Privacy Policy

1. Scope of This Privacy Policy

This Privacy Policy applies to personal information collected through HW Strong and HW / STRONG websites, forms, assessments, purchases, personalized reports, digital product delivery, email communications, customer support, and related services.

It does not govern the independent privacy practices of third-party websites, applications, payment processors, or services that we do not control.

2. Information We Collect

The information we collect depends on how you interact with our services.

Information You Provide Directly

We may collect information you voluntarily provide, including:

• Name;
• Email address;
• Purchase and transaction-related information;
• Assessment and questionnaire responses;
• Training preferences and goals;
• Equipment availability;
• Scheduling and lifestyle information;
• Fitness history and experience;
• Body-composition or physique-related information you choose to provide;
• Motivation, adherence, recovery, and preference information;
• Messages or support requests you send to us.

Information Collected Automatically

When you use our websites or digital services, we or our service providers may automatically collect certain technical information, such as:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Pages viewed;
• Approximate location derived from IP address;
• Referral source;
• Date and time of access;
• Technical logs and error information;
• Security and fraud-prevention signals.

3. How We Use Information

We may use personal information to:

• Process purchases and transactions;
• Generate personalized reports and digital products;
• Deliver purchased products and access links;
• Send receipts and transactional communications;
• Administer assessment results;
• Maintain customer and purchase records;
• Provide customer support;
• Detect fraud, abuse, technical problems, and security threats;
• Maintain and improve our websites and services;
• Understand product usage and performance;
• Comply with legal obligations;
• Enforce our Terms of Service;
• Send educational or promotional communications where permitted by law and consistent with your communication preferences.

We may also use information in aggregated or de-identified form for analytics, product improvement, research, security, and business operations where the information no longer reasonably identifies an individual.

4. Assessment and Personalized Report Data

Some HW Strong products ask you to answer questions so that we can generate a personalized fitness report, training structure, or related digital product.

Assessment responses may include information about goals, training history, schedule, recovery, equipment, body composition, preferences, motivation, and other factors relevant to the requested product.

We use this information to generate, customize, deliver, and support the product you requested.

Assessment data may be processed by automated or rules-based systems and by infrastructure providers acting on our behalf.

HW Strong assessments are not medical evaluations. You should not submit information through an assessment that you do not want used for the purpose of generating or administering your requested report.

5. Payments and Checkout Information

Payments may be processed by third-party payment processors such as Stripe.

We generally do not receive or store your complete payment card number, card security code, or other full payment credentials. Payment processors may collect and process that information directly under their own privacy policies and security practices.

We may receive transaction-related information such as:

• Your email address;
• Your name, if provided;
• Transaction identifier;
• Product purchased;
• Purchase amount;
• Currency;
• Payment status;
• Checkout or payment-session identifiers;
• Refund or dispute information.

We use this information to confirm purchases, deliver products, maintain transaction records, prevent fraud, and respond to payment disputes.

6. Service Providers and Information Sharing

We may share personal information with service providers when reasonably necessary for them to perform services on our behalf.

These providers may include companies that provide:

• Payment processing;
• Cloud hosting;
• Database infrastructure;
• File and object storage;
• Email delivery;
• PDF or report generation;
• Website hosting and deployment;
• Analytics;
• Security and fraud prevention;
• Customer-support infrastructure.

These providers are permitted to process information only as necessary to provide their services to us or as otherwise permitted under their own applicable legal obligations.

Business and Legal Disclosures

We may also disclose information where reasonably necessary to:

• Comply with applicable law, regulation, subpoena, or legal process;
• Protect our legal rights or property;
• Investigate fraud, abuse, security incidents, or unlawful activity;
• Protect the safety of users or others;
• Establish, exercise, or defend legal claims;
• Complete a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction.

7. Email, Transactional Messages, and Marketing

We may use your email address to deliver products, send receipts, provide access links, communicate service information, and respond to support requests.

We may also send educational or promotional emails where permitted by law and consistent with your communication preferences.

Promotional emails will include an unsubscribe mechanism where required by law.

Unsubscribing from promotional communications does not necessarily prevent us from sending transactional, purchase-related, security, or service communications that are necessary to fulfill a request or administer an existing transaction.

