Security

Your details

• Records are stored in Sydney and sent over an encrypted connection (HTTPS).
• Names, phone numbers, addresses, health notes, and signatures are encrypted where they are stored.
• A phone number used to find a booking is stored as a one-way hash, not as the number itself.
• A booking link uses a random token that is stored only as a hash.
• Passwords are stored as a hash. A reset email does not include the password.
• Health forms and treatment notes are not placed on the public pages or on a public cache.
• A firewall sits in front of the site and slows a flood of requests.
• Two people on one visit each have their own record. If they share a mobile, texts still go to that number, and the second person's name stays on their own card.
• A child who visits with a parent has a separate record, so the parent's details are not replaced.

Cards

This website does not take a card payment. Gift vouchers and treatment packs are bought at the studio or by phone. We do not store a card number here.

What this is not

Massage here is not a medical device, and this website does not send a health-fund claim. We have not published a SOC 2 report or an ISO certificate. If there is a serious breach, we follow the steps in the privacy policy.

Related: privacy policy, terms of use, and the disclaimer.