Privacy Policy for Body and Mind Fitness

Effective Date: February 01, 2025 Last Updated: October 08, 2025

At Body and Mind Fitness ("we," "us," or "our"), a personal training studio based in Dumont, New Jersey, we are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at bamfitnessnj.com (the "Website"), interact with our services, or provide information through web forms or other means. By using our Website or submitting information to us, you consent to the practices described in this Privacy Policy.

If you do not agree with our policies and practices, please do not use our Website or provide us with your information. We may update this Privacy Policy from time to time, and we will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date above. Your continued use of the Website after such changes constitutes your acceptance of the revised policy.

This Privacy Policy complies with applicable U.S. laws, including the New Jersey Data Privacy Act (NJDPA), the California Consumer Privacy Act (CCPA/CPRA) if applicable, the CAN-SPAM Act, and other relevant regulations. As a small local business, we may not meet the thresholds for full applicability under laws like the NJDPA (e.g., processing data from fewer than 100,000 New Jersey residents annually), but we follow best practices for transparency and data protection to build trust with our users.

Information We Collect
How We Collect Information
How We Use Your Information
Consent for Marketing and Communications
Sharing Your Information
Cookies and Analytics Technologies
Data Security
Data Retention
Your Rights and Choices
Children's Privacy
International Data Transfers
Changes to This Privacy Policy
Contact Us

Information We Collect

We collect information that identifies, relates to, or could reasonably be linked with you ("Personal Information"). This may include:

Contact Information: Name, email address, phone number, postal address, and other details you provide via web forms, sign-up sheets, or inquiries.
Health and Fitness Information: Details about your fitness goals, preferences, or health status if shared during consultations or form submissions (note: this may be considered sensitive data under certain laws).
Payment Information: Credit card details or billing information if you purchase services (processed securely via third-party providers).
Usage Data: Information about how you interact with our Website, such as IP address, browser type, pages visited, time spent on pages, and referral sources.
Marketing Preferences: Information on your interests for tailored communications.

We do not collect more information than necessary for our business purposes.

How We Collect Information

Directly from You: When you fill out web forms (e.g., for booking a free session, signing up for newsletters, or inquiring about services), provide your email or contact details in person, or communicate with us via email or phone.
Automatically: Through cookies, analytics tools (e.g., PostHog for event tracking like page views and clicks), and similar technologies when you visit our Website.
From Third Parties: If you interact with us via social media or partners, we may receive information from those sources.

How We Use Your Information

We use your information for legitimate business purposes, including:

Providing and improving our personal training services, such as scheduling sessions, creating personalized plans, and responding to inquiries.
Lead tracking and management to follow up on potential clients.
Marketing and communications, including sending promotional emails, newsletters, offers, and updates about our studio, classes, nutrition coaching, or events.
Analyzing Website usage to enhance user experience (e.g., via PostHog analytics).
Processing payments and managing accounts.
Complying with legal obligations, resolving disputes, and enforcing our terms.

Under laws like the NJDPA or CCPA (if applicable), our legal bases for processing include your consent, performance of a contract, or legitimate interests (e.g., marketing to grow our local business).

Consent for Marketing and Communications

By submitting a web form on our Website, providing your email or contact information in any manner (e.g., in-person sign-ups or inquiries), or otherwise sharing your details with us, you provide express consent to receive marketing and communications from Body and Mind Fitness. This includes emails, text messages (SMS), phone calls, direct mail, or other methods about our services, promotions, fitness tips, and community events.

We comply with the CAN-SPAM Act and do not require prior opt-in for commercial emails, but your submission implies agreement to these communications.
Message and data rates may apply for SMS; frequency varies (e.g., 4-6 messages per month).
You can withdraw consent or opt out at any time by clicking the "unsubscribe" link in emails, replying "STOP" to texts, or contacting us (see "Contact Us" below). Opting out will not affect communications necessary for service delivery (e.g., appointment reminders).

Best practices recommend explicit consent for marketing, but U.S. laws allow implied consent via form submission if clearly disclosed, as here. We do not sell your data for targeted advertising without opt-out options.

Sharing Your Information

We may share your information with:

Service Providers: Third parties like payment processors, email services (e.g., for newsletters), or analytics tools (e.g., PostHog) that help us operate our business. These providers are contractually obligated to use your data only for our purposes and maintain confidentiality.
Business Partners: For joint promotions or events, with your consent where required.
Legal Requirements: If required by law, subpoena, or to protect our rights, safety, or property.
Business Transfers: In the event of a merger, acquisition, or sale of assets.

We do not sell your Personal Information as defined under the CCPA or NJDPA. If we engage in activities considered a "sale" (e.g., sharing for targeted ads), we provide opt-out options.

Cookies and Analytics Technologies

Our Website uses cookies and similar technologies for functionality, performance, and analytics. We use PostHog to track simple events like button clicks and page views to improve our site—no targeted advertising.

Types of Cookies:
- Essential: For site functionality (e.g., session management).
- Analytics: To understand usage patterns (e.g., PostHog).
- Marketing: If used, for personalized content.

You can manage cookies via your browser settings. Under laws like the NJDPA, we provide transparency but do not require consent banners for U.S. users unless processing sensitive data or meeting thresholds. For EU visitors (if any), we may implement consent mechanisms. Opt out of analytics by contacting us.

Data Security

We implement reasonable administrative, technical, and physical safeguards to protect your information from unauthorized access, loss, or misuse. For example, we use encryption for sensitive data and secure servers. However, no system is 100% secure, and we cannot guarantee absolute security during transmission over the internet.

If a data breach occurs, we will notify affected individuals as required by law (e.g., within 45 days under NJDPA if applicable).

Data Retention

We retain your Personal Information only as long as necessary for the purposes outlined here, or as required by law. For example:

Contact data for leads: Up to 2 years after last interaction.
Analytics data: Anonymized and retained indefinitely for insights.

We securely delete or anonymize data when no longer needed.

Your Rights and Choices

Depending on applicable laws (e.g., NJDPA, CCPA), you may have rights such as:

Access: Request details about your data.
Correction: Update inaccurate information.
Deletion: Request removal of your data (subject to exceptions).
Opt-Out: From sales of data, targeted ads, or marketing communications.
Non-Discrimination: We won't penalize you for exercising rights.

To exercise these rights, contact us (see below). We respond within 45 days (extendable if needed). For marketing, use unsubscribe links or reply "STOP."

Children's Privacy

Our Website and services are not intended for children under 13. We do not knowingly collect data from children under 13 without parental consent. If we learn we have such data, we will delete it. For users 13-16, we obtain consent for sensitive data processing as required by NJDPA.

International Data Transfers

As a U.S.-based business, your data is processed in the U.S. If we transfer data internationally (e.g., to cloud providers), we use safeguards like standard contractual clauses to ensure adequate protection.

Changes to This Privacy Policy

We may update this policy to reflect changes in our practices or laws. We will post updates here and may notify you via email if material.

Contact Us

If you have questions about this Privacy Policy or your data, contact us at:
Body and Mind Fitness 32 Omaha St, Dumont, NJ 07628
Email: training@bamfitnessnj.com
Phone: +1-201-208-2669

For privacy requests, include "Privacy Request" in the subject line. This policy is for informational purposes and does not create contractual rights.