Legal
Privacy Policy
In short: we collect only what we need to run your bookings and courses. We do not sell your personal information and do not share it for advertising. We use no advertising or cross-site tracking cookies. Health information you give us for a Session is used only to keep you safe during that Session, is seen only by your practitioner and our founder, and will be deleted at your request.
1. Who we are and what this policy covers
This Privacy Policy explains how Stretchtogo LLC ("Stretchtogo", "we", "us" or "our"), 1100 Brickell Bay Ave, Miami, FL 33231, collects, uses, shares and protects personal information when you use stretchtogo.com (mobile assisted-stretching bookings) and learnstretchtogo.com (certification courses), and when you contact us or receive our services (together, the "Services"). We are the business responsible for your personal information.
This policy forms part of our Terms of Service. It does not cover third-party websites or services we link to, which have their own policies.
2. Information we collect
In short: what you give us when you book, buy, learn or contact us; a small amount of technical data; and nothing from ad networks or data brokers.
Information you give us on stretchtogo.com (Sessions)
- Contact and booking details: name, email address, phone number, the meeting address for your Session (and any access or parking notes), the Session, date, time and practitioner you choose, and any notes you add.
- Intake and health information: your answers to our intake questions, which may include recent injuries, current pain, whether you are pregnant (and how far along), how often you work out and stretch, your goals, and any questions or concerns. We may also learn health information from what you tell your practitioner in person. We treat all of this as sensitive (see Section 4).
- Photo of your space (optional): a photo of the area where you would like to be stretched.
- Waiver acceptance: the fact that you accepted our Client Waiver, with the date, time and version accepted.
- Program applications: if you apply for the Custom Stretch & Strength Program or a job, the information you include in your application.
Information you give us on learnstretchtogo.com (Courses)
- Account details: name (including the name you want on your certificate), email address, password (stored only in securely hashed form), and optionally your phone number and current certification.
- Learning records: your enrollments, access dates, lesson progress, quiz and exam answers and scores, and records of your live evaluation (by video call or in person), in which you demonstrate the routine with a practice partner, including the outcome and the evaluator's feedback.
- Certificates: the name on your certificate, the course, certificate number, issue date and status.
- Community posts: anything you post, comment or upload in the learner community, and your display name.
- Scheduling requests: your preferred dates and location for in-person training.
Information you give us on either site
- Purchases: what you bought, amounts, coupon codes and order history. Card payments are handled by Stripe; we do not receive or store your full card number. We receive limited payment details from Stripe (such as the last four digits, card brand, expiry and whether a payment succeeded).
- Messages: what you send us through contact forms, email or other channels.
Information collected automatically
- Technical and security data: when you visit, our servers receive standard technical information such as your IP address, browser type, the pages requested and the date and time. We use it to deliver the site, prevent abuse and keep the Services secure.
- Analytics: we count visits with our own self-hosted tool. For each page view it records the page address (without any query string), the website that linked to it (the site name only), your device type (phone, tablet or computer) and a visitor code made by one-way scrambling your IP address and browser details with a secret that changes every day. We never store your IP address, it sets no cookies, it cannot recognise you from one day to the next or across other websites, and it is not shared with anyone. If your browser sends a "Do Not Track" signal, nothing is recorded. Page-view records are deleted after 13 months.
- Spam protection: our forms use a proof-of-work check that runs in your browser. It does not use cookies or send your data to any third party.
We do not buy personal information, and we do not receive information about you from advertising networks or data brokers. If someone else books a Session for you, they will give us your name, contact details and possibly your intake answers; they must have your permission to do so.
3. How and why we use your information
We use personal information only for the purposes below. Where a law such as the EU or UK General Data Protection Regulation applies to you, we rely on the legal basis shown.
| Purpose | Examples | Legal basis (where required) |
|---|---|---|
| Provide Sessions | Confirm bookings, send your practitioner to your address, prepare the Session, send reminders, handle rescheduling | Performance of our contract with you |
| Keep you safe | Use intake and health information so the practitioner can adapt or avoid stretches | Your explicit consent; performance of contract |
| Provide Courses and certificates | Give course access, track progress, grade exams, review evaluations, issue and verify certificates, run the community | Performance of contract; legitimate interests (for public certificate verification) |
| Take payments and keep records | Process payments and refunds through Stripe, keep accounting and tax records | Performance of contract; legal obligation |
| Communicate with you | Answer your questions, send service messages (confirmations, receipts, course updates) | Performance of contract; legitimate interests |
| Marketing (only if you agree) | Occasional news or offers by email | Your consent, which you can withdraw at any time |
| Security and abuse prevention | Protect accounts, block spam and fraud, enforce our Terms | Legitimate interests; legal obligation |
| Improve the Services | Understand aggregate site usage | Legitimate interests |
| Legal matters | Comply with law, respond to lawful requests, establish or defend legal claims | Legal obligation; legitimate interests |
We send service emails you need for your bookings and courses. We send marketing emails only if you have opted in, and every marketing email includes a way to unsubscribe.
