Privacy Policy

Introduction

Welcome to CorvinGelfand.com. This Privacy Policy explains how Corvin Gelfand Personal Training ("we," "us," or "our") collects, uses, discloses, and protects your personal information when you visit our website or use our services.

By using our website and services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

1. Information We Collect

1.1 Personal Information You Provide

We collect information you voluntarily provide when you:

• Contact Us: Name, email address, phone number, and message content submitted through contact forms
• Book Services: Personal details, fitness goals, health history, availability preferences
• Communicate: Any information you share via email, phone, or messaging platforms
• Use the Keno Chatbot: Questions and conversation history during your session (not permanently stored)

1.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• Usage Data: Browser type, device information, operating system, referring URLs
• Log Data: IP address, access times, pages viewed, time spent on pages
• Local Storage: Theme preference (dark/light mode) stored in your browser's localStorage

We do NOT use cookies or third-party tracking scripts. We do NOT sell your data to third parties.

1.3 Health and Fitness Information

If you become a client, we collect health and fitness information necessary for program design, including:

• Current fitness level and training history
• Health conditions, injuries, or limitations
• Goals, preferences, and availability
• Progress tracking data (measurements, performance metrics)

2. How We Use Your Information

We use the information we collect to:

• Provide Services: Design custom training programs, schedule sessions, track progress
• Communicate: Respond to inquiries, send appointment reminders, provide updates
• Improve Experience: Enhance website functionality and user experience
• Safety & Compliance: Ensure appropriate program modifications based on health information
• Legal Obligations: Comply with applicable laws and regulations

We will NOT: Send unsolicited marketing emails, sell your information to third parties, or share your data without your explicit consent (except as required by law).

3. How We Share Your Information

3.1 Third-Party Service Providers

We use the following third-party services that may access your data:

• FormSubmit.co: Form submission service that forwards contact form submissions to our email. Your form data is transmitted securely via HTTPS and subject to FormSubmit's privacy policy.
• GoDaddy: Web hosting provider. Server logs may contain IP addresses and access data.
• Google Fonts: Font delivery service. Google may collect usage data. No personal information is shared.

3.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect the rights, property, or safety of Corvin Gelfand Personal Training, our clients, or others.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email and/or prominent notice on our website of any change in ownership or use of your personal information.

4. Data Security

We implement industry-standard security measures to protect your personal information:

• HTTPS/TLS Encryption: All data transmitted between your browser and our servers is encrypted
• Secure Forms: Contact forms include anti-spam protection and rate limiting
• Access Controls: Only authorized personnel have access to client information
• Data Minimization: We only collect information necessary for providing services

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as necessary to:

• Provide ongoing services to active clients
• Maintain business records and comply with legal obligations
• Resolve disputes and enforce agreements

Contact Form Submissions: Stored until you request deletion or we determine it's no longer needed (typically 2 years for inquiries that didn't result in services).
Client Records: Retained for 7 years after the end of your training relationship, as recommended by professional liability standards.
Chatbot Conversations: Not permanently stored. Session data is cleared when you close your browser.

6. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request corrections to inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Portability: Request a copy of your data in a structured, machine-readable format
• Opt-Out: Unsubscribe from marketing communications (though we don't send unsolicited marketing)
• Object: Object to certain processing of your information

To exercise any of these rights, please contact us at Corvin.Gelfand@gmail.com. We will respond to your request within 30 days.

7. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately so we can delete it.

For clients under 18: Training services require parental consent, and all communications will include a parent or legal guardian.

8. Third-Party Links and Embeds

Our website contains links to and embeds from third-party platforms:

• Social media platforms (Instagram, YouTube, Facebook)
• Music streaming services (Spotify)
• Video hosting services (YouTube)

These third parties have their own privacy policies. We are not responsible for their practices. We encourage you to review their privacy policies when you visit their sites.

9. International Users

Our services are based in the United States. If you are accessing our website from outside the U.S., please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and we operate.

By using our services, you consent to the transfer of your information to the United States. U.S. data protection laws may differ from those in your country.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of categories and specific pieces of personal information collected
• Right to Delete: Request deletion of personal information we collected from you
• Right to Opt-Out: Opt out of the sale of personal information (Note: We do NOT sell personal information)
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

To submit a CCPA request, contact us at Corvin.Gelfand@gmail.com with "CCPA Request" in the subject line.

11. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have rights under the General Data Protection Regulation (GDPR), including the right to access, rectification, erasure, restriction of processing, data portability, and the right to object.

Legal Basis for Processing: We process your personal data based on (1) your consent, (2) performance of a contract with you, (3) compliance with legal obligations, or (4) our legitimate business interests.

You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

12. Do Not Track Signals

Our website does not use tracking technologies, so "Do Not Track" (DNT) browser signals are not applicable. We do not track users across third-party websites or serve targeted advertising.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Updating the "Last Updated" date at the top of this policy
• Posting a notice on our website homepage
• Sending an email to clients (for significant changes)

Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: