Body of Soul Lymphatic Massage Therapy, LLC (“BOS LMT,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal and health information in compliance with the Health Insurance Portability and Accountability Act (HIPAA) and applicable state and federal privacy laws.

This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or receive our services.

1. Information We Collect

We may collect the following types of information:

• Personal Information: Name, phone number, email address, billing information, and demographic data.
• Health Information: Medical history, post-operative details, medications, and any data you provide through intake or consent forms.
• Technical Information: Device type, browser, IP address, and site usage analytics for website performance and security.

2. How We Use Your Information

We use your information to:

• Schedule and provide services you request.
• Maintain secure client records in compliance with HIPAA.
• Process payments and manage appointments.
• Send appointment reminders and follow-up communications.
• Improve our services, website, and client experience.
• Comply with legal and regulatory requirements.

We do not sell or rent your personal information to third parties.

3. HIPAA Compliance

We are a HIPAA-covered entity and ensure all client information is stored and transmitted through HIPAA-compliant platforms such as Kalix Health.

• All staff and subcontractors receive annual HIPAA training.
• Access to client health information is restricted to authorized personnel only.
• Encryption and password protection are used for all electronic communications and records.

4. Sharing of Information

Your information may be shared only in the following situations:

• With your written consent.
• To comply with a court order, subpoena, or legal process.
• With other healthcare providers involved in your care, when authorized.
• To protect your safety or the safety of others in emergencies.

Third-party service providers (e.g., payment processors, Uber Health) must also comply with HIPAA or data protection standards.

5. Data Retention and Security

We retain records for the legally required period under Michigan law and HIPAA regulations.
We implement administrative, technical, and physical safeguards to prevent unauthorized access, alteration, or disclosure of your information.

Client Data Retention & Disposal Policy

• Body of Soul Lymphatic Massage Therapy, LLC (“BOS LMT”) retains client records only for as long as necessary to meet legal, regulatory, and business obligations.
• Health and treatment records are maintained for seven (7) years from the date of the client’s last service, in accordance with HIPAA (45 CFR 164.530(j)) and standard state record-keeping guidelines.
• Financial and transaction data are retained for a minimum of seven (7) years to comply with federal and state accounting requirements.
• Email and communication logs connected to appointment scheduling or client service follow the same seven-year retention window, after which they are securely deleted or archived in encrypted storage.
• When records reach the end of their retention period, BOS LMT permanently deletes or destroys them using industry-accepted, HIPAA-compliant disposal methods (secure shredding or digital erasure).
• Clients may request early deletion of non-medical personal data (such as marketing preferences) by contacting info@bodyofsoullmt.com, subject to legal and HIPAA restrictions.

6. Your Rights

You have the right to:

• Access your records.
• Request corrections or amendments to your information.
• Request restrictions on certain uses or disclosures.
• File a complaint with our Privacy Officer or with the U.S. Department of Health and Human Services if you believe your rights have been violated.

Requests must be made in writing to our Privacy Officer at the contact below.

7. Cookies and Analytics

Our website may use cookies or analytics tools to enhance user experience. These do not collect identifiable health information and can be disabled in your browser settings.

8. Links to Third Parties

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those external sites.

9. Updates to This Policy

We may update this Privacy Policy periodically. All updates will be posted on this page with a revised effective date.

10. Contact Us

If you have questions about this Privacy Policy or your information rights, contact:

Body of Soul Lymphatic Massage Therapy, LLC
Attn: Privacy & Compliance Officer
Email: info@bodyofsoullmt.com