Privacy policy.
How Valor Massage handles your information.
- We collect only what we need to care for you.
- We never sell your information.
- Questions: contact@valormassage.com
The full text.
Scroll inside the box to read it all.
Website Privacy Policy
Privacy Policy
Last updated: April 2026
HIPAA Notice of Privacy Practices
Valor Massage is a HIPAA-covered entity. Our health-data handling practices are governed by a dedicated Notice of Privacy Practices (NPP) published separately from this website privacy policy.
View Our HIPAA Notice of Privacy Practices >
Introduction
Valor Massage is committed to protecting your privacy and ensuring that your personal and health-related information is handled with care, transparency, and respect. This Privacy Policy explains how we collect, use, and protect your information when you visit our website or use our services, including booking appointments and completing intake forms. For information specifically about how we handle Protected Health Information (PHI) under HIPAA, please review our Notice of Privacy Practices >.
Information We Collect
We may collect personal information such as your name, email address, phone number, and appointment details when you interact with our website or services. In addition, we may collect information submitted through intake forms, which can include relevant health or medical details needed to safely and effectively provide massage services. We also automatically collect certain technical data like your IP address, browser type, and pages visited to improve our website experience.
How We Use Your Information
We use your information to provide and manage our services, including scheduling appointments, sending confirmations or reminders, and delivering intake forms before your visit. Your information also helps us communicate with you, improve our website and service quality, maintain proper records, and comply with any applicable legal or healthcare-related requirements.
Sharing of Information & Business Associate Agreements
Valor Massage does not sell or rent your personal information to third parties. We may share your information only when necessary, such as with trusted service providers that help operate our business (e.g., scheduling systems, electronic health record platforms, or email platforms), with healthcare or VA partners when required for referrals or authorizations, or when required by law or to protect our legal rights.
HIPAA Business Associate Agreements (BAAs): Every third-party vendor that may access, process, or store Protected Health Information (PHI) on our behalf is required to execute a HIPAA-compliant Business Associate Agreement (BAA). This legally binding contract mandates that our vendors implement equivalent administrative, physical, and technical safeguards to protect your health data, and it defines their obligations regarding breach notification and data handling. Our named business associate is Personameant Solutions LLC, which has executed a BAA with Valor Massage LLC.
Data Security & Encryption Standards
We take reasonable administrative, technical, and physical measures to protect your personal and health information from unauthorized access, loss, misuse, or disclosure. While we strive to use commercially acceptable means to protect your data, no method of transmission over the internet or electronic storage is completely secure.
HIPAA Technical Safeguards: All electronic Protected Health Information (ePHI) is encrypted both in transit (using TLS 1.2+ protocol) and at rest (using AES-256 bit encryption). Access to health data is governed by role-based authorization, automated session timeouts, multi-factor authentication, and audited access logs in compliance with the HIPAA Security Rule.
Breach Notification Procedures
In the event of a breach of unsecured Protected Health Information, Valor Massage follows HIPAA Breach Notification Rule requirements. We will notify affected individuals in writing without unreasonable delay and no later than 60 days following discovery of the breach. Notifications will include the nature of the breach, the types of information involved, steps you can take to protect yourself, what we are doing in response, and contact procedures for further information. For full details, see our Notice of Privacy Practices >.
Cookies & Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, and understand how users interact with our site. These tools help us improve performance and usability. You can choose to disable cookies through your browser settings, but some features of the site may not function properly.
Data Retention
We retain your personal and service-related information only for as long as necessary to fulfill the purposes outlined in this policy, including providing services, maintaining records, and complying with legal, tax, or healthcare requirements. When information is no longer needed, we take steps to securely dispose of it.
Your Rights
You have the right to access the personal information we hold about you and request corrections if any information is inaccurate or incomplete. You may also request that we delete your information, subject to any legal or record-keeping obligations. Additionally, you can opt out of receiving promotional communications from us at any time.
HIPAA Patient Rights: Under HIPAA, you also have the right to inspect and copy your medical records, request amendments, receive an accounting of disclosures, request restrictions on certain uses of your PHI, request confidential communications, and file a complaint with the U.S. Department of Health and Human Services (HHS). These rights are detailed in our Notice of Privacy Practices >.
