Privacy Policy
VSA Medical Ltd is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website or services.
1. Who We Are
VSA Medical Ltd
The Vineyard
Oldham
OL4 1JN
Email: info@vsamedical.co.uk
Registered in England and Wales: 12045191
We are the data controller of your personal data for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What Information We Collect
We may collect and process the following categories of data:
Personal identification data: name, date of birth, gender, address, email, phone number
Medical information: health history, medications, photos, treatment plans, GP details
Payment data: billing address, payment method (we do not store card details)
Technical data: IP address, browser type, location data, website usage statistics
Communication data: emails, contact forms, messages via social media
3. How We Collect Your Data
We collect data when you: Book an appointment online, by phone, or in person
Complete a consultation form or consent document
Communicate with us via email, phone, or social media
Browse or interact with our website
Subscribe to updates, newsletters, or promotional content
4. How We Use Your Data
We use your personal data to: Provide consultations, aesthetic and minor surgical services
Arrange consultations and manage appointments
Assess your suitability for treatment
Maintain accurate medical records
Arrange referrals as needed
Respond to enquiries or concerns
Process payments and issue receipts
Meet legal and regulatory obligations (e.g. CQC compliance)
Send important service updates or reminders
5. Lawful Basis for Processing
We process your data under the following lawful bases: Consent – when you have given clear permission for us to do so
Contract – when data is necessary for a service you have requested
Legal obligation – for regulatory or medical record-keeping requirements
Legitimate interests – for business improvement and communication, where appropriate
6. Data Sharing and Third Parties
We do not sell or trade your personal information. We may share your data with:
Medical professionals or referral partners (with your consent)
Payment processors or accounting services
IT service providers (for secure data storage and website hosting)
Regulators (e.g. CQC, ICO) if legally required
All third-party service providers are GDPR-compliant and bound by confidentiality agreements.
7. Data Storage and Security
Your data is stored securely on encrypted systems within the UK (or within the EEA where applicable). We implement appropriate technical and organisational safeguards to prevent unauthorised access or disclosure.
8. Data Retention
We retain your medical and personal data for as long as is necessary for clinical, legal, or operational purposes, in accordance with UK medical retention guidelines (typically 8 years, or until a child reaches age 25 for paediatric records).
9. Your Rights
You have the right to:
Access a copy of your personal data
Request correction of inaccurate data
Request deletion (where legally permissible)
Restrict or object to certain uses of your data
Withdraw consent at any time
Lodge a complaint with the Information Commissioner’s Office (ICO)
ICO Contact: www.ico.org.uk | Tel: 0303 123 1113
To exercise your rights, please contact us at info@vsamedial.co.uk.
10. Policy Updates
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date.
Last updated: 14/4/2025