1. Information We Collect
Account Information
- Email address (required for account creation)
- Phone number (optional)
- Account type (provider or client)
Provider Profile Information
- Professional bio and description
- Profile photo
- Service listings (types, prices, durations)
- Location (country and city)
Payment Information
- Cryptocurrency wallet addresses (for crypto payments)
- Bank transfer details (stored securely)
- Transaction references
2. How We Use Your Information
- Account management: To create and maintain your account, verify your identity, and process authentication.
- Service delivery: To display provider profiles in the directory and enable clients to find providers.
- Payment processing: To manage subscription payments and verify transactions.
- Communication: To send account-related emails (verification, password reset, payment confirmations).
- Platform improvement: To understand usage patterns and improve our service.
3. Information Sharing
We do not sell your personal information. We may share information in the following circumstances:
- Public profiles: Provider profile information (bio, services) is publicly visible in the directory.
- Legal requirements: When required by law, court order, or government regulation.
- Platform protection: To protect the rights, property, or safety of the Platform and its users.
4. Data Security
- Passwords are hashed using industry-standard algorithms (PBKDF2).
- All data is transmitted over encrypted connections (HTTPS/TLS).
- Bank account details are stored in encrypted form.
- Access to personal data is restricted to authorised administrators.
5. Data Retention
We retain your account data for as long as your account is active. When you delete your account, your personal data will be removed within 30 days. Anonymised usage data may be retained for analytical purposes.
6. Your Rights (GDPR)
If you are located in the European Economic Area, you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate data.
- Erasure: Request deletion of your data ("right to be forgotten").
- Portability: Request your data in a machine-readable format.
- Objection: Object to processing of your data for certain purposes.
- Restriction: Request restriction of processing in certain circumstances.
To exercise any of these rights, contact us at privacy@massagemarketplace.com.
7. Cookies
We use essential cookies for session management and CSRF protection. These cookies are necessary for the Platform to function and cannot be disabled. We do not use tracking or advertising cookies.
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. Continued use of the Platform constitutes acceptance of the updated policy.