01 Introduction
New Heits Fitness LLC ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, websites, and digital platforms.
02 Information We Collect
Personal Information
- Full name and contact details
- Email address for communications
- Phone number for support and future SMS marketing
- Age / date of birth for age verification
- Fitness goals and objectives
- Basic health and fitness background
- Payment information (processed through Stripe)
- Progress tracking data (measurements, photos, achievements)
Automatically Collected Information
- Website usage data (pages visited, time spent, clicks)
- Device information (browser type, operating system, IP address)
- Cookies and tracking technologies
- Email engagement (opens, clicks, forwards)
- Marketing interaction data (ad clicks, campaign responses)
Third-Party Platform Data
- Trainerize workout data (when applicable)
- Social media interactions (when you engage with our content)
- Video call recordings (with consent for quality assurance)
03 How We Collect Information
Direct Collection
- Registration forms on our website
- Contact forms and consultation requests
- Email communications and responses
- Phone conversations and consultations
- Progress reports and check-ins
- Payment processing through Stripe
Automatic Collection
- Website cookies and tracking pixels
- Google Analytics for website performance
- Facebook Pixel for advertising optimization
- Email tracking through our platform
- Social media pixels on our pages
Third-Party Sources
- Social media platforms (when you interact with our content)
- Advertising networks (for campaign optimization)
- Payment processors (transaction data)
04 How We Use Your Information
Service Delivery
- Provide coaching services and fitness programs
- Deliver digital content (videos, plans, guides)
- Track your progress and program completion
- Schedule and conduct consultation calls
- Process payments and manage billing
- Provide customer support and assistance
Communication
- Send program materials and updates
- Provide coaching feedback and guidance
- Send appointment reminders and notifications
- Respond to inquiries and support requests
- Deliver progress reports and check-ins
Marketing & Advertising
- Send newsletters and promotional content
- Create targeted advertisements on social media
- Develop lookalike audiences for advertising
- Track campaign performance and effectiveness
- Retarget website visitors with relevant ads
- Send SMS marketing messages (with explicit consent)
Business Operations
- Analyze website performance and user behavior
- Improve our services and user experience
- Prevent fraud and ensure security
- Comply with legal requirements
- Maintain business records and analytics
05 Information Sharing & Disclosure
Third-Party Service Providers
We share information with trusted partners who help us operate our business:
- GoHighLevel (GHL): Customer relationship management and communications
- Stripe: Payment processing and billing
- Google Analytics: Website performance and user behavior analysis
- Facebook / Meta: Advertising and marketing campaigns
- Trainerize: Workout delivery and tracking (when applicable)
- Loom: Video hosting and delivery
- Email service providers: Marketing and transactional communications
Legal Requirements
We may disclose information when required by law or to:
- Comply with legal processes (subpoenas, court orders)
- Protect our rights and property
- Ensure user safety and prevent harm
- Investigate fraud or security breaches
Important Note
We do not sell personal information to third parties. All data sharing is for legitimate business purposes and service delivery only.
