Consumer Health Data Privacy Policy
This separate notice applies to consumer health data that may be inferred from or included in fitness applications, goals, limitations, personalized services, PAR-Q responses, waivers, and private review uploads.
Consumer health data we may collect
Public coaching applications may include fitness goals, training experience, and availability. If protected intake is later approved and activated, it may collect limitations, exercise history, equipment needs, PAR-Q responses, waiver records, or private files submitted for a requested review. We do not ask for diagnosis or emergency information on public forms.
Why we collect it
We collect consumer health data only for the specific purpose shown beside the consent control: reviewing an application, determining whether a service can be offered, tailoring a requested plan, performing a requested form or program review, supporting safety screening, or fulfilling the service.
Sources
Consumer health data comes directly from you, from content you choose to upload, or from limited inferences staff make solely to review or fulfill your request. We do not obtain consumer health data from data brokers or advertising networks.
Who receives it
Authorized Ball Players Fitness staff may access the minimum information needed for review or fulfillment. Supabase stores protected records and files; Vercel processes application requests; Hostinger may transmit transactional notices that do not include detailed health information; and security providers protect submissions. Information may also be disclosed when required by law.
Consent and limits
Health-data consent is separate from marketing consent and records the policy version, purpose, timestamp, and withdrawal status. Protected health intake remains unavailable until the policy, retention schedule, waiver, and consent version receive merchant and qualified legal review.
Ball Players Fitness does not sell consumer health data and does not use geofences around health-care facilities to identify, track, collect, or send health-related messages to consumers.
Your health-data rights
Subject to applicable law, you may request confirmation and access, a list of recipients, deletion, or withdrawal of consent. You may also appeal a denied request. Use Privacy Choices or email info@ballplayersfitness.com. We verify identity before acting and do not discriminate for exercising a privacy right.
Retention and security
Application fitness-goal data is scheduled for deletion 12 months after closure or earlier after a verified request where no exception applies. Protected intake data will receive a service-specific schedule before collection is enabled. We use private storage, restricted service-role access, encrypted sessions, access checks, short-lived links, and audit history.
Changes, appeals, and contact
Material changes will be posted here with a new effective date and, where required, renewed consent. Washington consumer health data appeals may be submitted through Privacy Choices by selecting the appeal option. Contact info@ballplayersfitness.com with questions.
This is an attorney-ready merchant draft, not a statement of legal approval. Paid fitness checkout remains disabled until qualified counsel returns a final version and Ball Players Fitness records the reviewing attorney, approval date, and exact document hash.