Privacy Policy

NC Massage School

Your Privacy Matters

NC Massage School is committed to protecting the privacy and security of our students, applicants, faculty, staff, and users of the NCMS MyPath platform.

This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the choices you have.

Questions? Contact us at admin@ncmassageschool.com.

NC Massage School Privacy Policy

Effective date: May 24, 2026

MH Lake Norman LLC, doing business as NC Massage School (“NCMS”, “we”, “us”, or “our”), operates the NCMS MyPath platform at ncmassageschool.net (“MyPath” or “the Service”) to support student admissions, enrollment, attendance, and educational recordkeeping for the NC Massage School massage therapy training program. This Privacy Policy explains what information MyPath collects, how we use it, who we share it with, and the choices you have.

By using MyPath, you agree to the practices described in this policy. If you do not agree, please do not use the Service. If you have questions, contact us at admin@ncmassageschool.com.

1. Who This Policy Applies To

This policy applies to applicants, prospective students, enrolled students, faculty, and administrative staff who interact with MyPath. NCMS MyPath is an institutional system intended for adults 18 and older. The Service is not directed to children under 13, and we do not knowingly collect personal information from them.

2. Information We Collect

2.1 Information You Provide Directly

• Application and registration: name, email address, phone number, postal address, date of birth, current occupation or employer, emergency contact, program of interest, desired start date, and personal references.
• Admissions questionnaire: background information you provide as part of the admissions process, including educational background, prior related experience, financial planning information, criminal history disclosure where required by program policy, physical participation acknowledgment, attendance/completion considerations, and how you heard about NCMS.
• Enrollment agreement: acknowledgments, typed legal name, initials, electronic signature consent, and signature metadata, including timestamp, IP address, and browser user agent.
• Communications: email correspondence you send to or receive from NCMS staff through MyPath.

2.2 Information from Third-Party Identity Providers

When you sign in to MyPath using our third-party identity provider, Google, we receive a limited set of profile information from that provider:

• Your name or display name
• Your email address
• A provider-specific identifier used to recognize you on subsequent sign-ins

We do not receive your password from the identity provider. We do not access your contacts, calendar, photos, drive files, posts, or other content. We do not post to your social accounts on your behalf. If MyPath ever integrates additional scopes, such as a future Google Classroom read-only integration, the additional access will be described to you and you will be asked to consent before the integration is enabled.

2.3 Institutional Records Generated by NCMS

• Lifecycle status records, such as applicant, accepted, enrolled, or graduated
• Attendance and clock-hour records, as a planned future feature
• Transcript and academic-progress records, as a planned future feature
• Financial records, including charges, payments, credits, and balances tracked for administrative purposes
• Document records, such as signed enrollment agreements and other administrative documents

Payments are not processed through MyPath. MyPath records payments received outside the system.

2.4 Technical Information

We collect standard web server logs, including IP address, browser user agent, and request timestamps, used for security monitoring, troubleshooting, and operational analysis. MyPath uses session cookies necessary to keep you signed in. These cookies are scoped to the MyPath site and are not used for cross-site tracking or advertising.

3. How We Use Your Information

We use the information described above to:

• Process your application and admission to the program
• Verify your identity when you sign in
• Generate and store your enrollment agreement and related institutional documents
• Track attendance, clock-hour compliance, and transcripts when those features are in use
• Track financial records and provide receipts and invoices for administrative purposes
• Communicate with you about your application, enrollment, program updates, and administrative matters
• Comply with applicable state and federal educational recordkeeping requirements, including North Carolina massage therapy program regulations and any applicable accreditor requirements
• Maintain the security, integrity, and proper operation of the Service

4. How We Share Your Information

We do not sell your personal information. We share information only in the following limited circumstances:

• Email delivery: We use Twilio SendGrid to deliver transactional and administrative email, including registration confirmations, questionnaire confirmations, enrollment notifications, and similar messages.
• Text messaging: If you opt in to text messages, we use a third-party messaging provider, currently Telnyx, to deliver SMS from NC Massage School to the mobile number you provide.
• Cloud hosting: MyPath is hosted on Microsoft Azure, including Azure App Service and Azure SQL Database.
• Identity provider: When you sign in with Google, the sign-in event is processed by Google under its own privacy policy.
• Google Classroom: If and when Google Classroom integration becomes available, certain coursework, roster, and grade data may be exchanged with your Google account. This integration is designed to be read-only on MyPath’s side and will be described separately before it is enabled.
• Legal and regulatory requirements: We may share information with state regulators, accreditors, courts, law enforcement, or other authorities when required by law, regulation, legal process, or when reasonably necessary to protect the rights, property, or safety of NCMS, our students, or others.
• Successors: If NCMS is involved in a merger, acquisition, or sale of assets, your information may transfer to the successor entity under the terms of this policy or a successor policy with equivalent protections.

5. Data Security

We take reasonable administrative, technical, and physical safeguards to protect the information we collect. Traffic between your browser and MyPath is protected by industry-standard TLS encryption in transit. Authentication is handled by trusted third-party identity providers. MyPath does not store your social-provider password. Administrative access to MyPath is restricted to authorized NCMS staff. No system can guarantee absolute security. You use the Service at your own risk and should keep your account credentials secure with your identity provider.

6. Your Choices and Rights

• Access and correction: You may request a copy of the personal information NCMS holds about you, or ask us to correct inaccurate information, by emailing admin@ncmassageschool.com.
• Deletion: You may request deletion of your information. We will honor deletion requests except where retention is required by law or by our educational recordkeeping obligations, such as signed enrollment agreements, transcripts, and attendance records for current and former students.
• Revoke OAuth access: You can revoke MyPath’s access to your Google account at any time through your Google account settings. Revoking access does not delete information already collected; to request deletion, contact us using the email address above.
• Communications: Administrative emails related to your application, enrollment, or active student status are part of the Service and are not optional while you are an applicant or student. You may unsubscribe from non-essential communications by contacting us.

7. Data Retention

We retain personal information for as long as needed to operate the Service and to comply with applicable legal, regulatory, and educational recordkeeping obligations. Enrollment agreements, transcripts, and attendance records are retained as long as required to support student records of NCMS and its students. Application materials for applicants who do not enroll may be retained for a reasonable period and then deleted or archived.

8. Children’s Privacy

The Service is intended for users 18 and older. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us personal information, please contact admin@ncmassageschool.com and we will take appropriate steps to delete it.

9. International Users

The Service is operated from the United States. Personal information collected through the Service is processed and stored in the United States. By using the Service from outside the United States, you consent to the transfer and processing of your information in the United States.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Effective date” at the top of this page. Material changes will be communicated to applicants and students through normal NCMS communication channels.

11. Contact Us

If you have questions, requests, or concerns about this Privacy Policy or your information, please contact:

MH Lake Norman LLC, d/b/a NC Massage School
Email: admin@ncmassageschool.com
Web: www.ncmassageschool.com

Questions About Your Information?

If you would like to request access to your information, update inaccurate records, request deletion where applicable, or ask questions about our privacy practices, please contact NC Massage School directly.

Contact NC Massage School