Privacy Policy
This Privacy Policy explains how VA Sports Massage collects, uses, and protects your personal information in compliance with UK GDPR and the Data Protection Act (2018), applicable in Northern Ireland.
1. Information we collect
We may collect and process the following information:
- Personal information: name, email, phone number, age.
- Health information: medical history, physical activity, conditions relevant to treatment.
- Booking details: date, time, and type of service booked.
- Communication: messages sent via our contact form.
- Technical data: basic site logs and security-related information.
We DO NOT collect analytics or tracking cookies unless explicitly enabled by you. Currently, this website does NOT use Google Analytics or similar tools.
2. How we use your data
Your data is used strictly for:
- Managing appointment bookings
- Communicating with you about your sessions
- Ensuring treatments are safe and personalised
- Responding to enquiries
- Meeting legal or regulatory obligations
3. Legal basis for processing
We process your data based on:
- Consent — when you voluntarily provide information
- Contract — to deliver the treatment or service you request
- Legitimate interest — for communication and internal administration
- Legal obligation — when required for safety, compliance, or insurance
4. Sensitive health information
Some treatments require you to provide health-related information. This information is treated with the highest level of confidentiality and is never shared without your explicit consent unless legally required.
5. How we store and protect your data
Your data is stored securely using encrypted systems and access controls. Only authorised personnel involved in treatment or administration may access it.
VA Sports Massage implements industry-standard measures to protect your personal data from loss, unauthorised access, or misuse.
6. How long we keep your data
We retain personal and health information only as long as necessary for providing services, fulfilling legal obligations, or resolving disputes. Health-related records may be kept for up to 7 years, in accordance with UK healthcare insurance requirements.
7. Sharing your data
Your data is NEVER shared with:
- Advertisers
- Marketing platforms
- Social media networks
Data is only shared when:
- Legally required (e.g., safeguarding or lawful requests)
- You have given explicit consent
8. Your rights (UK GDPR)
You have the right to:
- Access your personal data
- Request corrections
- Request deletion (“right to be forgotten”)
- Withdraw consent at any time
- Request a copy of your records
- Submit a complaint to the Information Commissioner’s Office (ICO)
9. Contact
For any privacy-related questions or requests, contact:
Email: vasportsmassage@outlook.com
VA Sports Massage – Northern Ireland