Privacy policy
Last updated [DATE].
This is a starting template, not legal advice. Read every line, delete anything that is not true of your practice, and have it reviewed before you publish. Health information is involved, so it is worth the hour.
What I collect
When you book or send a message I collect your name, contact details and whatever you tell me about your health and your goals for the session. Client intake forms and session notes are kept [WHERE AND HOW — e.g. in a locked cabinet / in an encrypted practice-management app].
How it is used
To schedule and deliver your sessions, to keep safe and accurate records, and to contact you about your appointments. [State whether you send marketing email or texts, and how to opt out.]
Who it is shared with
Nobody, except the service providers required to run the practice — [BOOKING PLATFORM], [PAYMENT PROCESSOR] and [EMAIL PROVIDER] — and only where necessary. Your health information is not sold or shared for advertising.
How long it is kept
[STATE RETENTION PERIOD. Hawaii record-keeping expectations for massage therapists should be confirmed with the Board of Massage Therapy.]
This website
[If you add analytics, name the tool and what it collects. If you use no analytics and no cookies, say so — it is a genuinely good line to be able to write.] Forms submitted on this site are delivered by [FORM PROVIDER].