Privacy and Health-Record Access Policy

Effective date: August 9, 2026

WHO WE ARE AND HOW TO CONTACT US

Jules Body Work is a massage therapy practice in Katy, Texas. Massage services are provided by Julie Martinez, Licensed Massage Therapist, Texas License #138880.

Privacy and health-record questions or requests may be directed to Jules Body Work at JulesBodyWork7@gmail.com, 832-704-6658, or 511 S Mason Rd, Suite 105, Katy, TX 77450.

INFORMATION WE COLLECT

Depending on how you use the website and services, Jules Body Work may collect:

• Account and contact information, including name, email address, phone number, verified-login identifiers, and account-security settings.
• Appointment, waitlist, package, loyalty, referral, review, and transaction records.
• Payment and refund references, amounts, statuses, and receipts supplied by Square. Card details are entered in Square-hosted payment fields and are not stored by Jules Body Work.
• Contact-form submissions, secure portal messages, communication preferences, and customer-support records.
• Intake and treatment information, including health history, treatment goals, requested or avoided body areas, pregnancy disclosure, consultation documents, visit attestations, medical-clearance files, and treatment notes.
• An emergency contact when voluntarily provided.
• Security, audit, rate-limit, application-verification, and limited performance records needed to operate and protect the service.

The practice currently accepts clients who are at least 18 years old.

HOW WE USE INFORMATION

Information is used to authenticate accounts; schedule and administer appointments; assess whether massage may safely proceed; prepare and retain signed consultation and treatment records; process and reconcile Square payments and refunds; administer packages, rewards, waitlists, reviews, and communications; answer requests; prevent misuse; maintain required business and treatment records; and comply with applicable law.

Optional marketing email is sent only when the account has opted in and includes an unsubscribe method. Unsubscribing from marketing does not stop appointment, intake, payment, refund, account, or security notices.

The body-map recommendation feature uses only bounded catalog and body-area identifiers and related structured choices. It does not send names, email addresses, free-text intake answers, health-history answers, treatment notes, or clearance documents to the recommendation model.

TREATMENT INFORMATION AND ELECTRONIC DISCLOSURE

Intake answers, consultation documents, clearance files, visit attestations, treatment notes, and related records are protected treatment information. Access is limited to the client and authorized practice personnel according to role. Routine email notices do not include health details and instead direct the recipient to the secure portal.

Protected information may be electronically disclosed for treatment, payment, health-care operations, when authorized by the client, or when otherwise permitted or required by law. When separate authorization or notice is legally required, Jules Body Work will obtain or provide it before the applicable disclosure.

SERVICE PROVIDERS

The booking application uses Google Firebase and Google Cloud for authentication, application verification, hosting, database and file storage, backups, and server operations; Square for payment entry, processing, refunds, receipts, and reconciliation; Resend for transactional and opted-in marketing email; Cloudinary for approved website media; Google Gemini for the limited structured recommendation feature described above; and Elfsight for an Instagram presentation widget when configured.

These providers receive only the information reasonably needed to perform their services. Information may also be disclosed to professional advisers, regulators, law enforcement, or other parties when authorized by the client or required by law.

The booking application does not sell personal or protected treatment information, use it for targeted advertising, or use it to profile clients for decisions producing legal or similarly significant effects.

RETENTION

Signed intake, consultation, visit-attestation, treatment-note, medical-clearance, secure-message, billing-related, and audit records are assigned a seven-year retention class. Intake drafts expire after 30 days. Published policy versions are immutable and permanently versioned. Other operational records are retained only as reasonably necessary for the service, security, accounting, dispute resolution, and legal obligations. Archiving an account disables sign-in but does not delete records that must be retained.

SECURITY

The application uses encrypted transport, verified Firebase sessions, role-based access, authenticator-app MFA for full-access administrators, Firebase App Check, restricted origins, private storage controls, server-only operational mutations, signed and replay-safe webhooks, immutable audit records, backups, and recovery controls. No online system can guarantee absolute security.

YOUR CHOICES AND PRIVACY REQUESTS

A signed-in client can update profile and communication preferences, unsubscribe from optional marketing, and archive the account after a recent sign-in. Applicable law may provide rights to access, correct, delete, or obtain a copy of certain personal information, subject to treatment-record, billing, security, fraud-prevention, retention, and other lawful exceptions.

Submit a privacy request or appeal to JulesBodyWork7@gmail.com with the subject “Privacy Request” or “Privacy Appeal,” or call 832-704-6658. Jules Body Work will verify the requester’s identity using the authenticated account and/or contact information already on file. A legally authorized representative must provide reasonable proof of authority. A response, extension, denial explanation, or appeal decision will be provided within the time required by applicable law.

HOW TO REQUEST HEALTH CARE RECORDS

1. Send a written request to JulesBodyWork7@gmail.com with the subject “Health Records Request,” deliver it in person, or mail it to Jules Body Work, 511 S Mason Rd, Suite 105, Katy, TX 77450. 2. Include your full legal name, the email address or phone number associated with your account, the records or date range requested, and whether you prefer a secure electronic copy, pickup, or another available format. Do not include diagnosis details in ordinary email. 3. Jules Body Work will respond through the secure account or contact information already on file to verify identity. A representative must provide reasonable proof of legal authority. 4. After verification, records will be provided through a secure electronic method, in-person pickup, mail, or another agreed method. 5. Jules Body Work will respond within the period required by law, including by the 15th business day when Texas Health and Safety Code section 181.102 applies. Routine secure electronic copies are provided without charge. Any legally permitted reproduction or postage fee will be disclosed before fulfillment. If a request cannot be fulfilled in whole or in part, Jules Body Work will provide the reason and available review or appeal instructions.

Texas law provides certain rights regarding privacy of and access to health care records (Texas Health & Safety Code, Chapter 181, Medical Records Privacy).

A complaint about protected-health-information privacy may be submitted to the Texas Office of the Attorney General, Consumer Protection Division: https://www.texasattorneygeneral.gov/consumer-protection/file-consumer-complaint

A possible violation of a law or rule enforced by the Texas Department of Licensing and Regulation may be reported at https://www.tdlr.texas.gov/complaints/ or by calling 800-803-9202.

POLICY CHANGES

Material changes use a new immutable policy version. The version accepted with a signed intake remains recorded with that intake. New language applies prospectively when displayed for a later intake, acknowledgement, or booking, except when applicable law requires different treatment.