Limitless Posey · Justin Posey Coaching

Privacy Policy

Last updated: July 2026

This policy explains what information this website collects, how it's used, and the choices you have. Justin Posey Coaching ("we," "us," "Justin") respects your privacy and collects only what's needed to run the coaching practice and improve the site.

Starter policy for attorney review. This is a good-faith, plain-language draft covering the site's current features. Have a licensed attorney review and finalize it before relying on it, especially regarding minors' data and any state-specific requirements.

1. Who we are

Justin Posey is a NASM-certified personal trainer operating as Justin Posey Coaching, serving the Chicago North Shore in person and clients elsewhere by video. For any privacy question or request, contact us at jp@LimitlessPosey.com.

2. Information we collect

Information you give us

Booking and intake details — your name, email, phone, and the goals, experience, and health context you choose to share when you book a session or fill out intake forms.
Client portal account — if you create a portal account, your name, email, password (stored securely, never in plain text), and the training data associated with your coaching: workouts, progress, measurements, habits, wellness logs, messages, and billing history.
Payment information — if you set up billing, card details are entered directly into our payment processor (Stripe) and are never stored on this website or our servers. We keep only a record of charges and a reference token from Stripe.
Messages — anything you send Justin through the portal's messaging feature.

Information collected automatically

Analytics data — with your consent, we use Google Analytics to understand how visitors use the site (see Section 4).
Basic technical data — standard information your browser sends, such as device type, browser, and approximate region, used to keep the site working and secure.

3. How we use your information

To schedule sessions, deliver coaching, and manage your training programs.
To communicate with you about bookings, sessions, and your coaching.
To process payments you've authorized.
To understand, in aggregate, how the website is used so Justin can improve it.
To meet legal, tax, and record-keeping obligations.

We do not sell your personal information.

4. Google Analytics & cookies

This site uses Google Analytics 4, a web analytics service provided by Google, to help us understand how visitors interact with the site. Google Analytics uses cookies (small text files stored on your device) and similar identifiers to collect information such as:

Pages viewed and time spent on the site
How you arrived (for example, a Google search or a social link)
Device, browser, and operating system
Approximate location (city or region — not your precise address)
With Google Signals enabled, aggregated age, gender, and interest categories

This information is processed by Google on our behalf and helps us see aggregate trends — it does not tell us who you personally are. We have IP anonymization enabled. Google may use this data in accordance with its own privacy policy.

Your choice: For visitors in the European Economic Area, the UK, and Switzerland, analytics cookies do not load until you accept them via the cookie banner (opt-in). For visitors elsewhere, including the United States, analytics are enabled by default, and you may opt out at any time using the "Decline" option, the "Do Not Sell or Share My Personal Information" link, or your browser's Global Privacy Control signal — all of which we honor. Either way, declining does not affect how the site works. You can also install the Google Analytics Opt-out Browser Add-on to opt out across all sites.

Demographics (Google Signals)

We use a Google Analytics feature called Google Signals to see aggregated age, gender, and interest categories of our visitors. This helps us understand who's finding Justin. Because this can involve Google combining data across its services, it may be considered "sharing" of information under some state laws — so we give you a clear way to opt out (see below), and we honor your browser's Global Privacy Control signal automatically.

4a. Do Not Sell or Share My Personal Information

We do not sell your personal information for money. However, using Google Analytics with Google Signals may count as "sharing" personal information under laws like the California CCPA/CPRA. You have the right to opt out of this at any time:

Click "Do Not Sell or Share My Personal Information" in the footer of any page, or decline analytics on the cookie banner. Either one immediately stops analytics and sharing for your browser.
We automatically honor the Global Privacy Control (GPC) signal — if your browser or a privacy extension sends it, we treat it as a valid opt-out with no action needed from you.

5. How your information is stored and protected

Portal accounts and coaching data are stored using Supabase, a secure hosted database, protected by row-level security so each client can access only their own data. Payments are handled by Stripe. Booking notifications and emails are sent through Google Workspace / Gmail. Each of these providers maintains its own security and privacy protections. We take reasonable measures to protect your information, though no method of transmission over the internet is completely secure.

6. Sharing your information

We share information only with the service providers that make the practice run — Google (Analytics, email), Supabase (data storage), and Stripe (payments) — and only as needed for them to perform their function. We may also disclose information if required by law. We never sell your data or share it for others' advertising.

7. Your privacy rights

Depending on where you live (for example, under the EU/UK GDPR or the California CCPA/CPRA), you may have the right to:

Access the personal information we hold about you.
Correct inaccurate information.
Delete your information ("right to be forgotten").
Withdraw consent to analytics at any time.
Opt out of the sale or sharing of personal information (we don't sell data).
Non-discrimination for exercising these rights.

Client portal users can update their name and email, change their password, and download a complete copy of their own data directly from the Account settings section of the portal. To make any other request, email jp@LimitlessPosey.com and we'll respond within the timeframe the law requires.

8. Minors

If a minor trains with Justin, their information is managed by a parent or legal guardian through the guardian's account — the minor does not hold their own login. We do not knowingly collect personal information directly from children. A parent or guardian may review, update, or request deletion of their child's information at any time by contacting us.

Minor-data handling should be confirmed with an attorney against COPPA and applicable state laws before onboarding minor clients.

9. Data retention

We keep coaching and account data for as long as you're a client and as needed afterward for legal, tax, and record-keeping purposes, then delete or anonymize it. Analytics data is retained according to the retention period set in our Google Analytics configuration.

10. Changes to this policy

We may update this policy as the practice or the site changes. The "last updated" date at the top reflects the current version. Material changes will be noted on this page.

11. Contact

Questions about this policy or your information? Email jp@LimitlessPosey.com.