Privacy Policy

Effective Date: March 18, 2026 | Last Updated: March 18, 2026

Massage Ultra LLC ("we," "us," or "our") operates massage therapy, reflexology, and wellness locations in Massachusetts under the brands Massage Ultra, Foot Spa Ultra, and related trade names. This Privacy Policy describes how we collect, use, and protect personal information when you use our websites (massageultra.com, footspaultra.com, enterpriseultra.com), booking systems, and SMS/messaging services.

1. Information We Collect

We collect personal information that you voluntarily provide when you:

• Create an account or book an appointment (name, phone number, email address)
• Complete a health intake form (health history, allergies, treatment preferences, areas of concern)
• Make a payment (payment card details are processed by third-party payment processors; we do not store full card numbers)
• Communicate with us via phone, SMS, or email
• Leave feedback or reviews about your experience

We also automatically collect certain technical information when you visit our websites, including IP address, browser type, and pages visited, through standard web server logs.

2. How We Use Your Information

We use personal information to:

• Schedule, confirm, and manage your appointments
• Send appointment reminders and service notifications via SMS or email
• Send account notifications related to your booking activity
• Provide personalized treatment based on your health intake information
• Process payments and issue receipts
• Respond to your inquiries and provide customer support
• Improve our services based on aggregated, de-identified usage data

3. Information Sharing

We do not sell, rent, or trade your personal information to third parties.

We may share your information only in the following limited circumstances:

• Service providers: With trusted vendors who assist us in operating our business (payment processing, SMS delivery, cloud hosting), bound by contractual obligations to protect your data
• Legal compliance: When required by law, subpoena, or court order, or to protect our legal rights
• Business transfer: In connection with a merger, acquisition, or sale of assets, with notice to affected individuals

4. SMS/Text Messaging

By providing your phone number and booking an appointment or creating an account, you consent to receive transactional SMS messages including:

• Appointment confirmations and reminders
• Account notifications related to your booking activity
• Customer care responses to your inquiries
• Account messages from Massage Ultra.

Message frequency varies based on your appointment activity. Message and data rates may apply. You may opt out at any time by replying STOP to any message. Reply HELP for assistance. We do not send marketing or promotional messages without separate explicit consent.

5. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect personal information in accordance with 201 CMR 17.00 (Massachusetts Standards for the Protection of Personal Information), including:

• Encryption of personal information transmitted over public networks (TLS/SSL)
• Access controls limiting employee access to personal information on a need-to-know basis
• Secure password hashing for account credentials
• Regular review of security practices and procedures

6. Data Breach Notification

In the event of a breach of security involving your personal information, we will provide notice in accordance with Massachusetts General Laws Chapter 93H and 201 CMR 17.04, including notification to affected individuals and the Massachusetts Attorney General's Office and the Office of Consumer Affairs and Business Regulation.

7. Your Rights

You have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate personal information
• Request deletion of your personal information, subject to legal retention requirements
• Opt out of SMS communications at any time by replying STOP
• Opt out of email communications via the unsubscribe link in any email

To exercise these rights, contact us using the information below.

8. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this policy, comply with legal obligations, and resolve disputes. Health intake information is retained in accordance with Massachusetts healthcare record retention requirements. Account information is retained while your account remains active and for a reasonable period thereafter.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top indicates the most recent revision. Continued use of our services after changes constitutes acceptance of the updated policy.