Effective Date: Nov 1, 2025

This Privacy Policy describes how FlowState Massage ("we," "us," or "our") collects, uses, protects, and handles your personal, financial, and health-related information when you visit FlowState Seattle Massage (the "Site"), utilize our integrated third-party booking tools, or receive treatment at our Seattle locations.

By submitting your information, you consent to receive recurring automated texts from FlowState Massage regarding appointments and wellness updates. Message frequency is up to 4 messages/month or more, depending on your booking frequency. Msg & data rates may apply. Reply STOP to opt out. View our [Privacy Policy].

1. Information We Collect

To provide safe, professional, and specialized clinical massage therapy, we collect several types of data across our digital and physical operations:

• Contact & Profile Data: Your name, email address, phone number, and physical address collected when you book a session or register a profile.
• Health & Clinical Intake Records: Information regarding your physical health, medical history, chronic pain, injuries, and structural/lifestyle factors. This data is collected through electronic health intake forms to ensure your massage treatments (such as Myofascial Release or Deep Tissue therapy) are safe and effective.
• Financial & Payment Information: Payment card data used to secure or settle appointments. This includes standard credit/debit cards as well as Health Savings Account (HSA) and Flexible Spending Account (FSA) cards.
• Technical & Usage Data: Information automatically gathered when you navigate our Site, including your IP address, browser type, device information, and cookie data to optimize website performance.

2. How We Collect and Process Your Data

We partner with specialized, secure third-party platforms to streamline your client experience. Your data is processed through these channels:

• MassageBook: Utilized for managing electronic clinical intake forms, storing secure health history records, tracking SOAP notes, and handling dedicated client scheduling.
• Square: Used to process point-of-sale retail payments, securely handle standard credit transactions, process specialized HSA/FSA cards, and manage card-on-file data for scheduling security.
• ClassPass: Used to ingest third-party class and session reservations. When you book via ClassPass, relevant contact and booking identifiers are synchronized with our schedule.

3. Special Provisions for HSA/FSA Cardholders

We accept HSA and FSA payment cards for eligible clinical massage therapy treatments.

• Data Minimization: We strictly process HSA/FSA cards for authorized payment transactions via Square.
• Clinical Records Protection: Any clinical documentation, medical necessity details, or intake data required to validate your treatment eligibility is stored securely within our encrypted MassageBook database.
• Confidentiality: This health-related data is treated with strict professional confidentiality and is never shared with payment processors beyond the necessary transactional data required to clear the payment.

4. How We Use Your Data

We utilize your collected information to manage our daily business operations and maintain high-quality care:

• Treatment Customization: Tailoring clinical bodywork to safely accommodate your unique medical history, ruling out contraindications, and targeting specific areas of structural pain.
• Scheduling & Notifications: Sending automated appointment confirmations, policy reminders, and text message alerts regarding your sessions.
• Financial Transactions: Processing payments, handling billing disputes, and managing card authorizations in accordance with our standalone Cancellation Policy.
• Safety & Security: Verifying client identity for in-office protection, structural liability management, and therapist safety.

5. Sharing and Protecting Your Information

We enforce rigorous limits on how your personal data is shared:

• No Commercial Sharing or Selling: We absolutely do not sell, rent, trade, or lease your personal data, medical information, phone numbers, or email addresses to any third parties for marketing or promotional purposes.
• Operational Service Providers: Your information is only accessed by the trusted booking, intake, and payment platforms outlined in Section 2 to facilitate your care.
• Legal Compliance: We may disclose your information if required by Washington State healthcare laws, professional licensing rules, or a valid legal subpoena.

6. Communication Preferences

By providing your phone number and email address, you consent to receive transaction-related messages regarding your reservations. You can opt out of automated notifications at any time by following the unsubscribe instructions in our emails or replying "STOP" to any text message text.

7. Your Data Rights

You maintain ownership over your data. At any time, you may request to view, update, correct inaccuracies, or request the deletion of your personal contact information from our databases. Please note that certain clinical and financial records must be retained for legally mandated periods under Washington State healthcare record laws.

8. Contact Us or reply with "help" for more information

If you have any questions or concerns regarding this Privacy Policy, or if you wish to manage your personal data settings, please connect with us directly via the FlowState Massage Contact Portal or use the information below:

• Phone: (425) 243-7070
• Office Address: 509 Olive Way, Suite 1658, Seattle, WA 98101