Privacy policy
Last updated: October 2026
Who is responsible
Moonga Massage Therapy, Block Factory, New Aplaku Road, near West Hills Mall, Accra, Ghana, represented by its CEO Ann-Marian A.B Toku, is responsible for your personal data. We follow the Ghana Data Protection Act, 2012 (Act 843) and the principles of the EU General Data Protection Regulation (GDPR).
What we collect
When you book: your name, phone, email, chosen treatment, date and time, and any note you add.
In the client intake form: address, date of birth, emergency contact, occupation, how you heard of us, previous massage experience, medication, exercise habits, health conditions, reason for the visit, areas of discomfort and your typed consent. Health information is a special category of data and is treated with extra care.
Why we use it
Only to prepare a safe, adapted treatment, to manage your appointment and to contact you or your emergency contact if needed. The legal basis is your explicit consent, given when you tick the consent box and sign the form, and the performance of the service you request.
We never sell your data, never use it for advertising, and never share it with third parties except where the law requires it.
How we store and protect it
- Data is stored in a secure, encrypted cloud database.
- Only the owner of Moonga, signed in with her personal account, can read appointments and intake forms. Visitors and other users cannot access them.
- Your intake form is sent over an encrypted connection and is not written into technical logs.
- If you choose to send your booking summary by WhatsApp, that message is also handled by WhatsApp under its own end-to-end encryption and privacy terms.
How long we keep it
We keep your intake form as long as you are a client, and delete it at the latest 3 years after your last visit, unless you ask us to delete it sooner.
Your rights
You can at any time ask to access, correct, export or delete your data, or withdraw your consent (this does not affect past treatments). You may also lodge a complaint with the Data Protection Commission of Ghana or, if you live in the EU, with your local data protection authority.
To exercise your rights, contact us by WhatsApp or phone using the details on our home page. We reply within 30 days.