Privacy Policy
Last updated: 2026-07-15
Data controller: Mr. M. Massage, Modestas Dirsė, Individualios veiklos pažyma Nr. 1289144, address Verkių g. 1, Vilnius, 08218 Vilniaus m. sav.. For personal data questions, contact info@mrmmassage.lt.
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Creating and managing bookings | Name, phone, email, service, time | Performance of contract | With an account – until deletion; guest bookings – up to 24 months after the visit; payment-related records – 10 years (accounting) |
| Accounting and payments | Payment and invoice information | Legal obligation | 10 years (accounting law) |
| Gift cards and packages | Code, balance, validity, buyer/recipient data | Contract / legal obligation | While valid + the accounting period (10 years) |
| Health information (optional) | Health-related details you voluntarily enter in the notes | Explicit consent (GDPR Art. 9) | Kept with the booking; deleted on request or with the booking history. Consent can be withdrawn at any time |
| Marketing consent and opt-outs | Email, consent/opt-out timestamp | Consent (marketing emails); opt-out record – legitimate interest | Until withdrawn; the opt-out record is kept so we do not email again |
| Account management | Email, account IDs, session | Performance of contract | Until account deletion |
| Appointment reminders | Contact and booking data | Contract / legitimate interest | Until booking history is deleted |
| Security and fraud prevention | IP, technical logs | Legitimate interest | up to 90 days |
| Analytics | Cookie identifiers, usage data | Consent | Per analytics configuration (up to 24 months) |
We process only the data needed for booking, payment, client account, invoices, reminders, calendar invites and client service: name, phone number, email address, selected service, date, time, payment method, booking number, account information and notes you provide.
Data is processed to complete the booking and service, comply with accounting and legal obligations, respond to your requests and, where applicable, based on your consent for analytics cookies.
Payments are processed through Stripe. This website does not store full card details.
Bookings and availability use Google Calendar, client account and booking data use Supabase, payments use Stripe, emails and calendar invites use an email service provider, website hosting uses Hostinger, the map uses OpenStreetMap, and analytics use Google Analytics (only after consent).
Data is used to confirm bookings, send reminders, handle cancellations, refund requests, invoices, review requests and client support.
For package purchases, we store information about the purchased package, used and remaining visits and expiry date.
Cookies: necessary cookies and browser local storage are used for language, cookie choices, account session, booking functionality and website security. Analytics cookies are used only after your consent.
If you accept analytics, the site uses the Google Analytics measurement ID. You can change your choice by opening cookie settings in the website footer, clearing browser site data or contacting info@mrmmassage.lt.
Data requests: you can ask to access, correct or delete your account and booking data when there is no legal basis to keep it. For security, we may ask you to confirm your identity before changes are made.
Booking and invoice data is kept only as long as needed to provide the service, accounting, client service and legal requirements. When data is no longer needed or there is no legal basis to keep it, it is deleted or anonymised.
You may request access to your data, correction, deletion, restriction of processing, objection to processing, withdrawal of analytics cookie consent and, where applicable, a copy of your data.
For access, correction, restriction or deletion requests, contact: info@mrmmassage.lt. If you believe your data is handled incorrectly, you may also contact the Lithuanian State Data Protection Inspectorate.