Privacy Policy for MajorGainzFitness.com

1. Introduction

At MajorGainzFitness.com (“we”, “our”, “us”), we value your privacy and are committed to protecting the personal data of our users, customers, and visitors (“you”, “your”). This Privacy Policy outlines how we collect, use, store, and protect your personal information in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and the California Consumer Privacy Act (CCPA). We are dedicated to upholding principles of transparency, accountability, and user empowerment throughout all data processing activities.

2. Scope of Policy and Role as Data Controller

This Privacy Policy applies to all personal data we collect through your interaction with MajorGainzFitness.com, including visits to the website, account registration, purchases, communications, and other engagements. For purposes of the GDPR, we act as the Data Controller responsible for determining the means and purposes of processing personal data. In circumstances where third-party processors are engaged, we require adherence to equivalent data protection standards through contractual arrangements.

3. Categories of Data Processed

We collect and process various categories of personal data, including but not limited to the following:

a. Usage Data
Includes data such as IP address, browser type, operating system, referring URLs, device type, time spent on pages, and other analytical metrics gathered through your interaction with our site.

b. Account Data
Comprises information provided during account creation or management, such as your full name, billing/shipping address, email address, and telephone number.

c. Profile Data
Encompasses information related to your fitness preferences, purchase history, behavior on the platform, feedback submitted, and account settings.

d. Communication Data
Includes records of correspondence, such as customer support requests, email communications, inquiries through contact forms, and user interactions with our support team.

e. Technical Data
Covers data related to your device specifications, operating systems, browser settings, mobile identifiers, and system configurations used to access our services.

f. Transaction Data
Pertains to data involved in the execution and fulfillment of orders, including payment details (processed via secure third-party payment providers), order history, delivery preferences, and fulfillment information.

g. Preference Data
Includes your choices with respect to marketing activities, newsletter subscriptions, product interests, and whether you have opted in or out of personalized content.

4. Legal Bases for Processing

We rely on the following legal grounds to process your personal data, as defined by the GDPR:

– Legitimate Interests: To provide, develop, and enhance our services, communicate effectively, prevent fraud, and ensure security.
– Contractual Necessity: To perform contractual obligations, such as account creation, transactions, and customer support.
– Consent: Where required, we ask for your express consent before processing personal data for marketing or non-essential cookies.
– Legal Obligation: When compliance with legal or regulatory obligations necessitates the processing of your information.

You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent prior to withdrawal.

5. Your Rights

Under GDPR and applicable data privacy laws, you have the following rights:

– Right of Access: You may request a copy of your personal data we hold.
– Right to Rectification: You may request correction of inaccurate or incomplete data.
– Right to Erasure: In appropriate cases, you can request deletion of your personal data.
– Right to Restriction: You may request limitations on how your data is processed.
– Right to Portability: You may request to receive personal data in a structured, commonly used format and transfer it to another controller.

To exercise any of these rights, please contact us using the details provided in Section 13.

6. Security Measures

We implement appropriate administrative, technical, and physical safeguards to protect your personal data. These measures include, but are not limited to:

– Industry-standard encryption protocols during data transmission and storage.
– Role-based access controls and multi-factor authentication.
– Regular security assessments and vulnerability testing.
– Periodic staff training and awareness programs.
– Routine data backups and disaster recovery mechanisms.

While no system can guarantee absolute security, we continuously monitor and improve our safeguards to protect your personal data.

7. International Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, where data protection laws may differ. Where such transfers are necessary, we ensure appropriate protections are in place through the use of Standard Contractual Clauses, adequacy decisions, or other legally acceptable mechanisms in compliance with GDPR requirements.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Data is retained based on the following general timeframes:

– Usage Data: Up to 24 months for analytical purposes.
– Account and Profile Data: As long as you maintain an account with us, and up to 6 years following closure for legal and tax obligations.
– Communication Data: Up to 3 years following the last correspondence.
– Transaction Data: Retained for 7 years in compliance with taxation laws.
– Technical and Preference Data: Up to 2 years or as long as necessary for service customization.

9. Cookie Policy

Our website uses cookies and similar tracking technologies to enhance functionality, analyze usage, and personalize content. The types of cookies in use include:

– Essential Cookies: Necessary for core site functionality such as navigation and security.
– Functional Cookies: Enhance user experience by storing user preferences.
– Analytics Cookies: Collect aggregated information to help us understand how users interact with the site.
– Performance Cookies: Allow us to analyze website performance and improve our services.

10. Cookie Management and Compliance

You can manage your cookie preferences via the cookie settings link provided on our site or through your browser’s cookie management tools. In accordance with GDPR and CCPA, we only place non-essential cookies after obtaining your affirmative consent. You may also exercise the right to opt-out of targeted advertising and analytics services through third-party platforms or by using global privacy controls.

11. Children’s Privacy

Our services are not directed toward children under the age of 13. We do not knowingly collect personal data from individuals under this age. If we learn that we have collected data from a child without appropriate consent, we will take immediate steps to delete such information. Parents or guardians who believe their child has submitted data to us should contact us at [email protected].

12. Policy Updates

We reserve the right to update or modify this Privacy Policy from time to time in response to legal, operational, or regulatory changes. Where appropriate, we will notify you of material changes via email or through a conspicuous notice on MajorGainzFitness.com. Continued use of our services after such changes constitutes your acknowledgment and acceptance of the revised terms.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: [email protected]

We are committed to ensuring compliance with applicable privacy laws and safeguarding your rights as a data subject. Please reach out to us at any time with privacy-related concerns.