Calibrated Athlete

1. Information Collected

We may collect PII for purposes related to our business, to improve the content of the Services, or for any other commercial purpose. The only PII collected from you has been voluntarily submitted and provided to us through your use of the Services or in response to requests for information. When you use our services, we collect the following types of information, some of which may be considered Consumer Health Data as defined in certain U.S. state laws such as the Washington My Health My Data Act and Nevada Senate Bill 370. We may collect such data for processing that is necessary for providing the Services as carried out in our legitimate interests.

• User-provided Information. When you use the Services, you may provide, and we may collect, PII. The types of information that we may collect include but are not limited to name, address, email address, and phone number. PII also includes other information, such as geographic areas or preferences, when any such information is linked to information that identifies a specific individual.
• Payment Data. If you make a payment through the Services, you provide your payment information, including, but not limited to, your name, credit or debit card number, card expiration date, CVV code, and billing address. For your convenience we may store the last four digits of your card number and your card issuer's name and contact information. You can remove this information from your account using your account settings. Note that third-party payment processors may retain this information in accordance with their own privacy policies and terms.
• Social Media. We may provide you with the option to link your existing social media account details, like your Facebook, X, or other social media account. If you choose to link your account in this way, we will collect certain profile information about you from the social media provider.
• Automatically Collected Information. When you use the Services, we may automatically record certain information from your device by using various types of technology, including cookies. This "automatically collected" information may include, but is not limited to, IP address or other device address or ID, web browser and/or device type, the pages or content you view or interact with in connection to the Services, the dates and times of your access or use of the Services, and log and usage data.
• Information from Other Sources. We may obtain information, including PII, from third parties and sources other than the Services. If information from other sources is combined or associated with PII collected through the Services, this combined information will be treated as PII in accordance with this Privacy Policy. We may also receive information about you, including log and usage data and cookie information, from third-party sites that integrate our services, including embeds and advertising technology.

2. How Collected Information is Used

We may use the information that is collected in a variety of ways in providing the Services, including, but not limited to, the following:

• Operations. We may use PII to operate, maintain, enhance, and provide all features of the Services, to provide the services and information that you request, to respond to comments and questions, and to provide user support.
• Improvements. We may use collected PII to understand and analyze usage trends and preferences, to improve the Services, and to develop new services, features, and functionality.
• Communications. We may use PII to communicate with you for administrative purposes such as customer service, updates on policies or terms, transactions, and communication relating to services. You may opt out of receiving such communications at any time via a link in the email you receive or by contacting us through our website in the "Contact Us" section.
• Cookies and Tracking Technology. We may use automatically collected information and other information collected through the Services through cookies and similar technologies to: (i) personalize the Services provided; (ii) monitor and analyze the effectiveness of the Services; and (iii) monitor aggregate usage metrics such as number of visitors and pages viewed. Cookies may be either "persistent" cookies or "session" cookies. A persistent cookie will be stored by a web browser and will remain valid until its set expiration date, unless deleted by you prior to the expiration date; a session cookie will expire at the end of your use of our website when the web browser is closed.

3. How Information is Shared

Except as described in this Privacy Policy, we will not intentionally disclose your PII to third parties without your explicit consent. We may disclose information to third parties with your consent, as well as in the following circumstances:

