Privacy Policy

This Privacy Policy describes how Heal Strong / Jared Tavasolian ("we," "us," or "our") collects, uses, and protects your personal information when you use our website, services, and programs.

1. Information We Collect

1.1 Personal Information You Provide

We collect information that you voluntarily provide to us when you:

• Create an account or enroll in a program
• Book a consultation or appointment
• Complete intake forms or questionnaires
• Communicate with us via email, phone, or chat
• Subscribe to our newsletters or communications
• Make a purchase or payment

This information may include:

• Name, email address, phone number
• Mailing address and billing information
• Date of birth and age
• Health and fitness information (goals, medical history, dietary preferences)
• Payment information (processed securely through Stripe)
• Photos and progress measurements
• Communication preferences

1.2 Automatically Collected Information

When you visit our website, we automatically collect certain information about your device and usage:

• IP address and browser type
• Device information and operating system
• Pages visited and time spent on our site
• Referring website or source
• Cookies and similar tracking technologies

2. How We Use Your Information

We use the information we collect to:

• Provide Services: Deliver nutrition coaching, training programs, peptide education, and consultation services
• Process Payments: Handle billing, payments, and financial transactions
• Communicate: Send program updates, appointment reminders, educational materials, and respond to inquiries
• Personalize Experience: Customize programs and recommendations based on your goals and preferences
• Improve Services: Analyze usage patterns to enhance our website and offerings
• Marketing: Send promotional materials, newsletters, and special offers (you may opt-out at any time)
• Legal Compliance: Comply with legal obligations, resolve disputes, and enforce our agreements
• Safety and Security: Protect against fraud, unauthorized access, and security threats

3. How We Share Your Information

3.1 We Do Not Sell Your Information

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

3.2 Service Providers

We may share your information with trusted third-party service providers who assist us in operating our business:

• Payment Processors: Stripe for secure payment processing
• Scheduling Tools: Calendly for appointment booking
• Email Services: Email marketing and communication platforms
• Cloud Storage: Secure data hosting and storage providers (Supabase)
• Analytics: Website analytics and performance monitoring tools

These service providers are contractually obligated to protect your information and may only use it for the purposes we specify.

3.3 Legal Requirements

We may disclose your information when required by law or to:

• Comply with legal processes, court orders, or government requests
• Protect our rights, property, or safety, or that of our users
• Investigate fraud or security issues
• Enforce our Terms of Service

4. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data transmitted to and from our site is encrypted using SSL/TLS
• Secure Storage: Personal information is stored on secure servers with restricted access
• Payment Security: We use PCI-DSS compliant payment processors (Stripe) and do not store credit card information on our servers
• Access Controls: Only authorized personnel have access to your information
• Regular Updates: We regularly update our security practices and software

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Your Rights and Choices

5.1 Access and Correction

You have the right to:

• Access the personal information we hold about you
• Request corrections to inaccurate or incomplete information
• Update your account information at any time through your account settings

5.2 Marketing Communications

You may opt-out of receiving marketing emails by:

• Clicking the "unsubscribe" link in any marketing email
• Contacting us at jared@heal-strong.com
• Updating your communication preferences in your account settings

Note: You will still receive transactional emails related to your program, appointments, and account.

5.3 Data Deletion

You may request deletion of your personal information by contacting us at jared@heal-strong.com. Please note:

• We may retain certain information as required by law or for legitimate business purposes (e.g., financial records, dispute resolution)
• Deletion requests may take up to 30 days to process
• Some information may remain in backup systems for a limited time

5.4 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information we collect and how it's used
• Right to request deletion of your personal information
• Right to opt-out of the sale of personal information (we do not sell your information)
• Right to non-discrimination for exercising your privacy rights

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and login information
• Analyze website traffic and usage patterns
• Improve website functionality and user experience
• Deliver personalized content and advertisements

You can control cookie settings through your browser. However, disabling cookies may affect your ability to use certain features of our website.

7. Third-Party Links

Our website may contain links to third-party websites (e.g., Calendly, Stripe, social media). We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any information.

8. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.

9. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal, tax, and accounting obligations
• Resolve disputes and enforce our agreements
• Maintain business records

When information is no longer needed, we securely delete or anonymize it.

10. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. By using our services, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

• Posting the updated policy on our website with a new "Last Updated" date
• Sending an email notification to registered users
• Displaying a prominent notice on our website

Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

13. Consent

By using our website and services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and sharing of your information as described herein.