Privacy Policy

Introduction
Asante Bodyworks (“we”, “us”, “our”) provides therapeutic massage services from a home-based studio and via mobile appointments at clients’ locations in Vancouver, British Columbia, Canada. Our website and online booking are built on the Wix platform. This Privacy Policy explains how we collect, use, disclose, and protect personal information.

Applicable Laws
We handle personal information in accordance with British Columbia’s Personal Information Protection Act (PIPA) and applicable federal privacy laws (including PIPEDA where applicable). If you access our services from outside Canada, you consent to transfer and processing of your information in Canada and by our third-party service providers.

Information We Collect
a. Information you provide directly

Contact details: name, email, phone, postal address.

Booking information: appointment date/time, service requested, therapist notes, client preferences.

Health and medical information: medical history, current conditions, medications, contraindications — collected only as needed for safe treatment and with your consent.

Payment and billing details: billing name, billing postal code; full card numbers, CVV, and other sensitive card data are processed by payment processors (Wix Payments/Stripe) and are not stored by Asante Bodyworks. We may retain tokenized payment references or the last four digits for record-keeping and receipts.

Communications: messages, feedback, testimonials you submit.

b. Information collected automatically

Technical and usage data: IP address, device and browser type, pages visited, referral source, timestamps, and cookies (set by Wix and third-party services) used for site functionality, analytics, and fraud prevention.

How We Use Your Information
We use personal information to:

Create and manage bookings and client records.

Provide, plan and adapt therapeutic services safely.

Process payments and issue invoices/receipts.

Send appointment confirmations, reminders, follow-ups, and administrative notices.

Respond to inquiries, feedback or complaints.

Meet legal, tax, or insurance requirements.

Improve our website and services; with consent, send marketing and promotions.
We limit use to purposes compatible with the reason the data was collected or as permitted by law.

Legal Basis and Consent
Where required, we obtain your consent to collect and use sensitive information (e.g., health information). Under PIPA/PIPEDA we rely on consent, contractual necessity (to deliver services), and legal obligations. You may withdraw consent for non-essential uses; withdrawal will not affect processing required to provide services or to meet legal obligations.

Sharing and Disclosure of Information
We may share personal information with:

Service providers and processors: Wix (website hosting, forms, booking system), Wix Payments/Stripe (payment processing), Google Workspace (email), and accounting or scheduling software. These providers process data under contract and are required to protect it.

Third parties when required by law, to respond to legal process, or to protect rights, safety, or property.

Health or insurance professionals or regulators when required or where you have consented.
We do not sell or rent personal information.

Cross-Border Transfers
Some third-party services (including Wix and payment processors) may store or process data on servers located outside Canada (for example, the United States or Europe). By using our services you consent to such transfers. These providers employ industry-standard safeguards.

Data Retention
We retain client health records and treatment notes for at least seven (7) years after the date of the last appointment in accordance with common BC professional record-keeping guidance, or longer where required by law. Financial and billing records are retained for the period required by tax law. Other personal data is retained only as necessary for the purposes described or to comply with legal obligations.

Security Measures
We take reasonable administrative, technical, and physical measures to protect personal information, including use of TLS/SSL for website traffic, access controls, password protections, device encryption where feasible, and relying on Wix and payment processors’ PCI-compliant infrastructure for payment data. No system is perfectly secure; if a breach affecting your data occurs, we will follow applicable breach notification requirements.

Cookies and Tracking Technologies
Our site uses cookies and similar technologies provided by Wix and permitted third parties for essential site functions, analytics, performance, and fraud prevention. You can control cookie settings through your browser; blocking cookies may limit site functionality.

Minors
Our services are intended for adults (18+). We do not knowingly collect personal information from minors. If you believe we have collected information about a minor without appropriate consent, contact us so we can delete it.

Your Rights and Choices
Subject to applicable exemptions and verification, you may:

Request access to personal information we hold about you.

Request correction of inaccurate or incomplete information.

Request deletion of information that is no longer required.
 

Withdraw consent for non-essential processing and opt out of marketing communications.
To exercise rights, contact us (see section 15). We will respond within 30 days or as required by applicable law. We may require identification and may retain information as required by lawThird-Party Links and Social Media
a. Our site may link to third-party sites (social media, partners). We are not responsible for their privacy practices. Review their privacy policies before providing personal information
b. Changes to This Privacy Policy: We may update this Policy. Material changes will be posted on this page with an updated “Last updated” date; where required, notice will be provided.