Last updated 25 September 2026. If you have a question about your information, please contact me.
Who is responsible
Vadim Susarin, trading as VAD Soft Tissue & Massage Therapy, is responsible for deciding how client information is used. You can contact me at bookings@vadmassage.com, by WhatsApp or text at 07494 047985, or by post at 46A Drayton Gardens, West Drayton, UB7 7LG.
What I collect
Depending on how you contact me, I may receive your name, phone number, email, treatment address, appointment preferences, booking and payment information, and messages. The separate booking app at booking.vadmassage.com may also hold your account details, saved addresses, booking history, waitlist requests and payment status. Before or during treatment I may ask for relevant health information such as symptoms, injuries, medication and allergies, and keep consultation and treatment notes. The online booking form does not ask you for medical history; please do not put diagnoses in the free-text notes. If you book for a child, I may record the parent or guardian’s contact and consent details.
When you visit this website, its host may process technical information such as IP address and basic request logs. The site loads fonts from Google and links to WhatsApp and Google reviews; those services handle data under their own notices when you use them. The public site does not currently use an enquiry form or advertising analytics. The separate booking app uses browser storage needed to keep you signed in to your account.
Why I use it and my legal basis
I use contact and booking information to respond to enquiries, arrange and provide appointments, take payment and communicate changes. My main lawful basis is taking steps at your request before a contract and performing a contract. I retain necessary financial records to meet legal obligations. I may use limited records to deal with complaints or legal claims where this is in my legitimate interests, balanced against your rights.
Health information is more sensitive. I ask for relevant details so I can assess whether treatment is suitable and adapt it safely. I will ask for your explicit consent to process health information for this purpose. You can withdraw that consent by contacting me; withdrawal does not undo processing already carried out, and some records may need to be retained where another legal basis applies. Consent to treatment itself is discussed separately and can be withdrawn during a session.
I use a testimonial, clinical photograph or case study publicly only with separate permission for that particular use. I do not sell client information or use clinical notes for marketing.
Who may handle information
I use service providers to run the website, communications and booking records. These include Vercel for website and booking-app hosting, Supabase for booking records and account authentication, Resend for transactional emails, Google if you choose Google sign-in, Meta/WhatsApp if you message me there, my bank for transfers, and Telegram where booking notifications or optional client updates are enabled. Each receives information relevant to its role. If you send sensitive health information through WhatsApp, that service also processes the message under its own terms. I may share relevant information with another clinician only when you ask me to or another lawful reason requires it.
Some providers may process information outside the UK. Where UK data protection law requires safeguards for an international transfer, I use the provider’s applicable transfer arrangements. Please contact me if you want details relevant to your information.
How long I keep it
I keep information only while it is needed for the purpose for which it was collected. Unconverted enquiries are reviewed and removed when there is no continuing reason to keep them. Booking-app account details, saved addresses and preferences are reviewed after 24 months without activity; closed waitlist requests are normally removed after six months. Booking and payment records may be kept for up to six years where needed for tax, accounting, disputes or legal claims. Security and access records are reviewed at least annually. Consultation and treatment records are kept while needed for continuing care, professional or insurance requirements, and potential claims; I review the need to retain them periodically and securely delete them when those reasons no longer apply. Records involving a child may need a longer retention period. You can ask me about the period or criteria for a particular record.
Your choices and rights
You may ask for access to your personal information, correction of inaccurate details, deletion or restriction where applicable, and may object to processing based on legitimate interests. Where processing is based on consent, you can withdraw consent. Some rights depend on the legal basis and any obligation to keep a record. Contact me using the details above and I will respond in line with UK data protection law.
If you remain concerned, you can complain to the Information Commissioner’s Office (ICO).
Updates
I may update this notice as my booking and treatment processes change. The current version will be available here. My Booking & Treatment Terms explain the appointment and cancellation rules.