Privacy Policy

Who we are

Warm Working Hands is a service of Universal Health & Fitness, LLC, a Utah limited liability company located at 144 W Brigham Rd Ste D5, St. George, UT 84790. In this policy, "we", "us", and "our" mean Universal Health & Fitness, LLC.

We operate a booking platform that connects clients with independent licensed massage therapists. Therapists rent treatment time from us and provide services under their own professional judgment and licensure.

Information we collect

Information you give us

If you book a session as a client, we collect:

• Your first and last name, email address, and phone number
• Your date of birth, used to confirm you are old enough to book
• Details of the sessions you book, including the service, therapist, location, date and time, and any tip you choose to add
• A record that you accepted our liability waiver, including which version you accepted and when
• Any review or feedback you choose to submit

If you work with us as a massage therapist, we also collect:

• Your mailing address, start date, and professional licensing information
• Identity and business information required to verify you for payouts, collected and held by Stripe on our behalf
• Bank account information used to pay you, and to collect the treatment-time fees you owe us
• The services you offer, your pricing, and the treatment time you purchase

Payment and bank account information

We never see or store your full card number or full bank account number. All payment and payout processing is handled by Stripe, Inc. When you save a card, our systems keep only a Stripe reference token, the card brand, and the last four digits so you can recognize it.

Therapists connect a bank account through Stripe Financial Connections. When you use it, you authenticate directly with your bank through Stripe. Stripe returns a secure reference to the account, along with limited details such as the account holder name, account type, and the last four digits. We use that information only to:

• Verify that the account belongs to you and is valid for ACH transfers
• Debit the treatment-time fees you have authorized us to collect
• Send you the earnings you are owed

We do not use bank account information for marketing, we do not sell it, and we do not share it with anyone other than Stripe and our payment processing partners. Stripe's handling of this data is governed by the Stripe Privacy Policy.

Information we collect automatically

• Basic technical information such as IP address, browser type, and pages visited, used to keep the site secure and working
• A session cookie that keeps you signed in. We do not use advertising or cross-site tracking cookies.
• An internal activity log of significant actions taken in an account, kept so we can investigate disputes and protect against fraud
• Error diagnostics when something breaks, so we can find and fix it

Health information

Massage therapy may involve discussing your physical condition, injuries, or areas of discomfort. Any such information you share is used only to deliver your session safely and is available only to the therapist providing that session and to staff who need it to support your care.

We are not a covered entity under HIPAA and this platform is not a medical record system. Please do not submit medical records or diagnostic information through the site.

How we use your information

• To create your account and let you sign in
• To take bookings, process deposits and balances, and pay therapists
• To send you transactional messages such as confirmations, reminders, receipts, and password resets
• To respond to questions and provide support
• To prevent fraud and abuse, including bot protection on public forms
• To meet our tax, accounting, and legal obligations

We do not sell your personal information, and we do not share it with third parties for their own advertising.

Who we share information with

We share only what each provider needs in order to do its job for us:

• Stripe — payments, payouts, identity verification, and bank account connections
• Amazon Web Services — hosting and delivery of transactional email
• Laravel Cloud — application hosting infrastructure
• Google — reCAPTCHA Enterprise for bot protection, and Google Business Profile if you choose to leave a public review
• Sentry — error monitoring and diagnostics

We may also disclose information where we are legally required to, or where it is necessary to protect the safety of our clients, therapists, or staff. If our business is sold or merged, account information may transfer as part of that transaction.

The therapist you book with receives your name, contact details, and the details of your appointment so they can prepare for and deliver your session.

How long we keep it

We keep account and booking records for as long as your account is active, and afterwards for as long as we need them to resolve disputes, support therapists' records, and satisfy tax and accounting requirements. Financial records are generally retained for seven years. Diagnostic logs are kept for a short period and then discarded.

Your choices

• Access and correction. You can view and update most of your details from your account, or ask us for a copy of what we hold.
• Deletion. You can ask us to delete your account. We may need to keep certain booking and payment records where the law requires it.
• Email. Transactional messages about your bookings are part of the service and cannot be switched off while you have an active booking.
• Saved payment methods. You can remove a saved card at any time.

To make any of these requests, email warmworkinghands@gmail.com. We will respond within 30 days.

Security

The site is served over encrypted connections, payment credentials never touch our servers, and access to client information is limited to people who need it. No system is perfectly secure, but if a breach affects your personal information we will notify you as required by law.

Children

This platform is not intended for children. You must be at least 18 to create an account and book a session. Sessions for minors must be arranged directly with us and require a parent or legal guardian to be present and to provide consent.

Changes to this policy

If we make a material change we will update the date at the top of this page and, where appropriate, notify you by email. Continuing to use the site after a change means you accept the updated policy.

Contact us

Questions about this policy, or about the information we hold, can go to warmworkinghands@gmail.com or (801) 997-9694.