Privacy policy
Effective date: February 14, 2020
Last updated: September 20, 2026
Brooklyn Body Mechanic (“Brooklyn Body Mechanic,” “we,” “us,” or “our”) operates the website brooklynbodymechanic.com (the “Site”) and provides therapeutic and sports massage services from 649 Morgan Avenue, STE B3A, Brooklyn, NY 11222.
This Privacy Policy explains what information we collect through the Site and through the booking, payment, and communication tools connected to it; how we use that information; who we share it with; and the choices you have. Please read it together with our Cookie Policy, which describes the cookies and similar technologies we use.
By using the Site, booking an appointment, or contacting us, you agree to the practices described here. If you do not agree, please do not use the Site.
1. A note about treatment records
This policy covers information collected through the Site and our online tools. Clinical records created in the course of your massage therapy care — treatment notes, health history, and anything you discuss with your therapist during a session — are handled under separate professional confidentiality obligations that apply to licensed massage therapists in New York State, and are described in the notice provided to you in the office. Where the two overlap (for example, an intake form you complete online before your first appointment), the stricter protection applies.
2. Information we collect
2.1 Information you give us
- Contact and appointment details — name, email address, phone number, and the date, time, and service type of appointments you request or book.
- Health intake information — when you complete an intake or health history form, we collect information such as areas of pain or injury, relevant medical history, medications, activity level, treatment goals, and anything else you choose to share so that your therapist can provide safe and appropriate care.
- Consent and policy acknowledgments — records of intake forms, informed consent, and cancellation policy acknowledgments you sign.
- Payment information — when you pay for a session or purchase a gift card, your card details are collected and processed directly by our payment processor. We do not receive or store your full card number. We do receive transaction records such as amount, date, last four digits, and card brand.
- Communications — the content of emails, contact form submissions, text messages, and voicemails you send us.
- Email list signups — if you subscribe to our mailing list, your email address and any name or preferences you provide.
- Reviews, comments, and testimonials — anything you post publicly on the Site or submit for use as a testimonial.
2.2 Information collected automatically
When you visit the Site, certain information is collected automatically by our hosting, analytics, and advertising tools:
- IP address and approximate location derived from it (typically city or region level)
- Browser type and version, operating system, device type, and screen size
- Pages you view, links you click, time spent on pages, and the page or search that referred you
- Date and time of your visit
- Cookie identifiers and similar device identifiers
See our Cookie Policy for the specific technologies involved and how to control them.
2.3 Information from third parties
- Booking and scheduling platform — appointment and contact information you enter into [BOOKING PLATFORM NAME].
- Intake form platform — health history and intake information you complete on [INTAKE FORM PLATFORM NAME], which is hosted separately from this Site.
- Payment processor — transaction confirmations and limited payment metadata from Square and any other processor we use.
- Advertising and analytics platforms — aggregated performance data and, in some cases, limited audience information from Google and Meta (Facebook/Instagram).
- Review platforms and social media — publicly available information such as reviews you post about us, or messages you send to our Facebook or Instagram accounts.
3. How we use your information
| Purpose | Examples |
|---|---|
| Providing massage therapy services | Scheduling, confirming, and rescheduling appointments; reviewing your intake information so your therapist can plan and adapt treatment safely; maintaining continuity of care between sessions. |
| Payments and administration | Processing payments, issuing and redeeming gift cards, applying cancellation and no-show policies, keeping business and tax records. |
| Communicating with you | Answering questions, sending appointment reminders and confirmations, responding to reviews and feedback, sending service-related notices such as changes to hours or policies. |
| Marketing (with your consent where required) | Sending newsletters and promotional emails you have signed up for; showing ads for our services on Google, Facebook, and Instagram; measuring which ads and pages lead to bookings. |
| Improving the Site | Understanding which pages and blog posts are useful, diagnosing errors, testing changes, and improving navigation and page speed. |
| Security and legal compliance | Protecting against fraud, spam, and unauthorized access; enforcing our terms; complying with legal obligations, subpoenas, and professional licensing requirements; establishing or defending legal claims. |
4. How we treat health information
We do not use health intake information for advertising. Information about your pain, injuries, medical history, or treatment is used to deliver your care and for the administrative purposes described above. We do not sell it, and we do not share it with advertising networks or use it to build advertising audiences.
Health intake information is accessible only to your therapist and to staff who need it to schedule or administer your care. It is shared outside the practice only:
- with your written authorization — for example, if you ask us to send notes to a physician or physical therapist;
- with service providers who host our booking and records systems, under contracts that restrict their use of the information to providing services to us;
- where required by law, court order, or a lawful request from a regulatory or licensing authority; or
- where necessary to prevent a serious and imminent threat to health or safety.
[IF YOU BILL INSURANCE ELECTRONICALLY, ADD A HIPAA NOTICE OF PRIVACY PRACTICES REFERENCE HERE — SEE THE NOTES FILE.]
5. Cookies, analytics, and advertising
The Site uses cookies and similar technologies for functionality, analytics, and advertising. The full list and the controls available to you are in our Cookie Policy. In summary:
- Google Analytics and Google Site Kit help us understand how the Site is used. Google processes this data on our behalf. You can opt out using the Google Analytics Opt-out Browser Add-on.
- Google Tag Manager is used to deploy the tags above. It does not itself set cookies.
- Google AdSense displays ads on the Site. Google and its partners may use cookies to serve ads based on your prior visits to this and other websites. You can manage this at Google My Ad Center and aboutads.info/choices.
- Meta Pixel measures the performance of our Facebook and Instagram advertising and lets us show ads to people who have visited the Site. You can manage this in your Facebook Ad Preferences.
