Privacy Policy

Effective Date: May 23, 2025

This Privacy Policy explains how Body By Discipline ("we," "us," or "our") collects, uses, and protects your personal information when you interact with our fitness services, including our website, SMS services, chatbot platform, and any related applications or services.

1. Data Controller

Body By Discipline
7959 Broadway, Lemon Grove, CA 91945
Contact Email: chris@bodybydiscipline.com

2. Types of Data Collected

Among the types of Personal Data that we collect, by itself or through service providers, are: Tracker; Usage Data; email address; first name; last name; phone number; payment information; Data communicated while using the service; various types of Data.

Personal Data may be freely provided by the User or, in case of Usage Data, collected automatically.

Users are responsible for any third-party Personal Data obtained, published, or disclosed through our Application.

3. Method and Place of Processing the Data

We implement appropriate security measures to prevent unauthorized access, disclosure, or modification of Data. Processing is carried out using computers and/or IT tools, following organizational procedures related to the purposes indicated.

The Data is processed at our operating offices and any other places where the involved parties are located.

Depending on the User’s location, data transfers may involve transferring their Data to a country other than their own. We ensure appropriate safeguards are in place in such scenarios.

4. Legal Basis of Processing

We may process Personal Data if:

• You have given consent

• Processing is necessary for a contract

• We are legally obliged to

• There is a public interest

• Legitimate interests of the Data Controller or a service provider apply

5. Retention Time

Personal Data shall be retained as long as required by its purpose:

• Data collected for a contract is retained until fully performed

• Data collected for our legitimate interest is retained as long as needed

• We may retain Personal Data longer where required by law or with your consent

6. SMS and Messaging Compliance (A2P 10DLC)

By opting into our messaging program, you agree to receive messages regarding:

• Class confirmations

• Appointment reminders

• Promotional offers (if opted in)

• Support assistance

You can cancel the SMS service at any time by texting "STOP". We will confirm your unsubscribe status via SMS. You will no longer receive messages unless you opt back in.

Reply "HELP" for assistance, or contact info@toppleai.com.

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services (e.g. customer service) is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the Text Message services.

7. Chatbot Data Privacy

We collect and process chatbot data such as:

• Name, phone number, and/or email (if provided)

• Questions asked

• Booking preferences

This information is used to:

• Improve user experience

• Fulfill service requests

• Analyze insights for performance

• Train AI models

• Create anonymized marketing data

This does not include SMS opt-in data or identifiable message originator information, which are explicitly excluded from any form of data sharing or marketing use in accordance with A2P 10DLC compliance.

Data is never sold or disclosed for promotional use outside of Body By Discipline.

8. How We Use Your Data

We collect and process Personal Data to:

• Provide and maintain our services

• Deliver reminders and chatbot services

• Improve service quality and marketing (only with consent)

• Respond to legal obligations

9. Data Sharing

We do not sell or disclose Personal Data with external entities for marketing purposes.
We may disclose data with:

• Hosting or infrastructure providers

• Aggregators for SMS/chatbot (only for delivering messaging services)

• Payment processors

• CRM platforms (e.g., Gymdesk) — strictly for internal scheduling and communication purposes

All categories exclude text messaging originator opt-in data and consent; this information will not be disclosed with any parties, including CRM platforms, except aggregators and providers of the Text Message services.

10. Your Rights

You may have the right to:

• Access, correct, or delete your data

• Withdraw consent

• Object to data processing

• Request data portability

To exercise your rights, contact chris@bodybydiscipline.com.

11. Do Not Track

This Application does not support “Do Not Track” requests.

12. Cookie Policy

We use cookies and trackers for:

• Session performance

• Analytics

• Chatbot function

Users may manage cookies in browser settings.

13. Children’s Privacy

We provide services to children under 18 (e.g., youth boxing programs). Parental or guardian consent is required. We do not knowingly collect data from children under 13. If we learn that we have, we will delete it immediately.

14. California Privacy Rights (CCPA)

California residents have rights to:

• Know what personal information we collect

• Delete their data

• Opt out of sale (we do not sell your data)

We will respond to verified requests within 45 days.

15. Brazil’s LGPD Compliance

Brazilian users have similar rights to access, correct, delete, or port their data. We follow all obligations under Brazil’s LGPD.

16. Updates to this Policy

We reserve the right to make changes to this privacy policy. Updated policies will be posted here with a new effective date.

17. Contact

If you have questions or wish to exercise your privacy rights:
📧 chris@bodybydiscipline.com (Primary Contact)
📧 info@toppleai.com (Compliance Assistance Partner)

Body By Discipline – Privacy Matters. So does trust.