Privacy Policy

Last updated: June 13, 2026

LYKE Massage is a mobile registered massage therapy practice operated by Josh Kennedy, a Registered Massage Therapist (RMT) in good standing with the College of Massage Therapists of Ontario (CMTO), serving Durham Region, Ontario. This policy explains what personal information the practice collects through this website and in the course of treatment, how it is used, and your rights over it.

As a regulated health professional, I am a health information custodian under Ontario's Personal Health Information Protection Act (PHIPA). Personal information collected through this site is also handled in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

What I collect

• Booking information. When you book a session, you provide your name, email address, phone number, and the appointment details. Booking is handled through Cal.com, the scheduling service this site uses.
• Health and intake information. Before or at your first session you complete an intake form covering your health history, symptoms, medications, and the areas you want treated. During treatment I keep clinical records (treatment notes) as required by CMTO standards.
• Contact form information. If you send a message or appointment request through the site, I receive the name, contact details, and message you submit.
• Technical and usage data. Like most websites, this site automatically records limited technical information such as your IP address, browser type, and the pages you visit, through standard server logs and the advertising tools described below.

How I use your information

• To schedule, confirm, and deliver your massage therapy sessions.
• To assess your needs, plan safe treatment, and keep the clinical records the CMTO requires.
• To issue official RMT receipts for your insurance claims.
• To respond to messages and appointment requests you send.
• To understand how the website is found and used, and to measure the response to advertising.

I do not sell your personal information, and I do not share your health information for marketing.

Your health information stays confidential

Your intake and treatment records are confidential and are protected under PHIPA and the CMTO's standards of practice. I use them only to provide and document your care. They are not disclosed to anyone else without your consent, except where the law requires or permits it (for example, a CMTO regulatory matter, a court order, or a risk to safety). You may withdraw your consent for me to use or share this information, subject to legal and regulatory record-keeping requirements.

Service providers I use

I rely on a small number of trusted services to run the practice. Each only receives the information needed for its function, and each is bound by its own privacy and security commitments:

• Cal.com handles appointment scheduling (your booking details).
• Supabase securely stores intake forms, contact submissions, and clinical records.
• Vercel hosts the website and processes standard server request logs.
• Google provides the email address used for the practice and, through Google Ads, the conversion and advertising tools described below.

Some of these providers may store or process data outside Ontario or Canada. Your information is handled under their security and privacy safeguards.

Cookies and advertising

This site uses Google Ads conversion tracking. When advertising is active, Google's tag may place cookies in your browser to measure whether an ad led to a booking and to help show relevant ads. This data is collected by Google under its own privacy policy. You can control or block cookies through your browser settings, and you can manage ad personalization at Google's My Ad Center. The site does not use third-party advertising trackers beyond Google.

How long I keep it

Clinical and financial records are retained for the period required by CMTO regulations and Ontario law (currently at least ten years from your last session, or for a minor, ten years from the day they turn eighteen). Booking and contact information is kept only as long as needed for the purpose it was collected, and then securely deleted.

Your rights

You have the right to ask what personal information I hold about you, to request a copy of your health records, to ask for a correction if something is inaccurate, and to ask questions about how your information is handled. To make a request, contact me using the details below. I respond to access and correction requests as required under PHIPA and PIPEDA.

Security

Clinical records are stored in access-controlled systems behind authentication, and the website is served over an encrypted (HTTPS) connection. No method of storage or transmission is ever completely secure, but I take reasonable steps to protect your information against loss, theft, and unauthorized access.

Changes to this policy

If this policy changes, the updated version will be posted here with a new date at the top of the page.

Contact

For any privacy question or request, contact:

Josh Kennedy, RMT
LYKE Massage, Whitby, Ontario
lykemassage@gmail.com

You also have the right to contact Ontario's Information and Privacy Commissioner about how your health information is handled.