top of page
Facial Massage

Your Privacy

Privacy Policy

​

Your privacy is very important to us. Accordingly, we have developed this Policy in order for you to understand how we collect, use, communicate, and disclose and make use of personal information. The following outlines our privacy policy.

​

  • Before or at the time of collecting personal information, we will identify the purposes for which information is being collected.

  • We will collect and use personal information solely with the objective of fulfilling those purposes specified by us and for other compatible purposes unless we obtain the consent of the individual concerned or as required by law.

  • We will only retain personal information as long as necessary for the fulfillment of those purposes.

  • We will collect personal information by lawful and fair means and, where appropriate, with the knowledge or consent of the individual concerned.

  • Personal data should be relevant to the purposes for which it is to be used, and, to the extent necessary for those purposes, should be accurate, complete, and up-to-date.

  • We will protect personal information by reasonable security safeguards against loss or theft, as well as unauthorized access, disclosure, copying, use, or modification.

  • We will make readily available to customers information about our policies and practices relating to the management of personal information.

​​

We are committed to conducting our business in accordance with these principles in order to ensure that the confidentiality of personal information is protected and maintained.

​

Credit Card Privacy

​

MassageBook protects credit card information by following industry-standard security and compliance practices:

PCI Compliance

MassageBook is PCI DSS (Payment Card Industry Data Security Standard) compliant. This means it adheres to strict rules required by credit card companies to ensure that sensitive payment data is processed and stored securely.

Secure Processing

  • MassageBook does not store raw credit card numbers on its servers.

  • All transactions are handled through integrated payment processors (such as Square or Stripe), which are fully PCI Level 1 certified—the highest level of certification available.

  • Credit card details are tokenized (replaced with a secure, unique identifier) so businesses never see or handle the actual card number.

Encryption

  • Credit card information is encrypted using SSL (Secure Socket Layer) / TLS protocols during transmission.

  • This prevents interception or unauthorized access when clients enter their payment details online.

Fraud Prevention

  • Built-in fraud monitoring and authentication tools from the payment processors help protect both businesses and clients from unauthorized use.

  • Sensitive client financial data is isolated from general business data to minimize exposure risk.

​

​

​

bottom of page