Privacy Policy | Embody with ElizaBeth

This Privacy Policy explains how Embody with ElizaBeth, a DBA of Smiling Soul Fitness LLC, a California limited liability company ("Company," "we," "us," or "our"), collects, uses, and protects personal information when you visit embodywithelizabeth.com (the "Site") or engage any of our coaching, group program, workshop, or retreat Services (collectively, the "Services").

We are the data controller of the personal information described in this Policy, meaning we determine why and how it is collected and used.

This Policy should be read together with our Terms of Service, which are incorporated by reference.

1. Information We Collect

Information you provide directly

Contact information (name, email, phone number)
Billing and payment details (processed by our third-party payment processor, see Section 5; we do not store full card numbers)
Health, injury, and wellness information you choose to share in connection with coaching (e.g., intake forms, session disclosures relevant to safe participation)
Communications you send us (emails, forms, messages)
Testimonials or feedback you provide

Information collected automatically

Basic usage data via cookies (see Section 6): pages visited, general location (country/region), browser type, referring site

We do not knowingly collect more information than is reasonably necessary for the purposes described in Section 3.

2. Special Category (Health) Data

Some of what you share with us, such as injuries, physical conditions, or health history relevant to your coaching, qualifies as "special category data" under Article 9 of the GDPR. We only collect and use this information:

With your explicit consent, given when you provide it to us for the purpose of safe and effective coaching; and
To the extent necessary to deliver the Services safely.

We do not use your health information for any purpose beyond delivering and improving your coaching experience, and we do not share it with third parties except as described in Section 5 or as required by law.

3. How We Use Your Information

We use the information we collect to:

Provide, schedule, and personalize coaching sessions, programs, workshops, and retreats
Process payments and manage billing
Communicate with you about bookings, sessions, and account matters
Send you Service-related notices (reminders, invoices, policy updates)
With your consent, send you marketing communications about our own offerings (you can opt out at any time, see Section 8)
Improve and maintain the Site and our Services
Comply with legal, tax, and accounting obligations

We do not sell your personal information, and we do not send you promotional material on behalf of unrelated third parties.

4. Legal Basis for Processing (GDPR)

Where GDPR applies, we rely on the following legal bases:

Contract — processing necessary to provide Services you've booked or purchased
Consent — for health/special category data, and for marketing communications
Legitimate interests — for basic Site analytics and business operations, balanced against your rights
Legal obligation — for tax, accounting, and regulatory recordkeeping

You may withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

5. Third-Party Service Providers and International Transfers

We use trusted third-party providers to help operate our business, including for scheduling, client management, email marketing, and accounting. Each provider only receives the information needed to perform its function and is subject to its own privacy and security practices.

We are based in California, United States, and our providers are primarily United States based. Where personal information is transferred outside the European Economic Area (EEA) or the United Kingdom, we rely on appropriate safeguards required under GDPR, such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses, where applicable to that provider.

We do not control, and are not responsible for, the independent privacy practices of these providers beyond the safeguards described above. We recommend reviewing their respective privacy policies for further detail.

We use a third-party payment processor to handle transactions; we do not store full payment card numbers.

6. Cookies

We use cookies and similar technologies on the Site.

Essential cookies are necessary for the Site to function and do not require consent.
Non-essential cookies (e.g., analytics) are only set with your consent. You can change your preference at any time through your browser settings or by contacting us.

Fonts and other design assets are served from our own domain rather than a third-party network. One page, our free 5 Day Reset signup, loads an email signup form from our email provider, Flodesk, which may set its own cookies; every other page loads entirely from our own domain.

We do not currently use cookies for third-party behavioral advertising. If this changes, we will update this Policy accordingly.

7. Data Retention

We retain personal information only as long as necessary for the purposes described in this Policy, including:

For the duration of our relationship with you, plus a reasonable period afterward for recordkeeping (see also our Terms of Service, Section 13 on Termination);
As required to meet legal, tax, and accounting obligations under United States and California law; and
Health-related information is retained only as long as relevant to the coaching relationship, unless a longer period is required by law.

When information is no longer needed, we take reasonable steps to delete or anonymize it.

8. Your Rights

Depending on your location, you may have the right to:

Access the personal information we hold about you
Correct inaccurate or incomplete information
Delete your information ("right to be forgotten"), subject to legal retention requirements
Restrict or object to certain processing
Port your data to another provider in a structured format
Withdraw consent at any time, where processing is based on consent
Opt out of marketing communications at any time via the unsubscribe link in any email, or by contacting us directly

If you are a California resident

Under the California Consumer Privacy Act (CCPA/CPRA), you have the right to know what personal information we collect and how we use it, to request deletion or correction of that information, and to be free from discrimination for exercising these rights. We do not sell or share your personal information as those terms are defined under California law.

If you are in the EEA or UK

You also have the right to lodge a complaint with your local data protection authority in the country where you live or work.

To exercise any of these rights, contact us using the details in Section 12.

9. Security

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Children

Our Services are intended for adults. Consistent with our Terms of Service, we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, please contact us so we can delete it.

11. Links to Other Websites

The Site may link to third-party websites. We are not responsible for the privacy practices or content of those sites, and this Policy does not apply to them. We recommend reviewing their privacy policies directly.

12. Contact Us

Questions about this Privacy Policy, or requests relating to your personal information, can be directed to:

Embody with ElizaBeth —

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will post the updated version here with a new "Last updated" date. Significant changes will be communicated to you directly where required by law.