Privacy Policy

This website belongs to Vival Body Massage Therapy. The person responsible for your personal data (the "data controller") is me, Constantin Muntean.

For anything related to your data, you can send me an email, or reach me through the form or by phone on the Contact page.

When you use the contact form, I receive the details you enter:

• your name, phone number and email address (required)
• your area or town, the treatment you're interested in, and your preferred date and time (optional)
• your message, if you write one
• the language of the page you used (English or Romanian)

When you contact me by phone, email or WhatsApp, I receive the details you choose to share, such as your name, number and message.

This website has no analytics, no advertising and no tracking. When you visit it, the hosting provider (Cloudflare) processes technical data such as your IP address and browser type, only to deliver the pages and protect the site from attacks.

I use your details only to reply to your enquiry and to arrange your appointment: confirming the day and time, the treatment and the address. This is necessary to act on your request before a booking (Article 6(1)(b) of the GDPR).

The technical data processed by Cloudflare is needed to run the website safely, which is a legitimate interest (Article 6(1)(f) of the GDPR).

I don't use your details for marketing, I don't sell them and I don't share them with anyone other than the services listed below.

• Resend: the email service that delivers the contact form message to my inbox.
• Cloudflare: the company that hosts this website and processes the form when you press "Send message".
• Google: the provider of the email inbox (Gmail) where your messages arrive.
• WhatsApp: if you message me on WhatsApp, the conversation is also processed by WhatsApp (Meta), under WhatsApp's own privacy policy.

Resend, Cloudflare, Google and WhatsApp are part of companies based in the United States, so your data may be processed there. These transfers rely on safeguards recognised by the GDPR, such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

I keep your messages and the details in them for 12 months from your last message, and then I delete them. You can ask me to delete them sooner at any time.

Under the GDPR, you have the right to:

• see the personal data I hold about you (access)
• have it corrected if it's wrong (rectification)
• have it deleted (erasure)
• object to how I use it (objection)

To use any of these rights, send me an email or use the form on the Contact page. I'll reply within one month at the latest.

If you think your data hasn't been handled properly, you can make a complaint to the Data Protection Commission, the data protection authority in Ireland: www.dataprotection.ie. I'd be grateful if you contacted me first, so I can try to put things right.