Privacy Policy

Last updated: 18 October 2026.

Introduction

This privacy policy explains how the Golden Hands website handles information when you read massage and wellness pages or submit an appointment request. Golden Hands publishes descriptions of massage approaches and a form that can store a note for later review. The website is not a clinic portal, a user-account system, a shop checkout, or an advertising platform.

The policy is written to match the functions that are actually in the site. Where a detail has not been confirmed, the text says so instead of inventing a company number, a postal address, or a named software vendor. Reading this page does not create a customer relationship, and sending a request does not reserve a massage.

Please read it with the Terms & Conditions and the Cookie Policy. Those pages describe the same form and the same browser notice. If a sentence here conflicts with what the form does on screen, the on-screen behavior is the more accurate description of the current website, and this policy should be updated to match it.

Who Operates the Website

Golden Hands is the name used on this website for an independent massage and wellness studio. The published studio address is Szinyei Merse u. 6, 1063 Budapest, Hungary. You can call +36 30 123 7281 or email [email protected]. A separate legal entity name, a company registration number, and a tax identifier are not published. Opening hours are not listed.

The published address, telephone number, and email are the contact channels for privacy questions as well as appointment requests. A separate legal entity name is not published, so this policy does not add a statutory controller label beyond the name Golden Hands and the Budapest address. You can email [email protected], call +36 30 123 7281, write to Szinyei Merse u. 6, 1063 Budapest, Hungary, or use the form and say that the message is about privacy.

The published studio is in Budapest, Hungary. The site does not name a data protection officer or a supervisory-authority registration. Which privacy statute applies still depends on the facts of a request, and this page does not decide that for you.

Information Submitted Through Contact Forms

The contact page contains one form, labeled as an appointment request. It is the only form that asks you to type personal information. There is no newsletter form, no account registration, and no separate “contact us” form with a different set of fields.

If you submit the form, the browser sends the fields to a script on this website called submit-inquiry.php. The script checks that the request is a POST, ignores a hidden field that people are not asked to fill in, and checks the visible fields. When the checks pass and the server can write a file, it appends one line to a text file of requests. The page then shows a message that the request was stored for later review. That message is not an email to you, and it is not a booking confirmation.

If a check fails, the script returns an explanation and does not store the note. If the server cannot write the file, the script says that nothing was sent. In that case Golden Hands has not received the contents through this website. There is no automatic retry and no second published address to fall back on.

Appointment Request Data

The fields the script is written to accept are: your name, your email address, an optional phone number, a service of interest chosen from a fixed list, an optional preferred date, an optional preferred time of day (morning, afternoon, or evening), a message, and a checkbox confirming that you understand the form stores a request and does not reserve an appointment. A hidden field exists only to discard automated submissions that fill every box. You are not asked to type in that hidden field.

The service list is relaxation massage, Swedish massage, deep tissue massage, back and neck massage, aromatherapy massage, wellness information, or a general appointment question. The script rejects a value that is not on that list. The date, if you provide one, must be a real calendar date. It is stored as text. It is not compared with a diary of open times, because the website does not have one.

Each stored line also includes the time the server recorded the request, in UTC, and a marker that the confirmation checkbox was accepted. The script shortens overly long text. It does not ask for a password, a payment card, a government identifier, or a health diagnosis.

Please do not put diagnoses, medications, test results, or other sensitive health details in the message. The form does not need them, and it is not a secure medical record system. If you type them anyway, they will be stored with the rest of the message, because the script saves the message as written. That is a reason to leave them out, not a feature. If you are unsure whether massage is appropriate for a health condition, ask a qualified medical professional rather than using this form as a screening tool.

A preferred date and a time of day are preferences. Storing them does not mean a therapist is free, that a room is held, or that anyone has agreed to see you. The success text on the page says the same thing.

Technical Data

When your browser requests a page, the computer that serves the website may record ordinary connection data. That can include an IP address, the date and time of the request, the address of the page, a status code, and a user-agent string that identifies the browser type. Golden Hands does not operate a separate analytics product that turns those records into a profile, and this policy does not invent a retention period for host logs. The hosting provider, if one is used, is not named on this website. Whatever logs that provider keeps are controlled by that provider’s own practices, which are not copied here.

