1. Information we will collect from you:
We will collect personal information from you. “Personal Information” is information that, either alone or in combination with other information collected, identifies an individual. The Personal Information we collect is as follows: a first and last name, an email address, a username, and [anything else behind the scenes?]. We do not collect any other information. BRAVEHEART will collect only as much Personal Information as we need for the purposes specified (a) in this Policy, and (b) at the time of collection of the Personal Information. You are solely responsible for the Personal Information you provide to us and you assume all risks associated with use of your Information including any reliance on its accuracy or completeness.
1.1. Your contact information
When you create a 6-minute-6-pack website account, we will ask you to provide Personal Information, including your email address, and name. Your 6-minute-6-pack account will be password-protected. You will use your email address and your password to login to your account to access the 6-minute-6-pack services. When you interact with our customer support representatives via email, telephone, through the 6-minute-6-pack website, or in person, we may collect Personal Information, such as your name, phone number, email address and contact preferences.
1.2. Your activities
We do NOT collect information about your activities outside of the 6-minute-6-pack website.
1.3. Your personal health information
We do NOT collect any personal health information, such as your height, weight, or fitness level.
1.4. Your demographic information
We do NOT collect any demographic information, such as information about your gender, age, country, or location.
1.5. Your payment information
If you choose to purchase paid Services, we do not collect your credit or debit card information. We only process payments through a third-party processor, PayPal. For more on the storage and security of your payment information, see Section 3.3 below.
2. Our use of your information
2.1. We may use your information to improve your experience with Braveheart Services
Consistent with applicable laws we may use your information:
- to process your account registration;
- to provide you with access to your personal account;
- to provide you with customer and product support.
The legal basis for the processing above is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract.
We may also use your information:
- to contact you to inform you of new services features, news, or articles on issues BRAVEHEART thinks will be of interest to you;
- to contact you with regard to your use of the 6-minute-6-pack website;
- to provide you with information or services or process transactions that you have requested;
- to identify you as the author of any communications that you send to BRAVEHEART;
- to provide you with information relating to any events that Braveheart thinks will be of interest to you; and
- for other purposes disclosed in this Policy.
The legal basis for the processing above is consent.
2.2. We may use your information to improve and market the 6-minute-6-pack Services
BRAVEHEART may use your Personal Information for internal statistical, marketing or operational purposes, including generating sales reports and measuring usage patterns. We will not use your information in any promotional marketing materials without your consent.
2.3. We may use your information to tell you about other products you might like
3. How we’ll store your information
When you provide information on the 6-minute-6-pack website, your Personal Information and activity data will be collected, encrypted, and stored on servers in the United States. If you reside in a country outside the United States, please note that the data protection and privacy laws of the United States may not be as comprehensive as the laws in your country. Transfers to the United States will be therefore subject to your explicit consent. We will retain your Personal Information as long as we determine is necessary to fulfill the purposes for which your Personal Information has been collected under this Policy, unless a longer retention period is required by law.
3.1. How we’ll keep your information secure
We will take reasonable security measures applying General Data Protection Regulation (GDPR) standards to protect against unauthorized access to or unauthorized alteration, disclosure or destruction of your information. This may include undertaking internal reviews of our data collection, storage, processing practices and security measures, including encryption and physical security measures to guard against unauthorized access to the systems where we store your information. In addition, we will restrict access to your information to our employees, contractors, and agents who need to know certain information in order to process it on our behalf. These individuals and entities are bound by strict confidentiality obligations and may be subject to discipline, including termination and criminal prosecution, if they fail to meet these obligations.
3.2. What if there’s a breach?
If we discover your information is compromised as a result of a security breach, we will promptly notify you that your information may have been compromised. We will send this notice to you by email, by posting a notice on our website, or as otherwise required by applicable law.
3.3. Storing payment information
When you purchase Services, your Personal Information is processed, stored, and kept secure by PayPal, a third-party payment processing service. For information about how PayPal processes, stores and protects your payment information, visit the PayPal User Agreement at: https://www.paypal.com/us/webapps/mpp/ua/useragreement-full?locale.x=en_US
We assume no responsibility or liability for damages resulting from PayPal’s processing, storage, or other use of your payment information or any Personal Information.
4. When we can disclose your information
Except for the purposes listed below, BRAVEHEART will not transfer or sell your Personal Information data to any third party without providing you prior notice and obtaining your consent.