• Unrestricted Information. Content generated by you and posted to or through the Services is your sole and exclusive responsibility and we have no responsibility or liability for such content. Any information you voluntarily display to the public on through the Services will be available to any individual who has access to that content. Further, search engines may index your user generated content such that it may be found on and through common search engines. We cannot and will not guarantee the safety or security of your user generated content.
• Service Providers. In some events we may work with service providers who provide website, application development, hosting, maintenance, and other services. These third parties may have access to or process PII as part of providing such services. We limit and anonymize the information provided to these service providers to that which is reasonably necessary for them to perform their functions.
• Non-Personally Identifiable Information. We may make certain automatically-collected, aggregated, or otherwise non-personally identifiable information available to third parties for various purposes, including: (i) compliance with reporting obligations; and (ii) business or marketing purposes.
• Legal Compliance. We may disclose PII or other information if required to do so by law or in the good-faith belief that such action is necessary to comply with applicable laws, in response to a valid court order, judicial or other government subpoena or warrant, or to otherwise cooperate with law enforcement or other government agencies. We also reserve the right to disclose PII or other information that we believe, in good faith, is appropriate or necessary to: (i) take precautions against liability; (ii) protect from fraudulent, abusive, or unlawful uses or activity; (iii) investigate and defend against any third-party claims or allegations; or (iv) protect our property or other legal rights, enforce our contracts, or protect the rights, property, or safety of others.
• Change in Structure/Ownership. Information, including PII, may be disclosed and otherwise transferred to an acquirer, successor, or assignee as part of any merger, acquisition, debt financing, sale of assets, or similar transaction, as well as in the event of an insolvency, bankruptcy, or receivership in which information is transferred to one or more third parties as one of our business assets and only if the recipient of the PII commits to a privacy policy that has terms substantially consistent with this Privacy Policy.
• Testimonials. We may display personal testimonials on our website in addition to other endorsements. With your consent, we may post your testimonial along with your first name and last initial. If you wish to update or delete your testimonial, please contact us through our website in the "Contact Us" section.

4. Sharing of Your Personal Information

We may need to share your personal information in the following situations:

• When You Agree or Direct Us to Share. You may direct us to disclose your information to others, such as when you use our community features. For certain information, we provide you with privacy preferences in account settings and other tools to control how your information is visible to other users of the Services. You may also direct us to share your information in other ways, for example, when you give a third-party application access to your account or give your employer access to information when you choose to participate in an employee wellness program. Their use of your information will be governed by their privacy policies and terms. You can revoke your consent to share with third-party applications or employee wellness programs using your account settings.
• For External Processing. We transfer information to our corporate affiliates, services providers, and other partners who process it for us, based on our instructions, and in compliance with this policy and any other appropriate confidentiality and security measures. These partners provide us with services globally, including for customer support, information technology, payments, sales, marketing, data analysis, research, and surveys.
• For Legal Reasons or to Prevent Harm. We may preserve or disclose information about you to comply with a law, regulations, legal process, or governmental request; to assert legal rights or defend against legal claims; or to prevent, detect, or investigate activity, fraud, abuse, violations of our terms, or threats to the security of the Services or the physical safety of any person.
• As Aggregated or De-Identified. We may share non-personal information that is aggregated or de-identified so that it cannot reasonably be used to identify an individual. We may disclose such information publicly and to third parties, for example, in public reports about exercise and activity, to partners under agreement with us, or as part of the community benchmarking information we may provide to users of our Services.
• Change of Ownership. If we are involved in a merger, acquisition, or sale of assets, we will continue to take measures to protect the confidentiality of personal information and give affected users notice before transferring any personal information to a new entity.

5. Your Rights

We respect your privacy rights and provide you with reasonable access to the PII that you may have provided through your use of the Services. If you wish to access or amend any information or PII we hold about you, you may contact us through our website in the "Contact Us" section. You may further control your PII in the following ways:

• At your request, we will have any reference to you deleted or blocked from our records. We may retain some information you submit for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe there is a legitimate reason to do so.
• You may also submit a request to delete the PII we maintain about you by contacting us through our website in the "Contact Us" section.
• You may control our website's use of cookies. Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove or reject first- and third-party cookies. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of some of the Services.
• You may, at any time, decline to share certain PII with us, in which case we may not be able to provide to you some of the features and functionality of the Services.
• At any time, you may object to the processing of your PII, on legitimate grounds, except if otherwise permitted by applicable law. You always have a right to lodge a complaint with data protection authorities.
• If you receive commercial emails from us, you may unsubscribe or opt-out at any time by contacting us through our website in the "Contact Us" section. Please be aware that it may take up to 10 business days for us to process your request. Additionally, even after you opt-out from receiving commercial messages, you may continue to receive administrative messages regarding the Services.

