Effective Date: April 3, 2026

At RCT Massage ("we," "our," or "us"), we are committed to protecting the privacy and security of your personal and health information.

This Privacy Policy explains how we collect, use, and safeguard your data when you visit our website, rctmassage.com, or use our services.

1. Information We Collect

We collect information that identifies you or relates to your health to provide safe and effective massage therapy.

1. Contact Information: Name, email address, phone number, and mailing address.
2. Health & Wellness Data: Medical history, physical conditions, injury details, and treatment notes (SOAP notes).
3. Appointment Details: Preferences, service history, and scheduling information.
4. Payment Data: Billing address and payment card details (processed securely via our third-party provider).
5. Technical Data: IP address, browser type, and cookies used to improve website functionality.

2. How We Use Your Information

We use your data strictly for business and therapeutic purposes, including:

1. Managing and confirming your appointments.
2. Tailoring massage treatments to your specific health needs and safety requirements.
3. Processing payments and preventing fraudulent transactions.
4. Sending appointment reminders, receipts, and (with your consent) marketing updates.
5. Meeting legal, regulatory, and professional record-keeping obligations.

3. Third-Party Service Providers (Vagaro)

We utilize Vagaro as our primary practice management and booking platform. When you book an appointment or fill out an intake form:

1. Your data is transmitted to and stored by Vagaro.
2. Vagaro maintains its own security protocols, including PCI compliance for credit card processing and specialized data protection for health-related records.
3. We recommend reviewing Vagaro’s Privacy Policy for more details on their data handling.

4. Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We only share your data in the following circumstances:

1. Service Providers: With trusted partners like Vagaro or email service providers who assist in our operations.
2. Legal Necessity: If required by law, subpoena, or to protect the safety of our clients and staff.
3. Professional Referrals: Only with your explicit written consent (e.g., sharing notes with your Doctor or Physical Therapist).

5. Data Retention

As a healthcare service provider, we are required by law to retain certain health and treatment records for a specific period (typically 5 to 7 years depending on local regulations). After this period, records are securely destroyed or anonymized.

6. Your Rights and Choices

Depending on your jurisdiction, you may have the right to:

1. Review the personal data we have on file for you.
2. Request corrections to any inaccurate or incomplete information.
3. Opt-out of marketing emails by clicking "Unsubscribe" in any message.
4. Request the deletion of your personal data (subject to our legal requirements to maintain medical records).

7. Security

We implement administrative, technical, and physical safeguards to protect your information. However, no method of transmission over the internet is 100% secure. By using our site and Vagaro, you acknowledge these inherent risks.

8. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Effective Date" at the top of the page will indicate when the latest version was published.

9. Contact Us

For questions regarding this policy or to exercise your data rights, please contact us at:

Email: frontdesk@rctmassage.com

Phone: 605-484-0706

Address: 140 North Street Rapid City, SD 57701

Thank you for choosing Rapid City Therapeutic Massage. We understand that your health information is deeply personal, and we take our responsibility to protect it very seriously. If you have any questions about how your data is handled, please don’t hesitate to reach out.