Hand in Health Privacy Policy

Last updated: October 21, 2026

Hand in Health Massage & Wellness LTD, doing business as Hand in Health Massage Therapy (“Hand in Health,” “we,” “us”), provides massage therapy, chiropractic care, acupuncture, personal training and related wellness services in Syracuse, New York. This policy explains what information we collect through our website (handinhealth.com), our online booking and patient portal, the Hand in Health mobile app, text messaging, email, social media and our clinic, how we use it, and the choices you have.

Questions? Email office@handinhealth.com or text us at 315-937-2300.

1. Your health records are protected separately

When you receive care at Hand in Health, the information in your treatment records (intake forms, health history, treatment notes, and billing for care) is protected health information. How we use and share it is governed by federal law (HIPAA), New York law, and our Notice of Privacy Practices, which you can read here: handinhealth.com/notice-of-privacy-practices. If anything in this policy conflicts with our Notice of Privacy Practices for your health records, the Notice of Privacy Practices controls.

The rest of this policy covers everything else, such as website visits, marketing, purchases and communications.

2. Information we collect

Information you give us

Contact details such as your name, phone number, email address and mailing address
Account details for our booking site, patient portal and app, such as your username and password
Appointment details such as the services, providers and locations you choose
Health information you provide on intake forms or in messages to us (see Section 1)
Payment and billing details when you buy services, memberships, packages or gift cards
Communication preferences and anything you send us by email, text, phone, social media or contact forms
Information about a minor patient provided by their parent or guardian
Government or insurance identifiers, such as a Social Security number or VA member ID, only when needed to coordinate or bill for care through the VA Community Care program. We protect Social Security numbers as New York law requires and never display them publicly.

Information collected automatically

When you use our website or app, we and our service providers collect device and usage information such as IP address, browser type, device type, pages viewed, referring site, approximate location based on IP address, and how you interact with the site. We collect this using cookies, pixels and similar tools (see Section 6).

Information we receive from others

Referring providers, including the Syracuse VA through the Community Care program, and physicians who refer you to us
Organizations that arrange care for their members, such as employers in our corporate wellness program and university athletic programs we are contracted by
Our booking and payment providers when you book or pay
Advertising platforms, for example when you submit a lead form on Facebook or Instagram
Social media platforms, when you interact with our pages or choose to sign in with a social media account

3. How we use information

To schedule, provide and follow up on your care
To manage your account, memberships, packages and gift cards
To process payments and provide receipts or superbills
To send appointment confirmations, reminders and service messages
To answer your questions and provide customer support
To send marketing emails and texts if you have agreed to receive them
To run and measure our advertising (see Section 6)
To improve our website, app and services
To protect against fraud and keep our systems secure
To comply with laws, licensing rules and legal requests

We do not sell your personal information. We do not share your health information for advertising.

We share information only in these situations:

Service providers who work on our behalf under contract, such as our booking and patient portal provider (Zenoti), payment processing (Zenoti and Stripe), email and text messaging platforms, website hosting, IT support and our marketing agency. They may use your information only to provide services to us.
Financing. If you choose to pay with Affirm, you share your information directly with Affirm and its lending partners under Affirm’s privacy policy (https://www.affirm.com/privacy).
Organizations that arrange your care, such as the VA, an employer wellness program or a university athletic program, only as needed to coordinate and bill for that care and as allowed by law or your authorization.
Legal reasons, such as complying with a subpoena or court order, protecting someone’s safety, or meeting licensing and public health requirements.
Business changes, such as a merger, sale or transfer of our practice, in which case this policy would continue to protect your information.
With your permission, for any other purpose.

5. Text messages

If you text us or agree to receive texts, we may send appointment reminders, service messages and, if you have opted in, offers and updates. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe or HELP for help at any time.

We do not share or sell mobile phone numbers or text messaging opt-in information with third parties or affiliates for their marketing purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except service providers that deliver our messages.

6. Cookies, analytics and advertising

We use cookies and similar tools to keep our website working, understand how visitors use it, and measure and show our ads on platforms such as Google, Facebook and Instagram. Tools we use include Google Analytics, Google Ads and the Meta Pixel, some of which connect to our Zenoti booking system to measure online bookings.

We set up these tools so that they do not receive your health information, your treatment details, or the contents of intake forms or patient portal pages.

Your choices:

Block or delete cookies in your browser settings. Some site features may not work without them.
Opt out of Google ad personalization at adssettings.google.com.
Manage Facebook and Instagram ad preferences in your Meta account settings.
Opt out of interest-based ads from many companies at optout.aboutads.info.

Our website does not currently respond to browser “Do Not Track” signals.

7. Children and minors

Our website and app are not directed to children under 13, and we do not knowingly collect information online from children under 13. Patients under 18 receive care only with consent from a parent or guardian, who provides and manages the minor’s information. If you believe a child has given us information online without a parent’s consent, contact us and we will delete it.

8. Testimonials and reviews

We post testimonials only with the person’s written permission. Reviews you post on public sites such as Google or Facebook are public, and we may respond to them without confirming or discussing any care you received.

9. How long we keep information

We keep treatment records for at least six years after your last visit, as New York requires for licensed health professionals. Records for minors are kept for at least six years and until at least one year after the patient turns 21. We keep other information only as long as we need it for the purposes in this policy, or longer if a law requires it (for example, tax and accounting records). When we no longer need information, we delete or de-identify it.

10. How we protect information

We use administrative, technical and physical safeguards to protect your information, including access controls, secure booking and payment systems, and staff confidentiality training. No system is perfectly secure. If a breach affects your information, we will notify you as required by HIPAA and New York’s data breach notification law.

11. Your choices and rights

Access and correction. You can view and update your account in our patient portal or app, or ask us for a copy of your treatment records or to correct them. Our Notice of Privacy Practices explains your health record rights in full.
Marketing. Click “unsubscribe” in any marketing email or reply STOP to any text. You will still receive appointment and service messages.
Deletion. You can ask us to delete your account and information we hold for marketing. We may need to keep some information, such as treatment and financial records, to meet legal requirements.

To make a request, email office@handinhealth.com or call the clinic. We will verify your identity before acting on a request and will respond within 30 days.

If you live outside New York, your state may give you additional privacy rights. Contact us and we will honor requests as your state’s law requires.

12. Links to other sites

Our website links to other services, such as our Zenoti booking site, Affirm, Apple App Store, Google Play and social media platforms. Their own privacy policies apply when you use them.

13. Changes to this policy

We may update this policy from time to time. We will change the “Last updated” date at the top, and for significant changes we will post a notice on our website or contact you directly.

14. Contact us

Hand in Health Massage Therapy
301 Plainfield Rd, Ste 180, Syracuse, NY 13212

Email: office@handinhealth.com
Text: 315-937-2300
North Syracuse: 315-937-5954
Downtown Syracuse: 315-937-5953