Legal document
Privacy Policy
Your privacy is important to us. This policy explains how New Heits Fitness collects, uses, and protects your personal information.
Last Updated: January 2025
Introduction
New Heits Fitness LLC ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, websites, and digital platforms.
Information We Collect
Personal Information:
- Full name and contact details
- Email address for communications
- Phone number for support and future SMS marketing
- Age/Date of birth for age verification
- Fitness goals and objectives
- Basic health and fitness background
- Payment information (processed through Stripe)
- Progress tracking data (measurements, photos, achievements)
Automatically Collected Information:
- Website usage data (pages visited, time spent, clicks)
- Device information (browser type, operating system, IP address)
- Cookies and tracking technologies
- Email engagement (opens, clicks, forwards)
- Marketing interaction data (ad clicks, campaign responses)
Third-Party Platform Data:
- Trainerize workout data (when applicable)
- Social media interactions (when you engage with our content)
- Video call recordings (with consent for quality assurance)
How We Collect Information
Direct Collection:
- Registration forms on our website
- Contact forms and consultation requests
- Email communications and responses
- Phone conversations and consultations
- Progress reports and check-ins
- Payment processing through Stripe
Automatic Collection:
- Website cookies and tracking pixels
- Google Analytics for website performance
- Facebook Pixel for advertising optimization
- Email tracking through our platform
- Social media pixels on our pages
Third-Party Sources:
- Social media platforms (when you interact with our content)
- Advertising networks (for campaign optimization)
- Payment processors (transaction data)
How We Use Your Information
Service Delivery:
- Provide coaching services and fitness programs
- Deliver digital content (videos, plans, guides)
- Track your progress and program completion
- Schedule and conduct consultation calls
- Process payments and manage billing
- Provide customer support and assistance
Communication:
- Send program materials and updates
- Provide coaching feedback and guidance
- Send appointment reminders and notifications
- Respond to inquiries and support requests
- Deliver progress reports and check-ins
Marketing & Advertising:
- Send newsletters and promotional content
- Create targeted advertisements on social media
- Develop lookalike audiences for advertising
- Track campaign performance and effectiveness
- Retarget website visitors with relevant ads
- Send SMS marketing messages (with explicit consent)
Business Operations:
- Analyze website performance and user behavior
- Improve our services and user experience
- Prevent fraud and ensure security
- Comply with legal requirements
- Maintain business records and analytics
Information Sharing & Disclosure
Third-Party Service Providers:
We share information with trusted partners who help us operate our business:
- GoHighLevel (GHL): Customer relationship management and communications
- Stripe: Payment processing and billing
- Google Analytics: Website performance and user behavior analysis
- Facebook/Meta: Advertising and marketing campaigns
- Trainerize: Workout delivery and tracking (when applicable)
- Loom: Video hosting and delivery
- Email service providers: Marketing and transactional communications
Legal Requirements:
We may disclose information when required by law or to:
- Comply with legal processes (subpoenas, court orders)
- Protect our rights and property
- Ensure user safety and prevent harm
- Investigate fraud or security breaches
Data Retention
Retention Period:
We retain your personal information indefinitely for the following reasons:
- Ongoing customer support and service delivery
- Progress tracking and long-term fitness goals
- Legal compliance and business records
- Service improvement and analytics
Data Deletion:
You may request deletion of your personal information at any time by contacting us. Note that:
- Some information may be retained for legal or business purposes
- Anonymous analytics data may be kept for service improvement
- Payment records may be retained for tax and accounting purposes
Your Privacy Rights
General Rights:
- Access: Request copies of your personal information
- Correction: Update or correct inaccurate information
- Deletion: Request removal of your personal information
- Opt-out: Unsubscribe from marketing communications
- Data portability: Receive your data in a portable format
California Residents (CCPA Rights):
European Residents (GDPR Rights):
Data Security
Security Measures:
- HTTPS encryption for all website communications
- PCI compliance through Stripe payment processing
- Secure data storage through trusted cloud providers
- Access controls limiting who can access your information
- Regular security updates and monitoring
Data Breaches:
In the event of a data breach:
- Immediate assessment of the scope and impact
- Notification to authorities as required by law
- User notification if personal information is compromised
- Remedial action to prevent future breaches
International Data Transfers
Data Processing Locations:
Your information may be processed in:
- United States (primary location)
- Countries where our service providers operate
- Cloud storage locations used by our platforms
Transfer Safeguards:
- Adequate protection in accordance with applicable laws
- Contractual protections with international service providers
- Industry standard security measures
Children's Privacy
Age Requirements:
- Minimum age: 13 years old
- Ages 13-17: Require parental consent and supervision
- Parental rights: Parents can review, modify, or delete their child's information
COPPA Compliance:
For users under 13 (if any are accidentally collected):
- Immediate deletion of information
- No marketing to children under 13
- Parental notification and consent processes
Marketing Communications
Email Marketing:
- Opt-in required for promotional emails
- Unsubscribe option in every marketing email
- Separate consent for different types of communications
- Preference management available
SMS Marketing:
- Explicit consent required before sending SMS
- Clear opt-in process with terms disclosure
- Easy opt-out by texting "STOP"
- Frequency disclosure and message rates
Social Media Marketing:
- Retargeting campaigns based on website visits
- Custom audiences from email lists (with consent)
- Lookalike audiences for similar users
- Opt-out options through platform settings
Updates to This Privacy Policy
Policy Changes:
- Regular reviews and updates as needed
- Email notification of significant changes
- Website posting of updated policy
- Continued use indicates acceptance of changes
Notification Process:
- 30-day advance notice for material changes
- Direct communication to active users
- Opt-out option if you disagree with changes
Contact Information
Privacy Inquiries
For questions about this Privacy Policy or your personal information:
Compliance Information
Applicable Laws:
This Privacy Policy complies with:
- California Consumer Privacy Act (CCPA)
- General Data Protection Regulation (GDPR)
- CAN-SPAM Act for email marketing
- Telephone Consumer Protection Act (TCPA) for SMS
- Iowa state privacy laws
- Federal Trade Commission (FTC) guidelines
Questions? Email info@newheitsfitness.com or call (712) 470-1167.