Embody with ElizaBeth Last updated: July 20, 2026

This Privacy Policy explains how Embody with ElizaBeth, a DBA of Smiling Soul Fitness LLC, a California limited liability company ("Company," "we," "us," or "our"), collects, uses, and protects personal information when you visit embodywithelizabeth.com (the "Site"), use our Membership, or engage any of our coaching, group program, workshop, or retreat Services (collectively, the "Services").

We are the data controller of the personal information described in this Policy — meaning we determine why and how it is collected and used.

This Policy should be read together with our [Terms of Service], which are incorporated by reference.

Information you provide directly:

• Contact information (name, email, phone number)
• Billing and payment details (processed by our third-party payment processor — see Section 5; we do not store full card numbers)
• Health, injury, and wellness information you choose to share in connection with coaching (e.g., intake forms, session disclosures relevant to safe participation)
• Communications you send us (emails, forms, messages)
• Testimonials or feedback you provide

Information collected automatically:

• Basic usage data via cookies (see Section 6): pages visited, general location (country/region), browser type, referring site

We do not knowingly collect more information than is reasonably necessary for the purposes described in Section 3.

Some of what you share with us — such as injuries, physical conditions, or health history relevant to your coaching — qualifies as "special category data" under Article 9 of the GDPR. We only collect and use this information:

• With your explicit consent, given when you provide it to us for the purpose of safe and effective coaching; and
• To the extent necessary to deliver the Services safely.

We do not use your health information for any purpose beyond delivering and improving your coaching experience, and we do not share it with third parties except as described in Section 5 or as required by law.

We use the information we collect to:

• Provide, schedule, and personalize coaching sessions, programs, workshops, the retreat, and the Membership
• Process payments and manage billing
• Communicate with you about bookings, sessions, and account matters
• Send you Service-related notices (reminders, invoices, policy updates)
• With your consent, send you marketing communications about our own offerings (you can opt out at any time — see Section 8)
• Improve and maintain the Site and our Services
• Comply with legal, tax, and accounting obligations

We do not sell your personal information, and we do not send you promotional material on behalf of unrelated third parties.

Where GDPR applies, we rely on the following legal bases:

• Contract — processing necessary to provide Services you've booked or purchased
• Consent — for health/special category data, and for marketing communications
• Legitimate interests — for basic Site analytics and business operations, balanced against your rights
• Legal obligation — for tax, accounting, and regulatory recordkeeping

You may withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

We use trusted third-party providers to help operate our business, including for scheduling, client management, email marketing, and accounting. Each provider only receives the information needed to perform its function and is subject to its own privacy and security practices.

Some of our providers are based in the United States. Where personal information is transferred outside the European Economic Area (EEA), we rely on appropriate safeguards required under GDPR, such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses, where applicable to that provider.

We do not control, and are not responsible for, the independent privacy practices of these providers beyond the safeguards described above. We recommend reviewing their respective privacy policies for further detail.

We use a third-party payment processor to handle transactions; we do not store full payment card numbers.

We use cookies and similar technologies on the Site.

• Essential cookies are necessary for the Site to function and do not require consent.
• Non-essential cookies (e.g., analytics) are only set with your consent, which you can give or decline via our cookie banner when you first visit the Site. You can change your preference at any time through your browser settings or by contacting us.

We do not currently use cookies for third-party behavioral advertising. If this changes, we will update this Policy accordingly.

We retain personal information only as long as necessary for the purposes described in this Policy, including:

• For the duration of our relationship with you, plus a reasonable period afterward for recordkeeping (see also our Terms of Service, Section 13 on Termination);
• As required to meet legal, tax, and accounting obligations (which may require longer retention periods under Spanish and/or U.S. law); and
• Health-related information is retained only as long as relevant to the coaching relationship, unless a longer period is required by law.

When information is no longer needed, we take reasonable steps to delete or anonymize it.

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your information ("right to be forgotten"), subject to legal retention requirements
• Restrict or object to certain processing
• Port your data to another provider in a structured format
• Withdraw consent at any time, where processing is based on consent
• Opt out of marketing communications at any time via the unsubscribe link in any email, or by contacting us directly

If you are in the EEA or UK, you also have the right to lodge a complaint with your local data protection authority — in Spain, this is the Agencia Española de Protección de Datos (AEPD).

To exercise any of these rights, contact us using the details in Section 12.

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Our Services are intended for adults. Consistent with our Terms of Service, we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, please contact us so we can delete it.

The Site may link to third-party websites. We are not responsible for the privacy practices or content of those sites, and this Policy does not apply to them. We recommend reviewing their privacy policies directly.

Questions about this Privacy Policy, or requests relating to your personal information, can be directed to:

Embody with ElizaBeth - hello  @  embodywithelizabeth.com

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will post the updated version here with a new "Last updated" date. Significant changes will be communicated to you directly where required by law.