Privacy Policy
1. Who we are
Total Body Flow Massage® ("we," "us," "our") is a luxury in-home massage service operated by Lavonne Ayoub, Master Massage Therapist, in Coeur d'Alene, Idaho. Mailing address: Coeur d’Alene, Idaho 83814 (full mailing address provided upon written request). Telephone: 208-277-7889. We serve clients across Coeur d'Alene, Hayden Lake, Dalton Gardens, Post Falls, Hayden, Rathdrum, Athol, Gozzer Ranch, Liberty Lake, and Spokane.
2. What information we collect
We collect only the information needed to schedule, deliver, and bill for sessions:
- Name, telephone number, email address, and home or office address (for in-home delivery).
- Health and contraindication information you voluntarily share at intake (kept confidential, used only for safe session delivery).
- Payment information processed by Square (we do not store credit card numbers ourselves; Square is PCI-DSS compliant).
- Booking history through Squareup Appointments (managed by Square's privacy policy).
- Standard server logs (IP, referrer, user agent) when you visit this website.
3. How we use your information
To schedule and deliver appointments, send appointment confirmations and reminders, process payments, send payment links via SMS where applicable, respond to inquiries, follow up on session experience, and comply with legal and tax record-keeping obligations. We do not sell or rent your information to third parties, and we do not share it for cross-context behavioral advertising. For details on the sessions and memberships you may book, see the in-home massage menu and Premier Wellness Memberships.
4. Third-party services
- Square / Squareup Appointments — booking and payment processing. Square's privacy policy: squareup.com/us/en/legal/general/privacy.
- Google Fonts — webfont delivery. May log IP addresses per Google's privacy policy: policies.google.com/privacy.
- Google Maps (where embedded) — location and directions. Subject to Google's privacy policy linked above.
- SMS / messaging carrier — standard wireless carrier message and data rates may apply when we send appointment confirmations or payment links by text.
- Analytics — none currently active. If we add Google Analytics, Meta Pixel, or any other tracking technology in the future, this policy will be updated and a cookie-consent notice will be added.
5. Cookies and similar technologies
This website does not set first-party cookies. Embedded fonts from Google Fonts and any embedded Squareup or maps content may set those services' standard cookies in some regions. You can block, delete, or manage cookies through your browser settings.
6. Data retention
Booking and payment records: retained per IRS and Idaho state tax record-keeping rules (typically up to 7 years). Health intake forms: retained per Idaho Board of Massage Therapy guidelines. Marketing and SMS communications: retained until you unsubscribe or request deletion. Website server logs: retained for a short period (typically 30 to 90 days) for security and abuse-prevention purposes.
7. Your rights
You may request a copy of the personal information we hold about you, ask us to correct or delete it, restrict its use, or opt out of any non-essential communications by contacting us at the phone number or email listed below. California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, the right to delete, the right to correct, and the right to opt out of the sale or sharing of personal information — we do not sell or share your personal information for cross-context behavioral advertising. Residents of the European Economic Area or United Kingdom have additional rights under the GDPR / UK GDPR, including data portability and the right to lodge a complaint with a supervisory authority. To exercise any right, contact us using the details in section 11.
8. Security
We use HTTPS site-wide, Square's PCI-DSS compliant payment processing, and physical safeguards on any paper intake forms (locked storage, restricted access). Electronic intake records are kept on access-controlled devices. No method of transmission over the internet or method of electronic storage is perfectly secure; we use commercially reasonable measures and notify affected clients of any breach as required by law.
9. Children
We do not knowingly collect information from anyone under 18. Massage services for minors are scheduled and consented to by a parent or guardian, and intake information for minors is provided by that parent or guardian.
10. Changes to this policy
We will update this page with any material changes and revise the "Last updated" date above. Material changes that affect existing clients will also be communicated by email or SMS where we have those contact details.
11. Contact
Questions, requests, or concerns about this policy: 208-277-7889 or lavonne@totalbodyflowmassage.com. Mailing address: Coeur d’Alene, Idaho 83814 (full mailing address provided upon written request). We aim to respond to verifiable privacy requests within 30 days.