The appointment script does not start a login session and does not set a session cookie in its own code. It responds with JSON and a header asking robots not to index the script address. It does not add your request to a mailing list.

Pages load fonts and styles from this website’s own files. They do not embed a map, a video platform, a social plugin, or a payment button. Photographs are image files stored with the site. Viewing them does not send your name anywhere.

Cookies and Similar Technologies

The site’s own script uses the browser’s local storage, not an HTTP cookie, for one preference. The key is golden_hands_notice_ok. It is written only after you press “Got it” on the notice in the corner of the screen. The value stored is the character “1”. The notice then stays hidden on later visits in that browser. If you never press the button, the key is not written by that action, and the notice can appear again.

Local storage is similar to a cookie in everyday language because it stays on your device, but it is not sent to the server with each page request the way a cookie is. The cookie policy explains that difference, the browser settings that can clear storage, and the fact that the site does not use analytics or advertising cookies.

The notice has one button because there is nothing optional to accept or reject. There is no advertising cookie waiting behind “Accept,” and there is no analytics tag waiting behind a preferences panel. Adding those buttons without a real choice would be misleading, so they are not shown.

Purposes of Processing

Appointment request details are kept so the operator can read what you asked and, if the operator chooses to reply, know which email address you gave. The service topic, the preferred date, the time of day, and the message exist so the question can be understood. The checkbox is stored so there is a record that the confirmation was ticked on that submission.

The information is not used to build a marketing audience, to score credit, to sell a list, or to train a public advertising profile. The website does not run a newsletter. Phone, if you provide it, is an optional way for a later human reply. The site itself does not dial the number.

Technical logs, if the host keeps them, are for operating and securing the server: seeing whether a page loaded, diagnosing errors, and responding to abuse. Golden Hands does not describe a separate purpose of tracking you across other websites, because the pages do not include that kind of tag.

The local storage flag has one purpose: to remember that you dismissed the notice. It is not tied to your name unless you later submit a form in the same browser, and even then the flag is not copied into the stored request. The request file and the notice flag are separate.

Legal Bases

Privacy laws name different reasons, or “legal bases,” for using personal information. Which list applies depends on where the operator is established and where you are. This website does not publish a jurisdiction, so it does not assert that a particular statute is the one that governs you.

In general terms, storing a message you chose to send is often explained as taking steps you asked for before a possible appointment, or as a practical need to run the website you are using. The confirmation checkbox records that you saw the limit of the form. It is not presented as consent to medical treatment, consent to marketing, or consent to share your details with advertisers.

If a law that applies to you requires a specific basis to be named, the operator should add that wording after confirming the relevant law. Until then, this section explains the idea without pretending the legal analysis is finished. You may still use the form to ask what information is held about a request you sent.

Communication and Appointment Inquiries

The website does not send an automatic email when a request is stored. It does not show you a copy of the stored line after you submit, beyond the short status sentence on the page. Any later reply would be a separate action by a person, using the email or phone you provided. A reply time is not published, so this policy does not promise one.

Do not treat silence as acceptance or as refusal. The terms explain that a stored request is not a confirmed booking. If you need a decision by a certain day, this form cannot guarantee that someone will see it in time.

If you write again about the same question, you may create a second stored line. The script does not merge records and does not ask you to create an account that would let you edit the first one online.

Sharing With Service Providers

Golden Hands does not sell personal information. The appointment file is written on the server that hosts the site, inside a directory named private_storage. The project includes configuration intended to deny public web access to that directory on Apache and on IIS. That is a practical control. It is not a promise that a misconfigured host, a stolen backup, or a compromised server could never expose the file.

A hosting provider that stores the website’s files may technically be able to access them, because that is how hosting works. The name of the provider is not published here, and this policy does not claim a particular data-processing contract with a named vendor. If the operator later uses a named host, email service, or backup service, this section should be updated with that fact.

The site does not use, and this policy does not claim the use of, Google Analytics, Google Ads conversion tracking, a Meta pixel, a customer-relationship platform, Stripe, PayPal, Mailchimp, or a similar marketing or payment tool. If one of those tools is added later, it should not run until this policy and the cookie policy describe it, and until any required choice is actually built.

