Privacy Policy
MH Lake Norman LLC, doing business as NC Massage School ("NCMS", "we", "us", or "our"), operates the ATLAS platform at ncmassageschool.net ("ATLAS" or "the Service") to support student admissions, enrollment, attendance, and educational recordkeeping for the NC Massage School massage therapy training program. This Privacy Policy explains what information ATLAS collects, how we use it, who we share it with, and the choices you have.
By using ATLAS, you agree to the practices described in this policy. If you do not agree, please do not use the Service. If you have questions, contact us at admin@ncmassageschool.com.
1. Who this policy applies to
This policy applies to applicants, prospective students, enrolled students, faculty, and administrative staff who interact with ATLAS. ATLAS is an institutional system intended for adults (18 and older); the Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.
2. Information we collect
2.1 Information you provide directly
- Application and registration: name, email address, phone number, postal address, date of birth, current occupation or employer, emergency contact, program of interest, desired start date, and personal references.
- Admissions questionnaire: background information you provide as part of the admissions process, including educational background, prior related experience, financial planning information, criminal history disclosure (where required by program policy), physical participation acknowledgment, attendance / completion considerations, and how you heard about NCMS.
- Enrollment agreement: acknowledgments, typed legal name, initials, electronic signature consent, and signature metadata (timestamp, IP address, browser user agent) collected to evidence the legally binding agreement.
- Communications: email correspondence you send to or receive from NCMS staff through ATLAS.
2.2 Information from third-party identity providers (OAuth)
When you sign in to ATLAS using our third-party identity provider (Google), we receive a limited set of profile information from that provider:
- Your name (display name).
- Your email address.
- A provider-specific identifier (used to recognize you on subsequent sign-ins).
We do not receive your password from the identity provider. We do not access your contacts, calendar, photos, drive files, posts, or other content. We do not post to your social accounts on your behalf. If ATLAS ever integrates additional scopes (for example, a future Google Classroom read-only integration), the additional access will be described to you and you will be asked to consent before the integration is enabled.
2.3 Institutional records generated by NCMS
- Lifecycle status records (applicant, accepted, enrolled, graduated, etc.).
- Attendance and clock-hour records (planned future feature).
- Transcript and academic-progress records (planned future feature).
- Financial records (charges, payments, credits, and balances tracked for administrative purposes). Payments are not processed through ATLAS; ATLAS records payments received outside the system.
- Document records (such as the signed enrollment agreement and other administrative documents).
2.4 Technical information
Standard web server logs, including IP address, browser user agent, and request timestamps, used for security monitoring, troubleshooting, and operational analysis. ATLAS uses session cookies necessary to keep you signed in; these cookies are scoped to the ATLAS site and are not used for cross-site tracking or advertising.
3. How we use your information
We use the information described above to:
- Process your application and admission to the program.
- Verify your identity when you sign in.
- Generate and store your enrollment agreement and related institutional documents.
- Track attendance, clock-hour compliance, and transcripts when those features are in use.
- Track financial records and provide receipts and invoices for administrative purposes.
- Communicate with you about your application, enrollment, program updates, and administrative matters.
- Comply with applicable state and federal educational recordkeeping requirements, including North Carolina massage therapy program regulations and any applicable accreditor requirements.
- Maintain the security, integrity, and proper operation of the Service.
4. How we share your information
We do not sell your personal information. We share information only in the following limited circumstances:
- Email delivery (Twilio SendGrid): We use SendGrid to deliver transactional and administrative email — registration confirmations, questionnaire confirmations, enrollment notifications, and similar messages. SendGrid processes email content and recipient addresses on our behalf.
- Text messaging: If you opt in to text messages, we use a third-party messaging provider (currently Telnyx) to deliver SMS from NC Massage School to the mobile number you provide. The provider processes your number solely to deliver those messages on our behalf. We do not share your number with third parties or affiliates for marketing.
- Cloud hosting (Microsoft Azure): ATLAS is hosted on Microsoft Azure (Azure App Service and Azure SQL Database). Microsoft acts as our infrastructure provider and processes data on our behalf under their enterprise terms.
- Identity provider (Google): When you sign in with Google, the sign-in event is processed by Google under their own privacy policy. We receive only the limited profile information described above.
- Google Classroom (planned future integration): If and when Google Classroom integration becomes available, certain coursework, roster, and grade data may be exchanged with your Google account. This integration is designed to be read-only on ATLAS's side and will be described separately before it is enabled.
- Legal and regulatory requirements: We may share information with state regulators, accreditors, courts, law enforcement, or other authorities when required by law, regulation, legal process, or when reasonably necessary to protect the rights, property, or safety of NCMS, our students, or others.
- Successors: If NCMS is involved in a merger, acquisition, or sale of assets, your information may transfer to the successor entity under the terms of this policy or a successor policy with equivalent protections.
Text messaging (SMS) consent
If you opt in to text messages during registration, we use a third-party messaging provider (currently Telnyx) to deliver SMS messages from NC Massage School to the mobile number you provide, for application- and enrollment-related updates, scheduling, and reminders. Message frequency varies, and message and data rates may apply.
Mobile/SMS opt-in consent and phone numbers are not shared with third parties or affiliates for marketing purposes. You can opt out at any time by replying STOP to any message, or reply HELP for help. SMS consent is optional and is not a condition of enrollment; opting out of texts does not affect your application or enrollment.
5. Data security
We take reasonable administrative, technical, and physical safeguards to protect the information we collect. Traffic between your browser and ATLAS is protected by industry-standard TLS encryption in transit. Authentication is handled by trusted third-party identity providers; ATLAS does not store your social-provider password. Administrative access to ATLAS is restricted to authorized NCMS staff. No system can guarantee absolute security; you use the Service at your own risk and should keep your account credentials secure with your identity provider.
6. Your choices and rights
- Access and correction: You may request a copy of the personal information NCMS holds about you, or ask us to correct inaccurate information, by emailing admin@ncmassageschool.com. We will respond within a reasonable time, subject to applicable educational recordkeeping requirements.
- Deletion: You may request deletion of your information. We will honor deletion requests except where retention is required by law or by our educational recordkeeping obligations (for example, signed enrollment agreements, transcripts, and attendance records for current and former students).
- Revoke OAuth access: You can revoke ATLAS's access to your Google account at any time through your Google account settings. Revoking access does not delete information already collected; to request deletion, contact us using the email address above.
- Communications: Administrative emails related to your application, enrollment, or active student status are part of the Service and are not optional while you are an applicant or student. You may unsubscribe from any non-essential communications by contacting us.
7. Data retention
We retain personal information for as long as needed to operate the Service and to comply with applicable legal, regulatory, and educational recordkeeping obligations. Enrollment agreements, transcripts, and attendance records are retained as long as required to support student records of NCMS and its students. Application materials for applicants who do not enroll may be retained for a reasonable period and then deleted or archived.
8. Children's privacy
The Service is intended for users 18 and older. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has provided us personal information, please contact admin@ncmassageschool.com and we will take appropriate steps to delete it.
9. International users
The Service is operated from the United States. Personal information collected through the Service is processed and stored in the United States. By using the Service from outside the United States, you consent to the transfer and processing of your information in the United States.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will update the "Effective date" at the top of this page. Material changes will be communicated to applicants and students through normal NCMS communication channels.
11. Contact us
If you have questions, requests, or concerns about this Privacy Policy or your information, please contact:
MH Lake Norman LLC, d/b/a NC Massage School
Email: admin@ncmassageschool.com
Web: www.ncmassageschool.com