4.1. For the same purposes we use your information for
Personal Information may be transferred in a de-identified manner (anonymized) to third parties who act for BRAVEHEART to achieve the purposes listed under Section 2 above, or for other purposes you consent to. For example, we may give a third-party access to your Personal Information in order to support the technology used on the 6-minute-6-pack website, or to handle mailings on BRAVEHEART’S behalf. If BRAVEHEART transfers your Personal Information to an outside agent or organization for such purpose, BRAVEHEART will take reasonable measures to protect your privacy, ensure the safety and security of your Personal Information, and ensure that the de-identified Personal Information transferred to third party is no longer personally identifiable and may not later be reasonably associated with, linked to, or used to identify you.
4.2. To comply with the law
Subject to applicable laws in your jurisdiction, we may also disclose Personal Information about you to others as we believe to be necessary: (a) to comply with laws or regulation, whether inside or outside your country of residence; (b) to comply with legal process; or (c) to respond to requests from public authorities and law enforcement officials, whether inside or outside your country of residence.
4.3. To protect BRAVEHEART
Subject to applicable laws in your jurisdiction, we may also disclose Personal Information about you to others as we believe to be necessary: (a) to enforce any of our terms and conditions or policies; (b) to protect our operations or those of any of our affiliates and subsidiaries; (c) to protect the rights, privacy, safety or property of BRAVEHEART.
4.4. If 6-minute-6-pack Services are sold
We may also transfer Personal Information to an affiliate, a subsidiary or a third party in the event of any reorganization, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of BRAVEHEART business.
5. How you can access, update, or delete your information
You may request access to your Personal Information and request that erroneous or inaccurate Personal Information be updated by emailing us at firstname.lastname@example.org. You may also request that (a) your Personal Information and 6-minute-6-pack account be deleted, (b) the processing of your Personal Information is limited to certain purposes and (c) your Personal Information is provided to you in a structured format and, in some circumstances, transferred to another data controller. If you consider that our processing of your Personal Information infringes data protection laws, you also have the legal right to complain to lodge a complaint with the supervisory authority responsible for data protection. To the extent that legal basis for the processing of your Personal Information is consent, you have the right to withdraw that consent at any time. BRAVEHEART will respond to your requests within a reasonable amount of time in accordance with applicable law. For your protection, we will only implement requests with respect to the Personal Information that is associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. If necessary and permitted by applicable laws, we will retain certain Personal Information beyond your deletion request for recordkeeping purposes, such as retaining records relating to accounting purposes.
6. Children’s privacy
We appreciate the importance of taking additional measures to protect children’s privacy. Persons under the age of 16, or other minimum age in the relevant jurisdiction, are not permitted to create accounts and provide Personal Information to BRAVEHEART on the 6-minute-6-pack website. If we learn that we have collected the Personal Information of a child under the relevant minimum age, we will take steps to delete the information as soon as possible. Parents who believe that their child has submitted Personal Information to us and would like to have it deleted may contact us at email@example.com.
8. How to opt out of 6-minute-6-pack notices
If you no longer wish to receive promotional, advertising, or other service-related notifications, you may opt-out of receiving those messages by changing your preferences on the 6-minute-6-pack website (Opt-out), or by clicking the “Unsubscribe” link on any email from BRAVEHEART. If you choose not to receive notifications, you may still use the 6-minute-6-pack Services, but you may be unable to use certain services that require us to interact with you.
9. No HIPAA requirements
BRAVEHEART and the 6-minute-6-pack website are not healthcare providers or a business associate of any healthcare provider and is not subject to the privacy rule of the Health Information Portability and Accountability Act of 1996 (HIPAA).
10. Conditions of Use, Notices, and Revisions
By using the 6-minute-6-pack website and accepting this Policy, you consent to our collecting, using, and disclosing your information as described above. We reserve the right to modify or amend this Policy at any time. If we make material changes to this Policy, we will notify you by providing the updated Policy on our website, sending you an e-mail, or posting a notice on our website so that you are always aware of the information that we collect, how we use it, and under what circumstances we disclose it. If required by applicable law, we will obtain your consent to the new changes; however, if you don’t consent to the changes you may be unable to continue accessing the 6-minute-6-pack website Services. You can determine when this Policy was last revised by referring to the “last updated” legend at the top of this page. Unless we clearly state otherwise, the changes to the Policy will affect only the information we collect after the effective date of the change.
For any concerns, correction or deletion requests please send an email to firstname.lastname@example.org. Such inquiries should clearly be marked as data protection queries and as being time sensitive.