information remains personal data. The clinic controls access and the required confidentiality and processor arrangements where the role requires them. Attribution does not automatically determine payment or commission.

International transfers and provider roles

Hostinger supplies hosting and email; txty.dk (https://txty.dk/) is used for service SMS. Google and Meta receive optional measurement only after the relevant consent. Their international operations may involve processing outside the EU/EEA. Where this happens, a valid transfer mechanism is required, such as a current adequacy decision or standard contractual clauses with appropriate supplementary measures. Contact us for details of the processing and the applicable basis.

Saved booking drafts

When you press Continue after your contact details, we save an encrypted booking draft to let you continue later. It is automatically deleted 7 days after the latest save. It does not reserve a time; availability and current prices are checked again. Only administrators can view contact details; marketing receives aggregate counts without personal information. We do not send automatic emails or SMS about the draft.

Delivery addresses and Google Maps

For delivery we process the delivery recipient’s name, address, phone number and delivery instructions. Necessary details are shared with the person delivering the gift. When you request an automatic same-day delivery quote, the street, house number, postcode and town are sent to Google Maps (Geocoding API and Routes API) to verify the address and calculate the route. Names, phone numbers, treatment names and personal wishes are not sent to Maps. The Maps key is stored only on the server. Google privacy policy: https://policies.google.com/privacy.