We do not use your personal information for automated decision-making that has legal or similarly significant effects on you.
4. Health information: extra protections
In short: health information is used only for your Session, seen by as few people as possible, and deleted when you ask.
The health information in your intake answers, and anything you tell your practitioner about your body, is collected with your consent and used only to plan and deliver your Session safely (for example, to adapt or avoid particular stretches). We apply these extra protections:
- Purpose limitation. We never use health information for marketing, advertising, profiling or any purpose unrelated to your Sessions, and we never sell or share it for advertising.
- Restricted access. Only the practitioner assigned to your Session and the authorized Stretchtogo staff who manage bookings can see it. Our service providers store it for us on our behalf only (see Section 5).
- Deletion on request. You can ask us to delete your intake answers and space photo at any time by contacting us. We will delete them, except that we may keep a minimal record (such as the fact that a Session took place and that you accepted our Waiver) where we need it to meet a legal obligation or to establish or defend a legal claim.
- You choose what to share. Intake questions are optional unless marked otherwise, and you may answer them in person instead. However, if you withhold relevant health information, we may be unable to provide a Session safely.
We are not a health-care provider, and we are not a "covered entity" under the US Health Insurance Portability and Accountability Act (HIPAA), so HIPAA does not apply to the information you give us. We nevertheless protect health information as described in this policy.
5. How we share information
In short: only with the few service providers we need to run the business, and never for advertising.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising or targeted advertising. We have not done so in the past 12 months.
We disclose personal information only as follows:
Your practitioner. The practitioner assigned to your Session receives your name, phone number, meeting address, booking details, intake answers and space photo so they can deliver your Session.
Evaluators. Your live evaluation is conducted by a certified Stretchtogo professional acting for us.
Service providers who process information on our behalf, under contract, and only to provide services to us:
- Stripe, to process payments and prevent payment fraud;
- Google (Gmail), to send and receive email; and
- our hosting provider, whose servers store our websites and database.
If you have a virtual Session or live evaluation, the video-calling service we agree with you to use will also process your information under its own terms and privacy policy.
Public certificate verification. If you earn a certificate, anyone with the certificate number or verification link can confirm your name, the course, the issue date and whether the certificate is valid. This is how employers and clients check that a certificate is genuine. We do not show your exam scores, contact details or evaluation feedback.
Community. Your community posts and display name are visible to other enrolled learners.
Legal and safety reasons. When we reasonably believe disclosure is required by law, subpoena or court order, or is necessary to protect the safety of any person (including our practitioners), to prevent fraud or abuse, or to establish, exercise or defend legal claims (including with our professional advisers, who are bound by confidentiality).
Business transfers. If our business is sold, merged or reorganized, personal information may be transferred to the new owner, who will be bound by this policy or give you notice of any change.
With your consent or at your direction.
6. Cookies and similar technologies
In short: we only use cookies that the sites need to work.
We use only strictly necessary cookies:
- a login cookie that keeps you signed in to your account; and
- a cart cookie that remembers what is in your cart.
These cookies are required for the features you ask for and do not track you across other sites. We do not use advertising, retargeting, social-media tracking or third-party analytics cookies. Because we only use strictly necessary cookies, we do not show a cookie banner.
Embedded videos. Some course lessons include videos embedded from YouTube (in its privacy-enhanced mode) or Vimeo. When you play one, those providers may collect information about your device and viewing, and may set their own cookies or similar technologies, under their own privacy policies. We have chosen privacy-enhanced embeds to limit this where possible.
Global Privacy Control and Do Not Track. Because we do not sell or share personal information or engage in targeted advertising, there is nothing further for these signals to switch off; we honor them by continuing not to do so.
