Blooming Embers Therapy & Wellness (“we,” “our,” or “us”) is committed to protecting your privacy and safeguarding your personal information in accordance with applicable federal law and the laws of the State of Georgia.

This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, schedule services, or receive treatment.

1. Information We Collect

We may collect the following types of information:

Personal Information

• Full name

• Phone number

• Email address

• Mailing address

• Date of birth

• Emergency contact information

Health & Treatment Information

• Health history forms

• Medical conditions disclosed for treatment purposes

• Consent forms

• Treatment notes

Payment Information

• Credit/debit card details (processed securely through third-party payment providers)

• Billing address

Website & Digital Information

• IP address

• Browser type

• Cookies and usage data

2. How We Use Your Information

Your information may be used to:

• Schedule and manage appointments

• Provide customized massage and wellness services

• Maintain accurate treatment records

• Process payments

• Communicate regarding appointments, policies, or updates

• Improve our website and services

• Comply with legal or regulatory obligations

We do not sell, rent, or trade your personal information to third parties.

3. Confidentiality of Health Information

Although massage therapy practices are not considered HIPAA-covered entities in all circumstances, Blooming Embers Therapy & Wellness treats your health information with strict confidentiality and professional discretion.

Health information is:

• Stored securely

• Accessible only to authorized personnel

• Used solely for treatment and operational purposes

We will not disclose your information without your written consent unless required by law (such as a court order or mandatory reporting obligations under Georgia law).

4. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your personal information from unauthorized access, misuse, or disclosure.

However, no method of electronic transmission or storage is 100% secure. While we take appropriate precautions, we cannot guarantee absolute security.

5. Third-Party Services

We may use third-party providers for:

• Online booking

• Payment processing

• Email communications

• Website hosting

These providers maintain their own privacy policies and security standards. We encourage you to review their policies when applicable.

6. Cookies & Website Tracking

Our website may use cookies or similar technologies to improve functionality and analyze usage. You may disable cookies in your browser settings if preferred.

7. Your Rights

Under applicable Georgia and federal law, you have the right to:

• Request access to your personal information

• Request correction of inaccurate information

• Withdraw consent for marketing communications

• Request deletion of personal information, subject to record retention requirements

Certain records may be retained as required by professional standards, insurance policies, or legal obligations.

8. Record Retention

Client records are maintained in accordance with Georgia professional standards and industry best practices. Records are retained for the legally appropriate duration and securely disposed of when no longer required.

9. Children’s Privacy

Services are provided to individuals 18 years or older unless written parental or guardian consent is obtained. We do not knowingly collect personal information from minors without proper authorization.

10. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Updates will be posted on our website with a revised effective date.