Privacy Policy
Last updated: July 22, 2026
This privacy policy describes how Dajani Massage LLC ("we," "us," or "our"), operated by David King, LMT (License #MT-2026-0096), collects, uses, stores, and protects your personal and health information when you use our website (dajani.art) and our massage therapy services.
We take your privacy seriously. We do not sell, share, or trade your personal information with third parties. We do not use third-party data processors to handle your health information.
1. Information We Collect
We collect the following categories of information:
- Contact Information: Full name, preferred name, date of birth, phone number, email address, and home address (service location).
- Emergency Contact Information: Name, phone number, and relationship of your designated emergency contact.
- Health Information: Medical history, current medications, health conditions, areas of concern, areas to avoid, pregnancy status, and physician information — as provided by you through our intake form.
- Consent Records: Your initials and signature confirming informed consent, assumption of risk, and acknowledgment of policies.
- Booking Information: Preferred service type, session duration, scheduling preferences, and communication preferences.
2. How We Collect Your Information
We collect information through the following methods:
- Booking Form: When you submit a booking request through our website, basic contact and scheduling information is sent to us via your own email client (mailto link). No server-side form processing occurs.
- Intake Form: When you complete our client intake form (accessible by direct link only), your health and personal information is encrypted in your browser before being sent via your own email client. The encrypted data can only be read by David King, LMT using a private decryption key.
- In-Person: At your session, we may collect your signature on consent and liability documents.
3. Encryption and Data Security
Your intake form data is protected by the following security measures:
- End-to-End Encryption: Your health information is encrypted in your browser using RSA-2048 asymmetric encryption combined with AES-256-GCM symmetric encryption before it leaves your device. This is the same standard used in banking and military communications.
- No Third-Party Processing: Encrypted data is transmitted via your own email application directly to our encrypted email inbox (Proton Mail). No third-party servers process, store, or have access to your unencrypted health information at any point.
- Encrypted Storage: Emails containing your encrypted intake data are stored in Proton Mail, which provides zero-access encryption at rest.
- Decryption Access: Only David King, LMT possesses the private key and passphrase required to decrypt your information. No employees, contractors, or third parties have access to this key.
4. Local Storage on Your Device
Our intake form uses your browser's localStorage feature to save your progress as you fill out the form. This means:
- Your answers are saved locally on your device only — not on any server.
- If you close the page and return, your progress will still be there.
- This data remains on your device until you clear your browser data or we clear it upon successful submission.
- No cookies are used. No tracking scripts are present. No analytics services are loaded on our intake form.
You are informed of this local storage use via a banner when you first access the intake form. Use of the form after acknowledging the banner constitutes your consent to local storage of form progress on your device.
5. How We Use Your Information
We use your information solely for the following purposes:
- To provide safe and effective massage therapy tailored to your health needs.
- To identify contraindications or conditions that may affect your session.
- To contact you regarding scheduling, appointment confirmation, or follow-up care.
- To contact your emergency contact in the event of a medical emergency during your session.
- To maintain continuity of care across sessions.
- To comply with applicable New Mexico laws and regulations governing massage therapy.
6. Information Sharing and Disclosure
We do not sell, rent, trade, or share your personal or health information with any third party, except in the following limited circumstances:
- Legal Requirement: If required by New Mexico state law, court order, or subpoena.
- Medical Emergency: If necessary to protect your life or safety during a session, we may share relevant health information with emergency medical personnel.
- With Your Written Consent: If you provide explicit written authorization for us to share information with a specific party (e.g., your physician).
7. Data Retention
We retain your records as follows:
- Intake forms and signed consent documents: Retained for a minimum of six (6) years from the date of your last session, in accordance with New Mexico's statute of limitations for contract claims.
- Encrypted email submissions: Retained in our encrypted email inbox for the same period.
- Session notes (if any): Retained for six (6) years from date of last session.
After the retention period, records are permanently deleted (digital) or securely destroyed (physical).
8. Your Rights
As our client, you have the right to:
- Access: Request a copy of the personal and health information we hold about you.
- Correction: Request correction of inaccurate information in your records.
- Deletion: Request deletion of your records, subject to our legal retention obligations. If the six-year retention period has passed, we will delete your records upon request.
- Withdraw Consent: Withdraw your consent to future data collection at any time by notifying us. This does not affect the lawfulness of data collected prior to withdrawal.
- Data Portability: Request your intake data in a readable format.
To exercise any of these rights, contact us at king@dajani.art.
9. Third-Party Services
Our website (dajani.art) is hosted on Cloudflare Pages. Cloudflare may collect standard server logs (IP address, browser type, access time) as part of their hosting service. Cloudflare's privacy policy is available at cloudflare.com/privacypolicy.
Our intake form loads a client-side PDF library (jsPDF) from a content delivery network for the purpose of generating documents locally in your browser. This library executes entirely in your browser — no personal data is transmitted to the CDN provider.
We do not use Google Analytics, Facebook Pixel, or any other tracking or advertising technologies on any page of our website.
10. Payment Information
Payment is processed at the time of service via Square. We do not store your payment card information. Square's privacy policy governs their handling of payment data and is available at squareup.com/privacy.
11. Children's Privacy
Our services are available only to individuals 18 years of age or older. We do not knowingly collect information from minors. If you believe we have inadvertently collected information from a person under 18, please contact us immediately at king@dajani.art and we will delete it.
12. Security Measures Summary
- RSA-2048 + AES-256-GCM encryption on all health data before transmission
- Proton Mail (zero-access encrypted email) for storage
- No third-party processors for health information
- No server-side storage of unencrypted client data
- Physical records (if any) stored in a locked location
- Passphrase-protected decryption key accessible only to David King, LMT
13. New Mexico Law
This privacy policy and our data practices are governed by the laws of the State of New Mexico. While we are not a HIPAA-covered entity (we do not bill insurance or transmit health information electronically for insurance purposes), we voluntarily implement security standards that meet or exceed HIPAA's technical safeguard requirements.
Massage therapy in New Mexico is governed by NMSA 1978, Chapter 61, Article 12C. Our data collection and retention practices comply with all applicable state regulations for licensed massage therapists.
14. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or applicable law. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
For material changes that affect how we handle your health information, we will make reasonable efforts to notify affected clients directly.
15. Contact Us
If you have questions about this privacy policy, want to exercise your data rights, or have concerns about how your information is handled, contact us:
- David King, LMT
- Dajani Massage LLC
- Email: king@dajani.art
- License: MT-2026-0096