8. Cookies, Logs, and Analytics

Our websites and service providers may use cookies, local storage, server logs, pixels, or similar technologies for functions such as:

• Maintaining website functionality;
• Remembering preferences;
• Measuring site usage;
• Diagnosing errors;
• Improving performance;
• Preventing fraud or abuse;
• Understanding referral and conversion activity.

Your browser may allow you to block or delete cookies. Disabling certain technologies may affect site functionality.

Where required by applicable law, we will provide additional choices or notices regarding non-essential cookies or tracking technologies.

9. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

• Provide and administer requested products;
• Maintain transaction records;
• Maintain customer history where operationally necessary;
• Comply with tax, accounting, and legal obligations;
• Prevent fraud and abuse;
• Resolve disputes;
• Enforce agreements;
• Maintain security and system integrity.

Retention periods may vary depending on the type of information, the purpose for which it was collected, legal requirements, and whether the information is needed for an ongoing transaction or relationship.

When information is no longer reasonably needed, we may delete, anonymize, aggregate, or otherwise render it non-identifying, subject to applicable law and technical limitations.

10. Security and Privacy by Design

We use administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

Depending on the system and data involved, safeguards may include:

• Encrypted transmission;
• Access controls;
• Restricted credentials;
• Service-role separation;
• Database security controls;
• Infrastructure logging;
• Secrets and environment-variable management;
• Limited-access storage;
• Provider-level security controls;
• Data minimization and separation practices.

We design systems to limit unnecessary exposure of directly identifying information and to avoid placing personal identifiers in systems where they are not required for the relevant function.

No internet-connected system can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security against every possible threat, breach, or unauthorized access event.

11. Your Privacy Rights

Depending on where you live and subject to applicable law, you may have rights regarding your personal information, including the right to request:

• Access to personal information we maintain about you;
• Correction of inaccurate personal information;
• Deletion of certain personal information;
• Information about categories of data collected or disclosed;
• Restriction or objection to certain processing;
• A portable copy of certain information;
• Withdrawal of consent where processing depends on consent.

These rights are subject to legal exceptions. For example, we may retain information where necessary to complete transactions, detect fraud, comply with law, maintain security, resolve disputes, or establish or defend legal claims.

We may need to verify your identity before completing certain privacy requests.

12. California Privacy Information

California residents may have additional rights under applicable California privacy laws.

Categories of Personal Information

Depending on your interaction with HW Strong, we may collect categories of information such as:

• Identifiers, including name, email address, IP address, and transaction identifiers;
• Commercial information, including products purchased and transaction history;
• Internet or electronic activity information, including website usage and technical logs;
• Inferences or preferences derived from assessment responses for the purpose of generating personalized fitness products;
• Other information you voluntarily submit through assessments, forms, or support communications.

California Consumer Requests

Subject to applicable law, California residents may request that we:

• Disclose categories or specific pieces of personal information collected;
• Correct inaccurate personal information;
• Delete eligible personal information;
• Provide information about categories of personal information disclosed to service providers or other recipients;
• Honor other applicable privacy rights provided under California law.

We will not discriminate against you for exercising privacy rights protected by applicable law.

Sale and Sharing

We do not sell personal information for money as a core part of our business model.

If our use of advertising, analytics, or tracking technologies ever constitutes a "sale" or "sharing" of personal information under applicable California law, we will provide the notices and choices required by law.

Sensitive Personal Information

Certain information voluntarily provided in fitness assessments may relate to physical characteristics, fitness goals, or other personal matters.

We use such information for the purposes reasonably necessary to provide the assessment, personalized product, security, support, and related services requested by the user.

13. Children's Privacy

HW Strong services are not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Our paid products are generally intended for adults or individuals using the service with appropriate parental or guardian permission.

If we learn that personal information from a child has been collected in violation of applicable law, we will take reasonable steps to delete it.

14. Data Location and Transfers

HW Strong and its service providers may process or store information in the United States and other jurisdictions where our infrastructure providers operate.

As a result, personal information may be processed in a jurisdiction with different privacy or data-protection laws than the jurisdiction in which you live.

Where required by applicable law, appropriate safeguards may be used for international data transfers.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our services, technology, legal obligations, security practices, or business operations.

When we make changes, we may update the effective date displayed at the top of this page.

Material changes may be communicated through the website, by email, or through another appropriate method where required by law.

16. Contact and Privacy Requests

Questions about this Privacy Policy or requests relating to personal information may be submitted using the contact method published on the HW Strong website.