6. Third Party Web Sites

This Privacy Policy applies only to the Services and not to the websites of partners, affiliates, or other third parties. You may be required to accept additional policies prior to your use of links accessed through the Services. We are not responsible for the content or privacy and security practices and policies of third-party sites or services to which links or access are provided through the Services. We encourage you to learn about third parties' privacy and security policies before providing them with information.

7. Third Party Servers

Certain information stored or transmitted by us hereunder, including PII, may be stored, managed, or otherwise handled by third parties. You understand and agree that we are not liable, accountable, or otherwise responsible for information communicated to or through third party servers and you hereby release us from any associated liability or responsibility consistent with the indemnifications, liability limitations, and privacy policy included herein. If you are located in the European Union or European Economic Area, please note that we will not transfer your information, including PII, to a country outside of the European Union or European Economic Area.

8. Data Security

We follow generally accepted standards to protect the information submitted to us, both during transmission and once we receive it. We maintain appropriate administrative, technical, and physical safeguards to protect PII against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse, and any other unlawful form of processing of the PII in our possession. This may include, for example, firewalls, SSL technology, application-layer security features, password protection, and other access and authentication controls. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. We cannot ensure or warrant the security of any information you transmit to us and you do so at your own risk. We also cannot guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards. If you believe your PII has been compromised, please contact us through our website in the "Contact Us" section. If we learn of a security systems breach, we will inform you and the authorities of the occurrence of the breach in accordance with applicable law.

9. Data Retention

We only retain the PII collected from you for a limited period of time as long as we need such data to fulfill the purposes for which it was initially collected, unless otherwise required by law. It may take additional time for your personal data to be de-indexed from search engines, depending on those search engines' practices, over which we may have limited or no control. We will retain and use information as necessary to comply with legal obligations, resolution of disputes, and enforcement of our agreements.

10. EU-US Privacy

We make all best reasonable efforts to comply with the EU General Data Protection Regulation framework as set forth by the European Union regarding the collection, use, and retention of personal data from European Union member countries. We adhere to the requirements of notice, choice, onward transfer, security, data integrity, access, and enforcement. We are hosted in the United States and by using the Services you authorize us to transfer, store, and use your PII in the United States and any other country where we operate. Users in the European Economic Area have the right to request access to, rectification of, or erasure of their personal data; to data portability in certain circumstances; to request restriction of processing; to object to processing; and to withdraw consent for processing where they have previously provided consent. These rights can be exercised by contacting us through our website in the "Contact Us" section.

11. Children's Privacy

The Services are not intended for children under the age of 13. We do not knowingly collect any PII from children under 13. If we become aware that we have inadvertently received PII from a person under the age of 13 through the Services, we will delete such information from our records.

12. California Residents

The California Consumer Privacy Act ("CCPA") provides some California residents with the additional rights listed below.

• Right to Know. You have the right to know and see what data we have collected about you over the past 12 months, including:
  1. The categories of personal information we have collected about you;
  2. The categories of sources from which the personal information is collected;
  3. The business or commercial purpose for collecting your personal information;
  4. The categories of third parties with whom we have shared your personal information; and
  5. The specific pieces of personal information we have collected about you.
• Right to Delete. You have the right to request that we delete the personal information we have collected from you (and direct our service providers to do the same). There are a number of exceptions, however, that include, but are not limited to, when the information is necessary for us or a third party to do any of the following:
  1. Complete a transaction;
  2. Provide you a good or service;
  3. Perform a contract between us and you;
  4. Protect your security and prosecute those responsible for breaching it;
  5. Fix our system in the event of a bug, virus, or malware;
  6. Protect the free speech rights of you or other users;
  7. Comply with the California Electronic Communications Privacy Act (Cal. Penal Code §1546 et seq.);
  8. Engage in public or peer-reviewed scientific, historical, or statistical research in the public interests that adheres to all other applicable ethics and privacy laws;
  9. Comply with a legal obligation; or
  10. Make other internal and lawful uses of the information that are compatible with the context in which you provided it.
• Other Rights. You can request certain information about any disclosure of personal information to third parties for their own direct marketing purposes during the preceding calendar year. This request is free and may be made once a year. You also have the right not to be discriminated against for exercising any of the rights listed above.
• Exercising your California Privacy Rights. To request access to or deletion of your PII, or to exercise any other data rights under California law, please contact us as set forth in the "Contact Us" section.

