Privacy Policy | Muscle & Mindfulness

Effective Date: 3/21/25
Last Updated: 3/21/25

Welcome to Muscle and Mindfulness ("we," "us," or "our"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your personal information in accordance with the General Data Protection Regulation (GDPR) and Brazil’s General Data Protection Law (LGPD).

1. Data We Collect

We collect the following types of data:

1.1 Personal Data You Provide

Account Information: Name, email address, phone number, and password.
Payment Information: Billing details, credit/debit card data (processed securely by third-party payment processors).
Health & Fitness Information: Goals, fitness level, and progress (only if voluntarily provided for coaching services).
Communications: Messages and feedback you send us.

1.2 Data Collected Automatically

Cookies & Tracking Data: We use cookies to improve user experience and analyze website traffic.
Device & Usage Data: IP address, browser type, pages visited, and time spent on our website.

1.3 Third-Party Data

We may receive personal data from social media platforms if you interact with our content.

2. How We Use Your Data

We use your data for the following purposes:

To Provide Services: Coaching programs, online courses, and personalized fitness plans.
To Process Payments: Secure transactions for services.
To Improve Our Website: Analyzing visitor behavior to enhance user experience.
To Send Marketing Communications: Emails about promotions, newsletters, and updates (with opt-out options).
To Comply with Legal Obligations: Regulatory compliance and fraud prevention.

3. Legal Basis for Processing Data (GDPR & LGPD)

We process your data based on the following legal grounds:

Your Consent (Art. 6(1)(a) GDPR & Art. 7 LGPD): When you sign up, subscribe, or opt-in.
Contract Performance (Art. 6(1)(b) GDPR & Art. 7(V) LGPD): To provide our coaching services.
Legal Obligations (Art. 6(1)(c) GDPR & Art. 7(II) LGPD): Tax, fraud prevention, and compliance with laws.
Legitimate Interests (Art. 6(1)(f) GDPR & Art. 7(IX) LGPD): Marketing, analytics, and service improvement.

4. Data Sharing & Third Parties

We do not sell or rent your personal data. However, we may share data with:

Service Providers: Payment processors, email marketing platforms, and website analytics tools.
Legal Authorities: When required by law or to protect our rights.
Business Transfers: If Muscle and Mindfulness is acquired or merged with another company.

5. International Data Transfers

We operate globally, and your data may be transferred outside your country. When transferring data outside the EEA or Brazil, we ensure adequate protection, such as:

Standard Contractual Clauses (SCCs) approved by the EU Commission.
LGPD compliance measures for Brazilian users.

6. Data Retention

We retain your data only for as long as necessary to fulfill the purposes outlined in this policy. The retention period depends on:

Legal requirements.
The duration of your account or service usage.
Business needs for analytics and security.

7. Your Rights

Under GDPR and LGPD, you have the following rights regarding your data:

7.1 GDPR Rights (EU Users)

Right to Access: Request a copy of your data.
Right to Rectification: Correct inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten"): Request data deletion.
Right to Restrict Processing: Limit how we use your data.
Right to Data Portability: Transfer data to another service.
Right to Object: Object to data processing for marketing purposes.

7.2 LGPD Rights (Brazilian Users)

Confirmation & Access: Know whether we process your data.
Correction: Request updates to incorrect or outdated information.
Anonymization or Deletion: Request removal of unnecessary data.
Portability: Transfer data to another provider.
Right to Withdraw Consent: Withdraw your consent at any time.

8. Cookies & Tracking

We use cookies and similar tracking technologies to enhance user experience. You can manage cookie preferences in your browser settings.

9. Security Measures

We implement industry-standard security measures to protect your data from unauthorized access, including encryption, secure servers, and access control.

10. Children’s Privacy

Our services are not intended for children under 16 (GDPR) or 18 (LGPD). We do not knowingly collect personal data from minors.

11. Updates to This Privacy Policy

We may update this policy from time to time. The latest version will always be available on our website.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, contact us at:

Email: info@muscleandmindfulness.com
Address: 901 NW 8th Ave. Suite B8 Gainesville, Fl. 32601