Information may be disclosed if a competent authority requires it with a valid demand, or if disclosure is needed to investigate abuse of the form, such as a submission that tries to harm the server. This sentence is not a statement that such a demand has been received. It is a limit on the idea that information is never shared in any circumstance.

Data Retention Principles

A fixed number of days or years for keeping appointment requests has not been set in public. The principle is that a request should be kept while it is needed to read and respond to the question you asked, and that it should not be kept as a permanent marketing archive. Without a published schedule, this policy will not invent one, such as “thirty days” or “seven years,” because those numbers would be fiction.

You may ask, through a new form message, that a previous request be deleted. Say enough for the operator to recognize it, such as the email address you used and the approximate day. The website cannot show you a self-service delete button, and it cannot promise that every backup a host might keep will disappear at the same moment. Host log retention, if any, is separate and is not controlled by the form script.

The local storage flag remains until you clear site data for this website or until the script’s key is removed. It does not expire on a timer in the current script.

Data Security

The request file is a text file of JSON lines, stored outside the public page folders and protected by the access rules shipped with private_storage. Submissions use the same site address as the rest of the website. If the published site is served over HTTPS, the request travels over HTTPS. This policy does not claim that every possible deployment uses HTTPS, because that depends on the host.

The file is not described as encrypted at rest, because the script does not encrypt each line before writing it. Access depends on server permissions and on the directory deny rules. Those measures reduce casual downloading. They do not make the file immune to a person who already controls the server.

You can reduce risk on your side by sending only what the form asks for, by keeping medical details out of the message, and by avoiding public or shared computers if you do not want the notice flag left behind. Do not send payment card numbers. The form cannot process them, and they would sit in the text file if you typed them.

User Rights and Choices

Depending on where you live, you may have rights to ask for a copy of information about you, to correct it, to delete it, to limit its use, or to complain to a regulator. This website does not publish the country of operation, so it does not list one regulator or one statutory deadline. Those rights, where they exist, are not waived by this policy.

The practical choice on this site is whether to submit the form at all. Phone is optional. The date and time of day are optional. The message is required because a blank request cannot be reviewed. The checkbox is required because the form should not store a note from someone who has not seen that storage is not a booking.

To ask about a request you already sent, use the form again and state that the message is a privacy question. Include the email address used on the earlier request so it can be found. The site cannot verify your identity with an account password, because there are no accounts. The operator may need enough detail to avoid changing or deleting the wrong line. A stored privacy question is not itself a formal legal filing, and it does not pause a deadline that a law might impose on you.

You can dismiss the corner notice, or you can leave it. You can clear local storage in your browser. None of those choices changes whether a request you already submitted remains on the server.

External Links

The contact page includes a link that opens a map search for the published Budapest address. That link leaves this website. The map service has its own privacy practices, and Golden Hands does not embed the map or send the appointment form to it. Other pages link among themselves. A link does not make Golden Hands the operator of the other site.

Children’s Privacy

This website is written for adults who want to read about massage or send a question about a session for themselves. It is not directed at children, and it does not knowingly ask children to submit personal information. Do not use the form to send information about a child.

The form does not ask for a date of birth, so the script cannot reliably tell a child’s request from an adult’s. If you believe a child’s information was submitted, send a privacy message asking for that request to be removed and include enough detail to find it.

Changes to Privacy Policy

Golden Hands may replace this policy by updating the page. The date at the top will change when the text changes. The previous version is not archived on the website unless a later edit adds an archive. Continuing to use the site after an update means you are using the site as then described. A request stored under an older policy stays a stored request. It does not become a booking because the policy wording changed.

Material changes would include adding analytics, advertising tags, payment processing, or a new contact channel. Those changes should be described here before or when they start, not left as a surprise in the page source.

Privacy Contact

Privacy questions can be sent to [email protected], by telephone at +36 30 123 7281, or by post to Szinyei Merse u. 6, 1063 Budapest, Hungary. You can also use the appointment request form and write that your message is about privacy. Explain what you want: a copy, a correction, or deletion of a request you sent. The form will store that message in the same way it stores other requests, if the server accepts it. Storage is not proof that the request has already been fulfilled.

Please also read the Terms & Conditions and the Cookie Policy. Together they describe an information website with one stored-request form and one local notice preference, and they avoid contact details that Golden Hands has not confirmed.