Privacy policy
How your personal and health information is collected, used, protected and kept — and the rights you have over it.
Last updated: 29 August 2026.
Tiki Massage is a solo massage-therapy practice in Calgary, Alberta, run by a Registered Massage Therapist (RMT) and member of CMMOTA. Protecting the information you share — especially your health information — is part of the job, not an afterthought. This policy explains what is collected, why, who can see it, how it is safeguarded and how long it is kept.
The law we follow
Your information is handled in accordance with applicable Canadian privacy law, including the federal Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta's Personal Information Protection Act (PIPA) and the record-keeping and confidentiality standards expected of a registered massage therapist and CMMOTA member. Where these rules differ, the most protective standard is applied.
What information is collected
- Contact details — your name, phone number, email address.
- Appointment details — the service you want, preferred days and times, and any notes you choose to add.
- Health information — the health history you provide on the intake form and in person: relevant conditions, injuries, surgeries, medications, allergies and sensitivities, areas to avoid, and anything else needed to treat you safely.
- Treatment records — assessment findings, what was done in each session, your consent, and home-care suggestions.
- Payment and receipt records — amounts, dates and the information required to issue a receipt suitable for insurance.
Only what is needed for the purposes below is collected. You are never asked for more than that.
How it is collected
- Square Appointments. The external booking service collects the contact, service and timing details you submit when booking. Please do not enter detailed medical information in the booking fields.
- The new-client intake form. A short health-history and consent form completed before your first visit, hosted on Microsoft Forms.
- In person and by phone — during the appointment and any follow-up conversation.
Why it is used
- To schedule appointments and communicate with you about them.
- To assess you and provide safe, appropriate treatment.
- To keep the clinical records a registered massage therapist is required to keep.
- To issue receipts and support an insurance claim you choose to make.
- To meet professional, regulatory, insurance and legal obligations.
Your information is never sold, rented or traded, and it is not used for advertising.
Consent
Your information is collected, used and disclosed only with your consent, except where the law permits or requires otherwise. You may withdraw your consent at any time by telling us; note that without the health information needed to treat you safely, an appointment may not be able to go ahead. Withdrawing consent does not apply retroactively to records already made, which must be retained for the period described below.
Service providers
Two third-party services help run the practice. Each processes the information you submit through it, on Tiki Massage's behalf, and is bound by its own security and privacy terms:
- Square Appointments provides the online booking page and processes appointment details.
- Microsoft Forms hosts the new-client intake form.
These providers may store data on servers located outside Alberta or Canada, where it can be subject to the laws of those jurisdictions. To limit this, the Square booking fields are kept to scheduling basics, and the sensitive intake form is completed on Microsoft's platform rather than on this website. Clinical records themselves are kept by the practitioner, not by these providers. If you would rather not use the online intake form, the same information can be taken at the clinic instead.
When information is disclosed
Your information is disclosed only:
- to you, or to someone you authorise in writing (for example, another treating practitioner, or your insurer for a claim you submit);
- as required or permitted by law — for example a court order, a request from a regulatory body, or where disclosure is necessary to prevent a serious and imminent threat to someone's health or safety.
How it is protected
- The practitioner is the only person with access to client records.
- Paper records are kept in a secured location; electronic records are kept on password-protected, access-controlled devices and accounts.
- This website stores nothing itself, sets no advertising cookies, uses no analytics or trackers, and loads no third-party scripts or fonts. Traffic to the site is served over HTTPS.
- Information is disclosed to service providers and others only on a need-to-know basis.
How long it is kept
Online booking information is kept only as long as needed for scheduling, communication and applicable practice, financial or legal obligations.
Clinical records are kept for 10 years from the date of your last visit, in line with the record-keeping standard for a registered massage therapist. Financial and receipt records are kept as long as tax and insurance requirements demand. After the applicable period, records are securely destroyed.
Your rights
- Access — you can ask to see the personal and health information held about you.
- Correction — you can ask to have inaccurate information corrected.
- Questions and complaints — you can ask how your information is handled, or raise a concern, using the contact details below.
If you are not satisfied with the response, you may contact the Office of the Information and Privacy Commissioner of Alberta, or the Office of the Privacy Commissioner of Canada.
Changes to this policy
If practices change — for example if analytics or a different booking or intake tool is introduced — this policy will be updated and the "last updated" date changed before the new practice takes effect.
Contact
Questions about your information, or to make an access or correction request, call (403) 850-2818 or email tikimassage@shaw.ca. Please do not include detailed health information in an email.