Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your personal information in compliance with GDPR and CCPA.
Quick Overview
We collect minimal personal data to provide our services. We don't use advertising cookies, don't create user accounts, and prioritize your privacy with every design decision.
Email Addresses
Collected through newsletter signups and contact forms
Newsletter delivery and responding to inquiries
Analytics Data
Website usage, training plan interactions, search queries, and filter preferences via Umami
Understanding user preferences and improving plan recommendations
Click Tracking
Affiliate link interactions and timestamps
Attribution for affiliate program reporting
Detailed Privacy Policy
1. Information We Collect
Personal Information
We collect personal information that you voluntarily provide to us when:
- Newsletter Subscriptions: Email address via our newsletter signup forms
- Contact Forms: Name, email address, and message content when you contact us
Automatically Collected Information
- Website Analytics: Anonymous website usage statistics via Umami (self-hosted, privacy-focused analytics) including page views, session duration, and browser information
- Training Plan Interactions: We track how you interact with training plans to improve our service:
- Views & Clicks: Which training plans you view, which buttons you click (view details, purchase links), and navigation patterns
- Search Queries: Terms you search for to find training plans (stored anonymously, not linked to your identity)
- Filter Preferences: Which filters you use (fitness level, price range, hours per week, coach preferences)
- Plan Metadata: Plan identifiers (slug, title, coach name, price) associated with your interactions
- Referrer Information: Which page you came from before viewing a plan
- Session Data: Aggregated information about your browsing session stored temporarily in your browser's local storage
- Affiliate Link Tracking: When you click external purchase links, we log:
- Timestamp and date of click
- Plan identifier and coach name
- Referrer URL (which page you clicked from)
- IP address (temporarily, for rate-limiting and fraud prevention only - not stored long-term)
- User agent (browser and device information)
Privacy-First Design: We do not use advertising cookies, create user accounts, or link your analytics data to your personal identity. All tracking is session-based and anonymous.
Legal Basis (GDPR): We process this data under Article 6(1)(f) - Legitimate Interest. Our legitimate interest is understanding which training plans are most useful to users, improving our recommendations, and measuring the effectiveness of our directory.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Newsletter Delivery: Sending training tips, new plan notifications, and directory updates
- Communication: Responding to your inquiries and providing customer support
- Website Improvement: Understanding how our website is used to improve user experience and navigation
- Content Personalization: Analyzing which training plans are most popular to feature relevant content on our homepage and in recommendations
- Search & Discovery: Understanding search patterns to improve our search algorithm and identify missing content areas
- Filter Optimization: Analyzing which filters are most useful to users to improve our filtering system
- Affiliate Attribution: Tracking clicks on external purchase links for our affiliate program reporting and coach attribution
- Fraud Prevention: Using IP addresses temporarily to prevent automated abuse and rate limit requests
- Legal Compliance: Meeting legal obligations and protecting our legitimate interests
3. Legal Basis for Processing (GDPR)
Under GDPR, we process your personal data based on:
- Consent: For newsletter subscriptions and marketing communications
- Legitimate Interest: For analytics, training plan interaction tracking, search pattern analysis, website improvement, and affiliate tracking (Article 6(1)(f) GDPR)
- Contract Performance: When you submit inquiries or training plans
4. Third-Party Services
We use the following third-party services to operate our website:
Email Services
- Resend: Transactional emails and notifications
- Substack: Newsletter delivery and management
Infrastructure
- Vercel: Website hosting and deployment
- Umami: Privacy-focused analytics (self-hosted)
These services may process your data in countries outside your jurisdiction. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where required.
5. Data Retention
- Newsletter Emails: Until you unsubscribe or request deletion
- Contact Form Data: Retained for 2 years for customer service purposes
- Analytics Data: Aggregated and anonymized data retained for 2 years
- Training Plan Interaction Data: Search queries, filter preferences, and click events stored anonymously for 2 years for trend analysis
- Session Data: Temporary browser storage cleared when you close your browser or after 24 hours
- Affiliate Click Logs: Server logs with timestamps and IP addresses retained for 90 days, then anonymized click data retained for 1 year for reporting
- IP Addresses: Not stored long-term. Temporarily logged for rate-limiting (24 hours), then discarded
6. Your Rights
Under GDPR (if you're in the EU/EEA) and CCPA (if you're in California), you have the following rights:
Access Your Data
Request a copy of the personal data we hold about you
Correct Your Data
Update or correct any inaccurate personal information
Delete Your Data
Request deletion of your personal data (right to erasure)
Restrict Processing
Limit how we use your personal information
Data Portability
Receive your data in a portable format
Object to Processing
Object to certain types of data processing
6.1 How to Opt Out of Analytics Tracking
You have control over analytics tracking on our website. We respect your privacy choices and provide several ways to opt out:
1Browser "Do Not Track" Setting
Enable "Do Not Track" (DNT) in your browser settings. Our Umami analytics respects DNT signals and will not track your activity when enabled.
2Privacy-Focused Browser Extensions
Install browser extensions like uBlock Origin, Privacy Badger, or Ghostery. These will automatically block our analytics tracking.
3Clear Browser Storage
Clear your browser's local storage and cookies. Our session tracking data will be deleted when you clear your browser data.
4Contact Us to Opt Out
Email us at hy@functionaltrainings.com with subject "Opt Out of Analytics" and we'll ensure your IP address or session is excluded from tracking.
Important Note:
Opting out of analytics may limit some website functionality, such as personalized plan recommendations. However, all core features will continue to work normally. Our analytics are designed to be privacy-friendly and do not track your personal identity.
7. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information we collect and how it's used
- Right to delete personal information we have collected
- Right to opt-out of the sale or sharing of personal information
- Right to non-discrimination for exercising these rights
Do Not Sell or Share My Personal Information
We do not sell your personal information to third parties. Our affiliate link tracking may be considered "sharing" under CCPA. You can opt out by contacting us at the email below.
8. Data Security
We implement appropriate technical and organizational security measures to protect your personal information, including:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Limited access to personal data on a need-to-know basis
- Secure hosting infrastructure with reputable providers
9. Children's Privacy
Our website is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us.
10. International Data Transfers
Your personal information may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place, such as:
- Standard Contractual Clauses approved by the European Commission
- Adequacy decisions for certain countries
- Certification schemes and codes of conduct
11. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.
12. Contact Us
If you have any questions about this privacy policy or want to exercise your rights, please contact us:
Email: hy@functionaltrainings.com
Subject: Privacy Policy Inquiry
We will respond to your request within 30 days (or as required by applicable law).
Questions About Your Privacy?
We're committed to transparency and protecting your personal information. Contact us if you have any questions or concerns.