Your privacy matters. This page explains what data Zen Mountain Massage collects, why, and how it is protected — aligned with the EU General Data Protection Regulation (GDPR).

Data controller

Zen Mountain Massage (Zara Barnett), sole practitioner, based at Buzz Performance Gym, 14 Rte d'Avoriaz, 74110 Morzine, France. Contact: info@zenmountainmassage.com.

What we collect

Booking form: name, email, optional phone, language, requested treatment, preferred dates, message.
Technical data: hashed IP fingerprint (anti-spam), user-agent string, timestamp.
Preferences: theme (light/dark), language, cookie consent — stored locally in your browser only.

Lawful basis & purpose

Contract performance (Art. 6.1.b GDPR): handle your booking request and respond.
Legitimate interest (Art. 6.1.f): security, spam prevention, site improvement.
Consent (Art. 6.1.a): optional analytics cookies.

Retention

Booking requests are kept for 24 months after last contact, then anonymised or deleted. Technical logs are kept for 12 months maximum.

Who sees your data

We never sell your data. It lives on Supabase infrastructure (EU region) and the site host. No transfer outside the EU without appropriate safeguards.

Your rights

You can access, correct, erase, restrict, object to, or port your data. Write to info@zenmountainmassage.com to exercise these rights. You may also complain to your national data protection authority — in France, the CNIL (cnil.fr).

Cookies

See our cookies policy for the full breakdown and to manage consent at any time.