13. Colorado Residents

The Colorado Privacy Act ("CPA") provides some Colorado residents with the additional rights listed below.

• Right to Access. You have the right to know and see what personal data we have collected about you in a usable format.
• Right to Delete. You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.
• Right to Correct. You have the right to request that we correct inaccurate personal data.
• Right to Opt Out of Targeted Advertising and Sale of Personal Data. You have the right to "opt out" of "targeted advertising" and the "sale" of your "personal data" (as defined under Colorado law).
• Exercising your Colorado Privacy Rights. To request access to or deletion of your PII, or to exercise any other data rights under Colorado law, please contact us as set forth in the "Contact Us" section.

14. Connecticut Residents

The Connecticut Data Privacy Act ("CDPA") provides some Connecticut residents with the additional rights listed below.

• Right to Access. You have the right to know and see what personal data we have collected about you in a usable format.
• Right to Delete. You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.
• Right to Correct. You have the right to request that we correct inaccurate personal data.
• Right to Opt Out of Targeted Advertising and Sale of Personal Data. You have the right to "opt out" of "targeted advertising" and the "sale" of your "personal data" (as defined under Connecticut law).
• Exercising your Connecticut Privacy Rights. To request access to or deletion of your PII, or to exercise any other data rights under Connecticut law, please contact us as set forth in the "Contact Us" section.

15. Oregon Residents

The Oregon Consumer Privacy Act ("OCPA") provides some Oregon residents with the additional rights listed below.

• Right to Access. You have the right to know and see what personal data we have collected about you in a usable format.
• Right to Delete. You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.
• Right to Copy. You have the right to receive a copy of the personal data we have collected about you.
• Right to Opt Out of Targeted Advertising and Sale of Personal Data. You have the right to "opt out" of "targeted advertising" and the "sale" of your "personal data" (as defined under Oregon law).
• Exercising your Oregon Privacy Rights. To request access to or deletion of your PII, or to exercise any other data rights under Oregon law, please contact us as set forth in the "Contact Us" section.

16. Utah Residents

The Utah Consumer Privacy Act ("UCPA") provides some Utah residents with the additional rights listed below.

• Right to Access. You have the right to know and see what personal data we have collected about you in a usable format.
• Right to Delete. You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.
• Right to Opt Out of Targeted Advertising and Sale of Personal Data. You have the right to "opt out" of "targeted advertising" and the "sale" of your "personal data" (as defined under Utah law).
• Exercising your Utah Privacy Rights. To request access to or deletion of your PII, or to exercise any other data rights under Utah law, please contact us as set forth in the "Contact Us" section.

17. Virginia Residents

The Virginia Consumer Data Protection Act ("VCDPA") provides some Virginia residents with the additional rights listed below.

• Right to Access. You have the right to know and see what personal data we have collected about you in a usable format.
• Right to Delete. You have the right to request that we delete the personal data we have collected about you, subject to applicable legal exceptions.
• Right to Correct. You have the right to request that we correct inaccurate personal data.
• Right to Opt Out of Targeted Advertising and Sale of Personal Data. You have the right to "opt out" of "targeted advertising" and the "sale" of your "personal data" (as defined under Virginia law).
• Exercising your Virginia Privacy Rights. To request access to or deletion of your PII, or to exercise any other data rights under Virginia law, please contact us as set forth in the "Contact Us" section.

18. Changes and Updates to This Privacy Policy

Please revisit this page periodically to stay aware of any changes to this Privacy Policy, which we may update from time to time. If we modify the Privacy Policy, we will provide notice through the Services, indicate the date of the latest revision, and will comply with applicable law. Your continued use of the Services after the revised Privacy Policy has become effective indicates that you have read, understood, and agreed to the current version of the Privacy Policy.

19. Contact

If you have any questions regarding this Privacy Policy, please contact us through our website at the Contact Us page or at:

Zenk Consulting, LLC dba Calibrated Labs

info@calibratedathlete.com