Privacy Policy for 6th Street Gym
6th Street Gym (“we,” “us,” or “our”) is committed to protecting the privacy and personal data of our website visitors and customers. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information when you visit our website at https://6thstreetgym.com or otherwise interact with us. We adhere to applicable privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), with a privacy-first approach.
1. Commitment to Privacy and Data Protection
We respect your privacy and are dedicated to maintaining the confidentiality, integrity, and security of your personal information. We believe in transparency and fairness in how we handle personal data and strive to uphold the highest standards of data protection.
2. Scope of this Policy and Our Role as Data Controller
This Privacy Policy applies to the collection, processing, and use of personal data in connection with your use of https://6thstreetgym.com. For purposes of the GDPR and other data protection laws, 6th Street Gym is the “data controller,” meaning we determine the purposes and means of processing your personal data.
3. Categories of Data We Process
We process a variety of information to provide and improve our services. The categories of personal data we may collect and process include:
– Usage Data: Information about how you interact with our website, including browser type, IP address, device identifiers, access times, pages visited, and referring website URLs.
– Account Data: Data used to register or manage an account with us, such as your full name, billing and shipping address, email address, and telephone number.
– Profile Data: Information connected to your preferences, habits, and behaviors, including class bookings, membership history, purchase activities, and fitness preferences.
– Communication Data: Records of your interactions with our team, including support requests, inquiries, chat logs, and email correspondence.
– Technical Data: Device details—including hardware model, operating system, browser configuration, and network information—used for system optimization and security.
– Transaction Data: Payment details (excluding full card numbers handled by third-party processors), billing history, and shipping/delivery information.
– Preference Data: Data used to manage marketing communications and understand interests, including newsletter opt-ins, feedback forms, and survey responses.
4. Legal Bases for Processing
We process your personal data on the following lawful grounds:
– Legitimate Interests: To provide, improve, and secure our services, analyze website usage, maintain internal operations, or communicate relevant updates to our users.
– Contractual Necessity: To fulfill obligations under a contract where you purchase services or memberships from us.
– Consent: For marketing communications, use of non-essential cookies, and other processing not covered by the above grounds, where you have provided explicit consent.
– Legal Obligation: To comply with applicable laws, regulations, legal proceedings, or enforceable government requests.
5. Your Rights Under Data Protection Law
You have the following rights regarding your personal data under applicable laws including the GDPR and, where applicable, the CCPA:
– Right of Access: You may request access to your personal data.
– Right to Rectification: You may request correction of inaccurate or incomplete data.
– Right to Erasure: You may request deletion of your personal data, subject to lawful retention obligations.
– Right to Restrict Processing: You may request a limitation on processing under specific circumstances.
– Right to Data Portability: You may request to receive your personal information in a structured, commonly used, and machine-readable format and transmit it to another controller.
– Right to Object: You may object to processing where it is based on our legitimate interest or for direct marketing purposes.
– Right Not to Be Subject to Automated Decision-Making: We do not perform profiling or automated decisions with legal or similarly significant effects.
California residents also have the right to request details of what personal information we collect, use, and share, and to request deletion of that information, subject to certain exceptions.
To exercise any of these rights, you may contact privacy support at [email protected].
6. Security Measures
We implement robust administrative, technical, and physical safeguards to protect personal data, as follows:
– Encryption: Data in transit is encrypted using SSL/TLS protocols. Sensitive stored data is encrypted where required.
– Access Control: Personal data is accessible only by authorized personnel with appropriate need and role.
– Backups & Disaster Recovery: We maintain secure system backups and have contingency measures in place for data recovery.
– Staff Training: Personnel with access to personal data receive regular training on data security and privacy compliance.
7. International Data Transfers
Where your personal data is transferred outside of your country of residence, including to countries that may not have equivalent data protection laws (such as the United States where our servers are located), we implement appropriate safeguards such as Standard Contractual Clauses (SCCs) or rely on other lawful mechanisms to ensure adequate protection of your data.
Users in the EEA, United Kingdom, or other jurisdictions with cross-border transfer restrictions can be assured that we comply with applicable international data protection safeguards.
8. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. The applicable retention periods include:
– Account Data: Retained for the life of the account plus 6 years for legal and tax purposes.
– Communication and Support Data: Retained for 24 months for service analysis and dispute resolution.
– Transaction Data: Retained for 7 years to comply with financial audits and regulatory obligations.
– Usage and Technical Data: Retained for up to 12 months for analytics and platform optimization.
– Marketing and Preference Data: Retained until you withdraw consent or opt out, or for up to 24 months post-interaction.
9. Cookie Policy
We use cookies and similar technologies on 6thstreetgym.com for the following purposes:
– Essential Cookies: Necessary for the operation and security of our website.
– Functional Cookies: Enhance usability by remembering user preferences.
– Analytics Cookies: Allow us to analyze traffic and user behavior to improve services (e.g., Google Analytics).
– Performance Cookies: Track the effectiveness of campaigns and optimize user experience.
These cookies may be ours or served by third parties.
10. Cookie Management and Compliance
You have control over your cookie preferences. Upon visiting our site, a cookie banner will allow you to accept or deny non-essential cookies. You may also modify or withdraw your consent via your browser settings or by using our cookie settings manager. We comply with both GDPR and CCPA requirements related to cookie disclosures and user consent mechanisms.
California residents may also use the “Do Not Sell My Personal Information” feature where applicable. No personal data is sold unless explicitly disclosed.
11. Children’s Privacy
We do not knowingly collect or solicit personal information from children under the age of 13. If you are under 13, please do not use our services or provide any personal information. If we become aware that we have collected data from a child under 13, we will delete such information promptly. Parents or guardians who believe a child may have submitted personal data should contact us at [email protected].
12. Policy Updates
We may revise this Privacy Policy at any time to reflect changes in our practices or legal obligations. Users will be notified of material changes through our website or via direct communication if appropriate. Continued use of https://6thstreetgym.com signifies acceptance of the updated policy.
13. Contact Us
If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact our privacy team at:
Email: [email protected]
Website: https://6thstreetgym.com
We are committed to compliance with applicable privacy laws and to providing clear, user-friendly information about how your data is handled. Please reach out with any questions or concerns regarding your privacy rights or this policy.