Part One: Website Privacy Policy
1. Information we collect on this website
This website is a simple informational site. We do not ask you to create an account and we do not sell anything directly through it.
Information you give us. If you book a consultation, you do so through Calendly, which collects your name, email address, and any notes you choose to add. Calendly's own privacy policy governs that data, and Calendly shares the booking with us so we can hold the appointment. If you email us, we receive what you send.
Information collected automatically. This site is hosted on GitHub Pages. The host may log standard technical data such as your IP address, browser type, and the pages you visit, for security and to operate the service. We do not use Google Analytics, Meta Pixel, or any advertising or tracking cookies. Fonts are loaded from Google Fonts, which may receive your IP address when the font file is requested.
2. How we use website information
To respond to you, to hold consultations you book, to keep the site secure, and to understand in aggregate how the site is used. We do not sell personal information and we do not use it for targeted advertising.
3. Links to other sites
This site links to Calendly, Everlywell, Genetic Direction, and other third-party sites. Their privacy practices are their own. Where we link to a partner from whom we may earn a commission, we say so on the page.
4. Children
This site and our services are for adults 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, email us and we will delete it.
5. Your choices
You can decline to book, decline to email us, and ask us at any time to delete any information we hold about you. Instructions are in Part Two, Section 6, and apply to all personal information, not only health data.
Part Two: Consumer Health Data Privacy Policy
This policy applies to "consumer health data," meaning personal information that identifies you and relates to your past, present, or future physical or mental health. Because we are a wellness coaching business, most of what our clients share with us is consumer health data. This policy is provided to meet the requirements of the Washington My Health My Data Act, Nevada Senate Bill 370, and similar laws, and we apply it to all clients wherever they live.
1. What consumer health data we collect
We collect consumer health data only from coaching clients, only with their consent, and only as needed to provide coaching. Depending on your program it may include:
- Health and lifestyle questionnaire answers: medical conditions, injuries, medications and supplements, allergies and food sensitivities, pregnancy or breastfeeding status, menopause status, sleep, stress, and activity level.
- Body measurements and progress data: weight, measurements, and progress notes.
- Nutrition and activity information: food logs, meal photos, workout logs, and check-in responses.
- Goals and coaching notes: what you tell us in sessions and messages about your health, habits, and goals.
- Photos you choose to send us for coaching purposes.
- Lab or genetic test results, only if you order a test from a third-party provider (such as Everlywell or Genetic Direction) and choose to share the results with us.
We do not collect precise geolocation, and we do not use geofencing.
2. Where it comes from
Directly from you: your questionnaire, your sessions, your messages, and anything you upload or send. From a third-party testing provider only if you direct that provider to share results with us or you forward them yourself.
3. Why we collect it
To design, deliver, adjust, and evaluate your personal coaching program; to communicate with you about it; to keep you safe by knowing about conditions, medications, and allergies that affect what we suggest; and to keep business records the law requires us to keep. We do not use consumer health data for advertising, and we do not sell it or share it for anyone else's marketing.
4. Who we share it with
We share consumer health data only:
- With Amy Robinson and any IronFit staff or contractor who needs it to deliver your coaching, all bound by confidentiality.
- With service providers that process data on our behalf so we can run the business: Zoom (live sessions), Calendly (scheduling), Google Workspace or Gmail (email and file storage), our payment processor (billing), and our e-signature provider (agreements). They may use your data only to provide their service to us and are contractually restricted from using it for anything else.
- With a third party you name, only after you give separate written consent for that specific sharing, which you can withdraw at any time.
- When required by law, such as a valid court order, or to prevent an imminent threat to someone's life or safety.
Affiliates and storefronts. We do not have corporate affiliates with whom we share consumer health data. We participate in an affiliate program with Everlywell and operate a branded storefront with Genetic Direction. If you order a test or a supplement through our link or storefront, you pay the provider directly and IronFit earns a share of the price. We do not send them your health data. You deal with them directly under their own privacy policies, and you choose whether to share your results with us.
We do not sell consumer health data. Under some state laws, "sale" includes exchanging data for anything of value. We do not do that.
5. How long we keep it
We keep client records, including consumer health data, for seven (7) years after your program ends, because that is how long we may need them for accounting, insurance, and legal purposes. After that we delete them. You may ask us to delete your data sooner (see Section 6), and we will do so unless a law requires us to keep a specific record, in which case we will tell you what we kept and why.
6. Your rights and how to use them
Wherever you live, you may:
- Ask us to confirm whether we hold consumer health data about you, and get a copy of it.
- Ask us to correct it.
- Ask us to delete it.
- Withdraw any consent you gave us to collect or share it.
- Ask for a list of the third parties and affiliates with whom we have shared it.
To do any of these, email amyqrobinson@gmail.com with the subject line "Health Data Request." We will confirm we received your request and respond within 30 days (45 days for a complex request, and we will tell you if we need the extra time). We may ask you to verify your identity so we do not release your information to the wrong person. There is no charge for a request unless requests become excessive, in which case we will explain before charging anything.
If we deny a request, we will tell you why, and you may appeal by replying to our response with the word "Appeal." We will respond to an appeal within 45 days. Washington residents may also contact the Washington Attorney General at atg.wa.gov if they are not satisfied with the result of an appeal. Nevada residents may contact the Nevada Attorney General at ag.nv.gov.
We will not treat you differently, deny you services, or change your price because you exercised any of these rights.
7. Security
We take reasonable steps to protect consumer health data, including limiting who can access it to the people who need it for your coaching and using service providers that maintain security safeguards. No online system is perfectly secure, and email and text messages in particular are not fully private, so we encourage you to share sensitive details in sessions or through secure upload rather than by text when you can.
8. Not covered by HIPAA
IronFit is not a healthcare provider, health plan, or clearinghouse and is not covered by HIPAA. Your information is protected by this policy, by your Client Agreement, and by applicable state law.
9. Changes to this policy
If we change this policy in a way that affects your rights or how we use your data, we will post the updated policy here with a new effective date and, for current clients, email you before the change takes effect.
10. Contact
Abundant Life Systems, LLC, dba IronFit Wellness
Salt Lake County, Utah
amyqrobinson@gmail.com