Privacy Policy

Effective Date: March 18, 2026 | Last Updated: March 18, 2026

Massage Ultra LLC ("we," "us," or "our") operates massage therapy, reflexology, and wellness locations in Massachusetts under the brands Massage Ultra, Foot Spa Ultra, and related trade names. This Privacy Policy describes how we collect, use, and protect personal information when you use our websites (massageultra.com, footspaultra.com, enterpriseultra.com), booking systems, and SMS/messaging services.

1. Information We Collect

We collect personal information that you voluntarily provide when you:

• Create an account or book an appointment (name, phone number, email address)
• Complete a health intake form (health history, allergies, treatment preferences, areas of concern)
• Make a payment (payment card details are processed by third-party payment processors; we do not store full card numbers)
• Communicate with us via phone, SMS, or email
• Leave feedback or reviews about your experience

We also automatically collect certain technical information when you visit our websites, including IP address, browser type, and pages visited, through standard web server logs.

2. How We Use Your Information

We use personal information to:

• Schedule, confirm, and manage your appointments
• Send appointment reminders and service notifications via SMS or email
• Send account notifications related to your booking activity
• Provide personalized treatment based on your health intake information
• Process payments and issue receipts
• Respond to your inquiries and provide customer support
• Improve our services based on aggregated, de-identified usage data

3. Information Sharing

We do not sell, rent, or trade your personal information to third parties.

We may share your information only in the following limited circumstances:

• Service providers: With trusted vendors who assist us in operating our business (payment processing, SMS delivery, cloud hosting), bound by contractual obligations to protect your data
• Legal compliance: When required by law, subpoena, or court order, or to protect our legal rights
• Business transfer: In connection with a merger, acquisition, or sale of assets, with notice to affected individuals

4. SMS/Text Messaging

By providing your phone number and booking an appointment or creating an account, you consent to receive transactional SMS messages including:

• Appointment confirmations and reminders
• Account notifications related to your booking activity
• Customer care responses to your inquiries
• Account messages from Massage Ultra.

Message frequency varies based on your appointment activity. Message and data rates may apply. You may opt out at any time by replying STOP to any message. Reply HELP for assistance. We do not send marketing or promotional messages without separate explicit consent.

5. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect personal information in accordance with 201 CMR 17.00 (Massachusetts Standards for the Protection of Personal Information), including:

• Encryption of personal information transmitted over public networks (TLS/SSL)
• Access controls limiting employee access to personal information on a need-to-know basis
• Secure password hashing for account credentials
• Regular review of security practices and procedures

6. Data Breach Notification

In the event of a breach of security involving your personal information, we will provide notice in accordance with Massachusetts General Laws Chapter 93H and 201 CMR 17.04, including notification to affected individuals and the Massachusetts Attorney General's Office and the Office of Consumer Affairs and Business Regulation.

7. Your Rights

You have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate personal information
• Request deletion of your personal information, subject to legal retention requirements
• Opt out of SMS communications at any time by replying STOP
• Opt out of email communications via the unsubscribe link in any email

To exercise these rights, contact us using the information below.

8. Data Retention

We retain personal information only as long as necessary to provide our services, comply with legal and regulatory obligations, and establish, exercise, or defend legal claims.

Client treatment records are retained for a minimum of seven years from the date of the last client encounter, as required by 269 CMR 6.06 (Massachusetts Board of Registration of Massage Therapy). Records for clients who received services before age two are retained until the client reaches age nine. Electronic records are maintained with secure back-ups as required by the regulation.

Account and transaction records are retained while your account is active and for the period required to meet tax, accounting, and recordkeeping obligations.

Retention for legal claims. Because claims arising from the provision of personal-care services may be brought under extended Massachusetts statutes of limitations, we retain a minimum record set for the establishment, exercise, or defense of such claims. The retention period for this purpose is governed by the longest applicable statute of limitations and may extend well beyond the periods described above.

Deletion requests. You may request deletion at any time using the contact information in Section 11. Upon request, we will inactivate the account, remove it from active use, and restrict internal access. Underlying records are preserved to meet the retention obligations described in this section and are purged in the ordinary course once no retention basis remains.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top indicates the most recent revision. Continued use of our services after changes constitutes acceptance of the updated policy.