06 Data Retention
Retention Period
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, including:
- Ongoing customer support and service delivery
- Progress tracking and long-term fitness goals
- Legal compliance and business records
- Service improvement and analytics
Data Deletion
You may request deletion of your personal information at any time by contacting us. Note that:
- Some information may be retained for legal or business purposes
- Anonymous analytics data may be kept for service improvement
- Payment records may be retained for tax and accounting purposes
07 Your Privacy Rights
General Rights
- Access: Request copies of your personal information
- Correction: Update or correct inaccurate information
- Deletion: Request removal of your personal information
- Opt-out: Unsubscribe from marketing communications
- Data portability: Receive your data in a portable format
California Residents — CCPA Rights
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to know what personal information we collect and use
- Right to delete personal information (with certain exceptions)
- Right to opt-out of the sale of personal information
- Right to non-discrimination for exercising your privacy rights
European Residents — GDPR Rights
If you are in the European Union, you have rights under the General Data Protection Regulation:
- Lawful basis: We process data based on consent, legitimate interests, or contract performance
- Data protection officer: Contact us for data protection inquiries
- Supervisory authority: You may file complaints with your local data protection authority
08 Cookies & Tracking Technologies
Types of Cookies We Use
- Essential cookies: Required for website functionality
- Analytics cookies: Google Analytics for performance tracking
- Marketing cookies: Facebook Pixel and other advertising pixels
- Preference cookies: Remember your settings and preferences
Managing Cookies
You can control cookies through your browser settings:
- Disable cookies: May limit website functionality
- Opt-out tools: Use industry opt-out tools for advertising cookies
- Browser settings: Adjust privacy settings in your browser
Tracking Pixels
We use tracking pixels for:
- Email open tracking in our communications
- Website visitor tracking for analytics
- Advertising optimization on social media platforms
- Conversion tracking for marketing campaigns
09 Data Security
Security Measures
- HTTPS encryption for all website communications
- PCI compliance through Stripe payment processing
- Secure data storage through trusted cloud providers
- Access controls limiting who can access your information
- Regular security updates and monitoring
Data Breaches
In the event of a data breach, we will take the following steps:
- Immediate assessment of the scope and impact
- Notification to authorities as required by law
- User notification if personal information is compromised
- Remedial action to prevent future breaches
Security Commitment
We implement industry-standard security measures to protect your data, but no method of transmission over the internet is 100% secure. We continuously monitor and update our security practices.
10 International Data Transfers
Data Processing Locations
Your information may be processed in:
- United States (primary location)
- Countries where our service providers operate
- Cloud storage locations used by our platforms
Transfer Safeguards
- Adequate protection in accordance with applicable laws
- Contractual protections with international service providers
- Industry-standard security measures
11 Children's Privacy
Age Requirements
- Minimum age: 13 years old
- Ages 13–17: Require parental consent and supervision
- Parental rights: Parents can review, modify, or delete their child's information
COPPA Compliance
For users under 13 (if any are accidentally collected):
- Immediate deletion of information
- No marketing to children under 13
- Parental notification and consent processes
Parental Control
Parents have full control over their minor child's data and can request access, modification, or deletion at any time.
12 Marketing Communications
Email Marketing
- Opt-in required for promotional emails
- Unsubscribe option in every marketing email
- Separate consent for different types of communications
- Preference management available
SMS Marketing
- Explicit consent required before sending SMS
- Clear opt-in process with terms disclosure
- Easy opt-out by texting "STOP"
- Frequency disclosure and message rates
Social Media Marketing
- Retargeting campaigns based on website visits
- Custom audiences from email lists (with consent)
- Lookalike audiences for similar users
- Opt-out options through platform settings
13 Updates to This Privacy Policy
Policy Changes
- Regular reviews and updates as needed
- Email notification of significant changes
- Website posting of the updated policy
- Continued use indicates acceptance of changes
Notification Process
- 30-day advance notice for material changes
- Direct communication to active users
- Opt-out option if you disagree with changes
14 Contact Information
Privacy Inquiries
For questions about this Privacy Policy or your personal information:
- Email: info@newheitsfitness.com
- Mail: New Heits Fitness LLC, 3530 300th Street, Hull, IA 51239
- Business hours: Monday–Friday, 8:00 AM – 5:00 PM (Central Time)
Data Protection Requests
To exercise your privacy rights, you may request:
- Data access or copies of your information
- Data correction or updates
- Data deletion or account closure
- Marketing opt-out or preference changes
We respond to all privacy requests within 30 days.
15 Compliance Information
Applicable Laws
This Privacy Policy complies with:
- California Consumer Privacy Act (CCPA)
- General Data Protection Regulation (GDPR)
- CAN-SPAM Act for email marketing
- Telephone Consumer Protection Act (TCPA) for SMS
- Iowa state privacy laws
- Federal Trade Commission (FTC) guidelines
Legal Compliance
We regularly review and update our privacy practices to ensure compliance with all applicable laws and regulations. Our policies meet or exceed industry standards for data protection.
By using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your information as described herein.