7. How long we keep information
We keep personal information only as long as we need it for the purposes above, then delete or de-identify it. Our usual retention periods are:
| Information | How long we keep it |
|---|---|
| Intake and health answers, space photos | Until you ask us to delete them, and in any case no longer than 3 years after your last Session |
| Booking records and Waiver acceptance records | 5 years after your last Session, to handle questions, disputes and legal claims |
| Payment and order records | 7 years, to meet tax and accounting requirements |
| Learner account and progress | While your account is open; we delete or de-identify it within a reasonable time after you ask us to close it |
| Evaluation records, and any evaluation videos submitted before evaluations became live-only | Only as long as needed to administer your certification and handle any re-evaluation or appeal; videos are deleted on request after your evaluation is decided |
| Certificate records | As long as the certificate is verifiable, so it can be checked publicly; a revoked certificate's record is kept to show that it is no longer valid |
| Community posts | Until you or we delete them, or your account is closed |
| Messages to us | Up to 3 years after our last exchange |
| Server security logs | Generally no more than 90 days |
We may keep information longer where the law requires it, or where it is needed to establish or defend a legal claim, and only for as long as needed for that purpose.
8. Your rights and choices
In short: you can ask to see, correct or delete your information, and we will honor those requests whether or not a law requires us to.
Wherever you live, you can ask us to:
- Access the personal information we hold about you and receive a copy in a portable format;
- Correct inaccurate or incomplete information;
- Delete your personal information;
- Withdraw consent where we rely on it (for example, for health information or marketing), without affecting processing that already took place; and
- Opt out of marketing at any time, using the unsubscribe link or by contacting us.
You can update many account details yourself on your account page.
Residents of certain US states. Depending on where you live, state privacy laws (such as the California Consumer Privacy Act as amended by the CPRA, the Florida Digital Bill of Rights, and similar laws in other states) may give you rights to know, access, correct, delete and port your information; to opt out of the sale or sharing of personal information, targeted advertising and certain profiling; and to limit the use of sensitive personal information. These laws apply only to businesses that meet certain thresholds, and they may not apply to us. We will nevertheless honor the rights listed above for all users. We do not sell or share personal information, do not engage in targeted advertising or profiling, and use sensitive information (such as health information) only for the purposes permitted in Section 4, so no opt-out is needed for those activities.
EU, UK and similar jurisdictions. If a law such as the GDPR applies to you, you also have the right to object to or restrict certain processing, and to lodge a complaint with your local data-protection authority.
How to make a request. Contact us through our contact form on either website, and tell us which right you want to exercise. To protect you, we will verify your identity, usually by confirming control of the email address associated with your account or booking, before acting on a request. You may use an authorized agent; we may ask the agent for proof of authorization and ask you to verify your identity directly. We will respond within 45 days, and will tell you if we need more time (up to a further 45 days where permitted) and why. If we decline a request, we will explain why, and you may appeal by replying to our decision with the subject line "Privacy Appeal"; we will respond to an appeal within 60 days.
No discrimination. We will not deny you service, charge you a different price or provide a different quality of service because you exercised your privacy rights. However, some information is needed to provide the Services (for example, we need your address to visit you).
9. Children's privacy
Our websites are not directed to children under 13, and we do not knowingly collect personal information from children under 13. Accounts, bookings and courses are for adults 18 and over. We do not provide Sessions to minors except as described in our Terms, in which case a parent or legal guardian provides the minor's information and remains in control of it. If you believe a child under 13 has given us personal information, please contact us and we will delete it.
10. How we protect your information
We use reasonable administrative, technical and physical safeguards appropriate to the sensitivity of the information, including encrypted connections (HTTPS), hashed passwords, access restricted to the people who need it, private file storage for intake photos and other private files, and a payment processor that handles card data under industry security standards. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects your personal information, we will notify you and the authorities as required by applicable law, including the Florida Information Protection Act.
Please help keep your account safe by using a strong, unique password and keeping it confidential.
11. International transfers
We are based in the United States. Our websites and database are hosted on servers operated by our hosting provider, which may be located outside the United States, including in the European Union. Our payment and email providers may process information in the United States and other countries. By using the Services, you understand that your information will be transferred to, stored and processed in these countries, whose data-protection laws may differ from those where you live. Where the law requires it, we rely on appropriate safeguards for these transfers, such as the European Commission's Standard Contractual Clauses or an adequacy decision.
12. Changes to this policy
We may update this policy from time to time. We will post the updated version with a new effective date and, if the changes are material, we will notify you by email or with a notice on our websites before they take effect. We will not use personal information in a materially different way from what this policy described when we collected it without first asking for your consent where the law requires it.
13. Contact us
For privacy questions or requests, contact us through our contact form, starting your message with "Privacy", or by mail at:
Stretchtogo LLC
1100 Brickell Bay Ave, Miami, FL 33231