Privacy Policy

Who operates this service

Ball Players Fitness is the operator of ballplayersfitness.com. Questions and privacy requests may be sent to info@ballplayersfitness.com or submitted through Privacy Choices.

Information we collect

We collect information you provide, information created through requested transactions or account activity, and limited technical information needed to operate and secure the service.

• Contact and identity information, including name, email, account identifiers, and information required by a feature you choose to use.
• Shopify customer, order, subscription, cart, checkout, refund, entitlement, and promotional reward information.
• Daily Score records, including display alias, timezone, private Mind, Body, and Soul categories, optional 280-character notes, dates, points, streaks, achievements, and generated sharing requests.
• Form information, including resource requests, waitlists, applications, goals, experience, availability, contact messages, and optional marketing consent.
• Protected service information, if later enabled, such as intake responses, limitations, PAR-Q responses, waivers, and private review uploads.
• Technical and security information, including IP-derived anti-abuse fingerprints, session identifiers, timestamps, device signals used by Turnstile, anomaly flags, and audit events.

Sources

Information comes directly from you; from Shopify when you sign in or complete a transaction; from staff actions needed to review an application or provide service; and from Supabase, Cloudflare, email, and hosting systems as they operate requested features.

How we use information

We use personal information only for defined operational purposes.

• Provide requested resources, customer accounts, checkout, program access, subscriptions, applications, and support.
• Review coaching or service eligibility and, only after approval, prepare protected intake and fulfillment.
• Maintain security, prevent fraud and automated abuse, diagnose errors, and preserve audit history.
• Send transactional messages and, only with separate optional consent, marketing messages.
• Comply with accounting, tax, legal, consumer-protection, and rights-request obligations.

Recipients and processors

We disclose information only as needed to service providers acting on our behalf or as required by law. Current core providers include Shopify for customer identity and commerce; Supabase for server-side records and private storage; Vercel for site hosting; Hostinger for transactional email; and Cloudflare Turnstile for form security. These providers process information under their own terms and privacy commitments.

Ball Players Fitness does not sell personal information, share it for cross-context behavioral advertising, use behavioral profiling, or sell consumer health data.

Cookies and tracking

The custom storefront uses a necessary-only default. Ball Players Fitness has not installed analytics, advertising pixels, session replay, fingerprinting for advertising, or cross-site behavioral tracking there. Necessary account, checkout, security, and privacy-choice technologies may operate when requested. Shopify checkout and customer-account surfaces use Shopify's own privacy controls and may offer separate optional categories.

Ball Players Fitness recognizes Global Privacy Control where supported. Because Ball Players Fitness does not direct cross-site behavioral tracking, legacy Do Not Track browser signals have no additional effect. See the Cookie & Technology Notice for the current inventory.

Retention

We use the following default retention schedule unless a shorter period is requested or a longer period is required for transactions, fraud prevention, litigation holds, accounting, tax, or other legal obligations.

• Daily Score raw meal, reading, workout, recovery, reflection, and service notes: 12 months, then deletion; minimized date, category, and point totals may remain for lifetime scoring.
• Contacts, leads, waitlists, interests, and closed applications: 12 months after last activity.
• Application fitness-goal data: 12 months after closure or earlier verified deletion where permitted.
• Marketing-consent evidence: subscription duration plus three years.
• Completed privacy-request audit records: three years.
• Shopify transaction and redeemed-reward records: as required for accounting, fraud prevention, and legal obligations.

Security and international processing

We use access controls, encrypted sessions, private storage, short-lived protected links, restricted database roles, rate limits, audit records, and transport encryption. No system is completely secure, and we cannot guarantee absolute security.

Service providers may process information in the United States or other countries. Where applicable, those transfers are governed by the provider's contractual and legal safeguards.

Your choices and rights

Depending on where you live, you may request access, correction, deletion, marketing withdrawal, a sale/share opt-out record, or consumer health data rights. Submit a request through Privacy Choices. We verify requests before disclosing or deleting information, acknowledge verified requests promptly, and target completion within 30 calendar days. Permitted extensions and Washington consumer health data appeals are tracked separately.

Deletion may be limited where information is needed to complete a transaction, protect security, comply with law, or maintain a narrowly scoped rights-request audit record.

Age eligibility

Daily Score, paid fitness accounts, applications, and coaching are intended for adults 18 or older. The separate Challenge League is currently disabled; its eligibility and privacy rules will be published before any future activation.

Policy changes and contact

We will post material changes on this page and update the date above. For questions, contact info@ballplayersfitness.com. Consumer health data practices are described separately in the Consumer Health Data Privacy Policy.

This is an attorney-ready merchant draft, not a statement of legal approval. Paid fitness checkout remains disabled until qualified counsel returns a final version and Ball Players Fitness records the reviewing attorney, approval date, and exact document hash.