This Privacy Policy describes how Dan The Body ("we," "us," or "our"), a sole proprietorship based in the State of California, United States, collects, uses, and shares information when you visit danthebody.com (the "Site") or use our training services (the "Services").
By using the Site or Services, you agree to the practices described in this Policy. If you do not agree, please do not use the Site or Services.
1. Information We Collect
Information you provide
- Contact details: name, email address, phone number, and similar information you submit through application or contact forms.
- Health & fitness information: body metrics, training history, injury history, dietary preferences, photos, and goals — provided voluntarily as part of a training engagement.
- Payment information: billing details processed by our third-party payment processor. We do not store full card numbers on our servers.
- Communications: records of messages, calls, and check-ins between you and your coach.
Information collected automatically
- Usage data: pages viewed, links clicked, referring URL, and approximate location derived from IP address.
- Device data: browser type, operating system, and device identifiers.
- Cookies & similar technologies: used to keep the Site functioning and to measure traffic. You can disable cookies in your browser settings, though parts of the Site may not work as intended.
2. How We Use Information
- To provide, personalize, and improve training programs and the Site.
- To respond to inquiries and applications.
- To process payments and manage subscriptions.
- To send service-related communications (program updates, check-ins, scheduling).
- To send marketing emails — only if you have opted in. You can unsubscribe at any time.
- To comply with legal obligations and enforce our Terms of Service.
3. How We Share Information
We do not sell your personal information. We share it only with:
- Service providers who help operate the business (payment processing, email delivery, analytics, hosting), bound by confidentiality and data-protection obligations.
- Legal & safety recipients when required by law, subpoena, or to protect rights, property, or safety.
- Business transfers in connection with a merger, acquisition, or sale of assets — with notice to you.
4. Health & Sensitive Information
Training involves discussion of physical health, training history, and body composition. This information is not regulated as protected health information (PHI) under HIPAA, because we are not a covered entity. We still treat it as confidential and use it only to deliver your training program. We will not publish your photos, metrics, or testimonials without your explicit, written permission.
5. Your Choices
- Access, correction, deletion: you may request a copy of your information, ask us to correct inaccuracies, or request deletion by emailing us at the address below.
- Marketing opt-out: use the unsubscribe link in any marketing email.
- Cookies: control via your browser settings.
6. California Residents (CCPA / CPRA)
If you are a California resident, you have the right to:
- Know what categories of personal information we collect, the purposes, and the categories of recipients.
- Request access to and deletion of your personal information, subject to legal exceptions.
- Correct inaccurate personal information.
- Opt out of "sale" or "sharing" — we do not sell or share personal information for cross-context behavioral advertising.
- Be free from discrimination for exercising these rights.
To exercise a California right, email us using the contact details below. We will verify your identity before responding.
7. Data Retention
We retain personal information for as long as your account or training engagement is active, and for a reasonable period afterward to comply with legal obligations (tax, accounting, dispute resolution) — typically up to seven years for financial records, and shorter for marketing data.
8. Security
We use reasonable administrative, technical, and physical safeguards to protect personal information. No system is fully secure; we cannot guarantee absolute security.
9. Children
The Services are intended for adults 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information, contact us so we can delete it.
10. International Visitors
The Site is operated from the United States. If you access it from outside the U.S., you understand your information will be processed in the U.S., which may have different data-protection laws than your country.
11. Changes to this Policy
We may update this Policy from time to time. We will revise the "Last Updated" date and, for material changes, provide a more prominent notice on the Site.
12. Contact
Questions or requests about this Policy or your information:
Dan The Body
California, United States
Email: Danthebodydtb@gmail.com