Last updated: 29 September 2026
Mahila (“Mahila”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and protect personal information when you visit the Mahila website, contact us, make an appointment or use our massage and wellness services.
Mahila operates in Gozo, Malta and processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Maltese data protection legislation.
1. Who is responsible for your data?
The data controller responsible for your personal data is:
Mahila
Gozo, Malta
Email: info@mahila.eu
Phone: +356 7729 4517
If you have any questions about how your personal data is handled, you can contact us using the details above.
2. What personal data may we collect?
Depending on how you interact with Mahila, we may collect:
- your name and surname;
- telephone number;
- email address;
- appointment details;
- information you provide when contacting us through WhatsApp, email, telephone or other communication channels;
- information relating to your preferences or treatment requirements;
- payment and transaction information where relevant;
- information concerning your health, medical conditions or contraindications when you voluntarily provide such information in connection with a massage treatment;
- technical information relating to your use of our website, such as IP address, browser type and information collected through cookies where applicable.
We only collect information that is reasonably necessary for the relevant purpose.
3. Health information
Some massage treatments may require you to provide information about your health, medical conditions, injuries, pregnancy or other circumstances that may affect whether a treatment is appropriate.
Information concerning a person’s health is considered special category personal data under Article 9 of the GDPR and requires additional protection.
Where health information is collected, Mahila will process it only where there is an appropriate legal basis under applicable data protection law and only to the extent necessary for the relevant purpose.
Health information is used primarily to:
- assess whether a treatment can be provided safely;
- identify relevant contraindications;
- adapt a treatment where appropriate;
- protect the wellbeing of the client and the practitioner;
- maintain appropriate treatment records where necessary.
Please do not provide health information through the website unless it is specifically requested or necessary for arranging your treatment.
4. Why do we use your personal data?
We may use your personal data to:
- respond to enquiries;
- arrange and manage appointments;
- provide massage and wellness services;
- communicate with you about your appointment;
- process payments;
- provide and manage gift vouchers;
- maintain appropriate business and transaction records;
- comply with legal and regulatory obligations;
- protect the safety and legitimate interests of our clients and business;
- improve the website and our services where permitted by law.
5. How do we protect your information?
Mahila takes reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, misuse, alteration or disclosure.
Access to personal information is limited to what is necessary for the relevant business purpose.
6. How long do we keep your data?
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, taking into account legal, accounting, tax and business requirements.
Where information is no longer required, it will be securely deleted or otherwise disposed of where appropriate.
Health-related information will not be retained longer than necessary for the purpose for which it was collected, subject to any applicable legal requirements.
7. Sharing your information
Mahila does not sell or rent your personal data.
Your information may be shared with service providers where this is necessary to operate the business, for example providers of website hosting, email, payment processing, appointment or communication services.
Where third-party providers process personal data on our behalf, appropriate safeguards are used as required by applicable data protection law.
8. WhatsApp and other communication services
If you choose to contact Mahila through WhatsApp, your communication will also be processed by WhatsApp/Meta according to their own privacy policies and terms.
Please avoid sending sensitive health information through WhatsApp unless it is necessary and specifically requested.
9. Cookies and website technologies
The Mahila website may use cookies and similar technologies.
Some cookies may be necessary for the website to function, while others may be used for analytics, preferences or other purposes.
Where consent is required, non-essential cookies will only be used after the relevant consent has been provided.
10. Your rights
Subject to applicable law, you may have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete information;
- request deletion of your personal data;
- request restriction of processing;
- object to certain processing;
- request data portability where applicable;
- withdraw consent where processing is based on consent.
You also have the right to lodge a complaint with the Maltese Information and Data Protection Commissioner (IDPC) if you believe your personal data has not been processed lawfully.
More information about data protection rights is available from the IDPC.
11. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology or legal requirements.
The latest version will always be published on this page.
12. Contact
If you have any questions about this Privacy Policy or how Mahila handles your personal data, please contact:
Mahila
Gozo, Malta
Email: info@mahila.eu
Phone: +356 7729 4517