Privacy Policy

Effective Date: April 21, 2026

Mark S Peakform (Musclepumpt LLC) (“Company”, “we”, “us”, “our”) operates markspeakform.com (the “Site”). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, how we share it, and your rights under the California Consumer Privacy Act (CCPA/CPRA), CalOPPA, COPPA, and other applicable U.S. laws.

BY USING THIS SITE OR OUR SERVICES, YOU CONSENT TO THIS PRIVACY POLICY. IF YOU DO NOT AGREE, DO NOT USE THE SITE OR SERVICES.

1. WHO WE ARE  

Controller: Mark S Peakform (Musclepumpt LLC), Howell, MI 48843, United States  

Contact: support@markspeakform.com  

We provide 1-on-1 fitness coaching, life coaching, digital programs, and app access. We are NOT a marketplace. We do not employ third-party instructors.

2. INFORMATION WE COLLECT  

A. Information You Provide Directly:  

1. Account/Booking: Name, email, phone, address, zip code, age, gender, emergency contact.  

2. Health Data: PAR-Q answers, injuries, medications, physician clearance, goals, photos/measurements you upload, workout/nutrition logs. This is “sensitive personal information” under CPRA.  

3. Payment: Payments processed by Stripe. We receive last 4 digits of card, billing zip, transaction ID. We do NOT store full card numbers or CVV.  

4. Communications: Emails, texts, app messages, support tickets, survey responses.  

5. Consultation: Notes from calls, intake forms, progress photos/videos you choose to share.

B. Information Collected Automatically:  

1. Log Data: IP address, browser type, device ID, OS, pages visited, time/date, referring URL, clicks.  

2. Cookies & Similar Tech: We use essential cookies (login, cart), analytics cookies (Google Analytics), and Fresha booking cookies. No advertising or cross-context behavioral cookies.  

3. Geolocation: Approximate city/state from IP for local service compliance. No precise GPS unless you enable location in our app.

C. Information We DO NOT Collect:  

Social Security Numbers, driver’s license numbers, biometric data, genetic data, union membership, precise geolocation, or data from children under 13.

3. HOW WE USE YOUR INFORMATION  

We use personal data to:  

1. Provide services: schedule sessions, process payments, deliver coaching, track progress.  

2. Communicate: appointment confirmations, reminders, service updates, respond to inquiries.  

3. Improve services: analytics, debugging, security, develop new features.  

4. Legal compliance: tax, accounting, respond to legal process, enforce Terms.  

5. Marketing: Send you emails about our services only. We do NOT sell personal data.  

Legal basis: Performance of contract, consent, legitimate interests, legal obligation.

4. HOW WE SHARE YOUR INFORMATION  

We disclose personal data only to:  

1. Service Providers: Stripe (payment), Fresha (booking), Google (analytics/email), website host, app provider. They are contractually prohibited from using data for their own marketing.  

2. Legal Requirements: If required by law, subpoena, court order, or to protect rights, safety, or property.  

3. Business Transfers: If we merge or sell assets, data may transfer to the buyer under same protections.  

4. With Your Consent: Testimonials or case studies only if you give written permission.

We do NOT sell or share personal data for cross-context behavioral advertising. We do NOT share with data brokers or third-party marketers.

5. COOKIES & TRACKING  

Types used:  

1. Strictly Necessary: Login, security, load balancing. Cannot be disabled.  

2. Analytics: Google Analytics to understand traffic. You may opt out via browser settings or https://tools.google.com/dlpage/gaoptout.  

We honor Global Privacy Control (GPC) signals as a valid opt-out of sale/sharing under CPRA.  

To manage cookies: Set your browser to refuse cookies. Blocking essential cookies may break the Site.

6. DATA RETENTION  

We retain personal data only as long as necessary:  

1. Active clients: Duration of relationship + 3 years.  

2. Health data & invoices: 7 years for legal/tax/insurance defense.  

3. Marketing contacts: Until you unsubscribe + 30 days.  

4. Backups: Deleted within 90 days of deletion request.  

After periods expire, we delete or anonymize data.

7. DATA SECURITY  

We use SSL encryption, Stripe PCI-DSS compliance, access controls, and vendor security reviews. However, no internet transmission is 100% secure. You use the Site at your own risk.

8. YOUR PRIVACY RIGHTS  

A. All Users: You may access, update, or correct your info by logging into your account or emailing us.  

B. California Residents (CCPA/CPRA): You have the right to:  

1. Know: Request categories/sources of personal data collected, sold, or disclosed.  

2. Access: Request copy of specific personal data.  

3. Delete: Request deletion, subject to legal exceptions.  

4. Correct: Request correction of inaccurate data.  

5. Limit: Limit use of sensitive personal info to services only. We only use health data to provide coaching.  

6. Opt-Out of Sale/Sharing: We do not sell or share, so no opt-out needed.  

7. Non-Discrimination: We will not discriminate for exercising rights.  

To exercise: Email support@markspeakform.com with “CCPA Request”. We verify identity and respond within 45 days. Authorized agents must provide proof.

C. Nevada Residents: We do not sell covered information. Email to opt out of future sales.  

D. Other States (VA, CO, CT, UT): Similar rights as CA. Contact us to exercise.

9. CHILDREN’S PRIVACY (COPPA)  

Site not directed to children under 13. We do not knowingly collect data from children under 13. If we learn we have, we delete it. Clients 13-17 require parent/guardian consent per Terms.

10. EMAIL & TEXT COMMUNICATIONS (CAN-SPAM & TCPA)  

By providing your phone/email, you consent to receive transactional messages: appointment reminders, service updates. Marketing emails include unsubscribe link. Marketing texts: reply STOP to opt out. Consent not a condition of purchase.

11. THIRD-PARTY LINKS  

Site may link to Instagram, YouTube, studies, etc. We are not responsible for their privacy practices. Review their policies.

12. INTERNATIONAL USERS  

Site hosted in U.S. If you visit from outside U.S., you consent to transfer/processing in U.S. We do not offer GDPR services. EU/UK users: do not use Site.

13. DO NOT TRACK  

Some browsers send DNT signals. No industry standard exists. We do not respond to DNT but we honor GPC as opt-out of sale/sharing.

14. CHANGES TO THIS POLICY  

We may update this Policy. “Last Updated” date will change. Material changes emailed to account holders. Continued use = acceptance.

15. CONTACT  

Questions or requests: Mark S Peakform (Musclepumpt LLC), support@markspeakform.com,