Vitality Massage Therapy is operated by Vitality San Diego LLC. We collect as little personal information as we can, use it only to deliver your massage, and never sell it. This policy explains exactly what we hold, how we protect it, and the choices you have.
What we collect
When you request an appointment through our booking form, we collect:
- Your name, email address, and phone number, so we can confirm and coordinate your appointment
- Your address, so our therapists know where to bring the session and can calculate any travel fee
- Any health notes you choose to share, so we can adapt the session safely
- How you'd like us to confirm (text, call, or email), your session details, and your acceptance of our terms and policies
- If you mention in your notes that you're a Beyond Med member, your member ID, so we can verify eligibility and apply the member discount at checkout
Before your first session, we also ask you to complete an intake and consent form through Square. It records your health history, emergency contact, and informed consent, and your therapist may add brief session notes to your record.
We do not collect payment card details through this website. Payment is handled at the time of service through Square, which processes your card under its own privacy policy. We do not knowingly collect information from anyone under 18 except through a parent or legal guardian who is booking for them.
When you browse the site, we also collect limited technical information automatically: Google Analytics records how pages are used (pages viewed, approximate location, device and browser type), and our error-monitoring service, Sentry, records technical details when something on the site breaks, including short session replays with text and form entries masked.
How we use it
We use your information solely to schedule, confirm, deliver, and follow up on your appointment, to keep accurate session records, and to meet our legal and accounting obligations. We do not use it for advertising, and we do not add you to marketing lists without your consent.
Health information
Your health notes, intake form, consent form, and session notes are confidential. California's Confidentiality of Medical Information Act applies to health care providers certified under the Business and Professions Code, and we treat the health information you share with us as confidential medical information under that law. In practice that means:
- It is stored with your client record in Square and seen only by our team.
- We use it only to decide whether and how to work with you safely.
- We do not disclose it to anyone outside our team without your written authorization, except where the law requires or permits it, for example a valid subpoena or court order, or a report we are legally required to make.
- You can ask to see it, correct it, or have it deleted, subject to the records we are required to keep.
We are not a HIPAA covered entity, because we do not bill health insurance electronically, but we hold your health information to the standard described above regardless.
Text messages and email
When you give us your phone number and choose to be contacted, you agree to receive text messages about your appointments from us and from Square on our behalf: confirmations, reminders, changes, and follow-ups. Message and data rates may apply, and message frequency depends on your bookings. Reply STOP to opt out of texts at any time, or tell us you prefer email or a call. Appointment emails are sent through Resend.
Who we share it with
We do not sell your information, and we do not share it beyond what is needed to process your booking and run this website. These service providers handle it on our behalf, under their own privacy and security commitments:
- Square, our scheduling, consent-form, customer-records, and payment system, where your booking, contact details, intake form, and session record are stored
- Resend, our transactional email provider, which delivers booking confirmations and appointment emails
- Sentry, error monitoring; if a booking notification fails, the request is recorded there so we can follow up by hand
- Google Analytics, aggregate website usage
- Cloudflare Turnstile, bot protection on the booking form
- Vercel, the host that serves this website
We may also disclose information when the law requires it, to protect the safety of a client or therapist, or to enforce our terms.
How we protect it
Your information travels over encrypted connections and is stored with providers that maintain their own security programs. Access inside our team is limited to the people who need it to deliver your session. No system is perfectly secure, and if a breach affecting your personal information ever occurs we will notify you as California law requires.
How long we keep it
We keep booking and session records for as long as you are a client and for the period our legal, tax, and insurance obligations require, then delete them. Technical logs and analytics are kept for the retention periods set by those providers.
Your rights
You can ask us at any time to show you the information we hold about you, correct it, or delete it, subject to records we are required to keep. We will not treat you differently for exercising these rights. Reply to any booking email from us, or send your request to hello@vitalitysd.com, and we will respond promptly. California residents may also have rights under the California Consumer Privacy Act; where it applies, we honor those rights in the same way.
Cookies
This site sets essential cookies plus Google Analytics cookies. See our Cookie Policy for what they are and how to control them.
Changes to this policy
We may update this policy as our services or the law change. The date below shows the latest revision, and material changes will be posted here before they take effect.
Related policies
Our Legal & Policies page links every policy, including our Terms of Service and Scope of Practice & Wellness Disclaimer.
Contact
Privacy questions or requests? Email hello@vitalitysd.com. For anything about an appointment, use the booking page.
Last updated October 2026.