Intake and health history forms are not hosted on this Site. They are completed on a separate platform operated by [INTAKE FORM PLATFORM NAME], which does not carry our analytics or advertising tags. No information you enter into an intake form passes through Google Analytics, Google AdSense, or the Meta Pixel.
If you would prefer that no analytics or advertising tracking occur during your visit to the Site, use the controls described in the Cookie Policy or browse with tracking blocked.
6. How we share information
We do not sell your personal information, and we do not share it for cross-context behavioral advertising in exchange for money. Some advertising and analytics cookies described above may nonetheless be considered “sharing” or a “sale” under certain state privacy laws; see Section 10 for the choices available to California residents.
We share personal information in these circumstances:
| Recipient | Why |
|---|---|
| [BOOKING PLATFORM NAME] | Appointment scheduling, client records, reminders |
| [INTAKE FORM PLATFORM NAME] | Hosting and storing health intake and consent forms (delete this row if it is the same company as your booking platform) |
| Square, Inc. | Payment processing and gift cards |
| [EMAIL MARKETING PLATFORM NAME] | Sending newsletters and promotional email |
| [WEB HOST NAME] | Website hosting, backups, and security |
| Google LLC | Analytics, tag management, and advertising |
| Meta Platforms, Inc. | Advertising measurement and audiences |
| Professional advisors | Accountants, insurers, and attorneys, as needed |
| Legal and regulatory authorities | Where required by law or to protect legal rights or safety |
| A successor business | If the practice is sold, merged, or transferred, subject to this policy |
Service providers are permitted to use your information only to provide services to us, and are required to protect it.
7. Email and text messages
Appointment messages. If you book an appointment, we send confirmations, reminders, and occasional service notices by email or text. These are not marketing messages and are part of providing the service you requested. You can ask us to stop sending reminders at any time.
Marketing email. We send promotional email only to people who have opted in. Every marketing email includes an unsubscribe link, and we honor unsubscribe requests promptly. You can also email us to be removed.
Text messages. If you opt in to text messages, message and data rates may apply. Reply STOP to opt out or HELP for help. We do not sell or share mobile phone numbers collected for text messaging with third parties for their own marketing purposes.
8. How long we keep information
- Client and treatment records — retained for the period required by New York professional recordkeeping rules and our insurance obligations, and generally no less than six years from the date of the last session. [CONFIRM THE RETENTION PERIOD YOUR MALPRACTICE CARRIER AND NY RULES REQUIRE.]
- Financial and transaction records — retained as required for tax and accounting purposes, generally seven years.
- Email marketing records — retained until you unsubscribe, plus a suppression record so we do not email you again.
- Website analytics data — retained according to the settings in our analytics tools, typically 14 months or less.
- General correspondence — retained as long as needed to handle your inquiry and for a reasonable period afterward.
9. Security
We maintain a data security program with administrative, technical, and physical safeguards appropriate to the size of our practice and the sensitivity of the information we hold, consistent with the New York SHIELD Act. These include limiting access to client records to people who need it, using reputable vendors who encrypt data in transit and at rest, keeping devices password-protected and updated, and securing paper records in the office.
No system is perfectly secure. If a breach affecting your private information occurs, we will notify you and the appropriate New York authorities as required by law.
10. Your choices and rights
10.1 Everyone
Regardless of where you live, you may:
- Ask what information we hold about you and request a copy
- Ask us to correct information that is inaccurate
- Ask us to delete information, subject to our recordkeeping obligations for treatment and financial records
- Unsubscribe from marketing email or text messages
- Block or delete cookies using the controls in our Cookie Policy
To make a request, email jonny@brooklynbodymechanic.com. We may need to verify your identity before acting on a request about client records.
10.2 California residents
If you are a California resident, the California Consumer Privacy Act may give you the right to know the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of third parties we disclose it to; to request deletion or correction; to opt out of the sale or sharing of personal information for cross-context behavioral advertising; and not to be discriminated against for exercising these rights.
We do not sell personal information for money. To opt out of advertising cookies that may constitute “sharing,” use the cookie controls on the Site, the opt-out links in Section 5, or send a Global Privacy Control signal from your browser — we honor GPC as a valid opt-out request for the browser that sends it.
To exercise any of these rights, email jonny@brooklynbodymechanic.com with “California Privacy Request” in the subject line. An authorized agent may submit a request on your behalf with written proof of authorization.
10.3 Other states
Residents of other states with comprehensive privacy laws may have similar rights to access, correct, delete, and opt out. We apply the process above to all such requests regardless of where you live.
11. Do Not Track and Global Privacy Control
Browsers may send a “Do Not Track” signal, which has no agreed-upon standard, and we do not respond to it. We do honor the Global Privacy Control (GPC) signal as an opt-out of advertising cookies for the browser that sends it.
12. Children
The Site is not directed to children under 13, and we do not knowingly collect personal information from children under 13 through the Site. Massage therapy for a minor client requires the involvement and consent of a parent or legal guardian, who provides any intake information on the minor’s behalf. If you believe a child has provided us information through the Site, contact us and we will delete it.
13. Links to other sites
The Site links to third-party websites and platforms, including our booking system, Square, and our social media pages. We are not responsible for their privacy practices. Review their policies before providing information to them.
14. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be announced on the Site. Continued use of the Site after a change means you accept the revised policy.
15. Contact us
Brooklyn Body Mechanic
649 Morgan Avenue, STE B3A
Brooklyn, NY 11222
Phone: 718-313-5231
Email: jonny@brooklynbodymechanic.com
