Privacy Policy

1. What we collect

When you request an appointment: your name, email address, phone number, the service you asked for, your preferred date and time, and anything you choose to write in the notes field.

If you create an account: the above, plus a password (stored only as a scrypt hash — we never hold the password itself), and any care preferences you add, such as massage pressure, skin sensitivities or allergies.

Automatically: a session cookie, if you sign in. Nothing else. There is no analytics package, no advertising pixel and no visitor tracking on this site.

2. Why we collect it

To contact you about an appointment you asked for, to prepare your treatment safely, and to keep a record of what you have booked.

Care preferences exist so Martha knows about a sensitivity or allergy before she starts, rather than finding out during. You are never required to provide them.

We do not send marketing email. We will not add you to a mailing list.

3. Cookies

One cookie, named gwm_session, is set when you sign in. It holds a random token, is marked HttpOnly and SameSite=Lax, and expires after 30 days. It exists solely to keep you signed in.

There are no advertising, analytics or third-party tracking cookies on this site.

4. Third parties

Google Maps. The map on our home and About pages is embedded from Google. It loads only when you scroll to it. When it loads, Google receives your IP address and may set its own cookies, under Google's privacy policy. If you would rather not load it, do not scroll to that section, or use your browser's content blocking.

Appointment alerts. When you send a booking request, its details are forwarded to Martha through an automated notification service so she sees it promptly. It is not shared with anyone else, and never sold.

Fonts. Typefaces are served by Google Fonts, which receives your IP address when they load.

We do not sell or share your personal information as those terms are defined by the California Consumer Privacy Act. We have never done so.

5. Where it is kept, and for how long

Your information is stored in a database on a private server, not in a third-party booking platform. Backups are taken daily and kept for fourteen days.

Appointment records are kept while you remain a client and for three years afterwards, which is the period in which questions about a past treatment realistically arise. Account details are kept until you ask us to delete them.

6. Your rights

Under California law you may ask what personal information we hold about you, ask for a copy, ask us to correct it, and ask us to delete it. You will not be treated differently for asking.

Email or call Martha using the details below. There is no form to fill in. We will respond within 45 days, and normally far sooner.

Deleting your account removes your profile and care preferences. Records of appointments already completed are retained as described above, since they are part of the practice's own business records.

7. Children

This is a women's practice and is not intended for anyone under 18. We do not knowingly collect information from children.

8. Changes

If this policy changes materially, the date at the top of this page changes with it. Significant changes will be flagged on the booking page.

9. Contact

Questions about this policy, or about your information, go directly to Martha — there is no support desk in between.

glowithmartha@gmail.com
+1 (760) 960-0147
3505 Camino del Rio S #263, San Diego, CA 92108