Privacy Policy

Effective October 14, 2026 · Forge and Forty Fitness LLC

Forge and Forty Fitness LLC ("we") respects your privacy. This policy explains what we collect, why, how we protect it, and your rights — including rights for California residents under the CCPA as amended by the CPRA. We do not sell or share personal information for behavioral advertising, and we do not target anyone under 18.

1. Information we collect

When you inquire or book, we collect your name, phone number, email, and message content. Depending on the service we may also collect:

Health information you share (conditions, surgeries, medications, joint considerations, and physician restrictions) is sensitive personal information under the CCPA/CPRA. It is collected only with your consent, stored encrypted, visible only to your coach, and deleted 12 months after your last session. We are not medical providers; we follow restrictions provided by your physicians, and share progress with them only at your written request. Consult your physician before beginning any exercise program.

Cookies for anonymous analytics and maps are described in the Cookie Policy.

2. How we use information

• Responding to inquiries and providing the service you booked
• Service communications: confirmations, schedules, race-day logistics
• Improving the site using aggregate, de-identified statistics
• Legal, tax, and insurance obligations

3. Sensitive and health-related information

Health, injury, and cardiac-screening data are treated as sensitive personal information: collected only with explicit consent, encrypted in storage, restricted to your coach, and deleted on the schedule stated in Section 1. California residents may limit use of sensitive personal information to the purposes stated above — we already do so by default.

4. Sharing

We share personal information only with service providers necessary to run our business (payment processing, website hosting), each bound by contract. We disclose information when required by law. No other recipients; no behavioral advertising.

5. Storage and security

Paper in locked cabinets; electronic records on encrypted, password-protected U.S. systems; TLS on this site. Access limited to the owner and your coach. Breach notifications are sent without undue delay as required by law.

6. Retention

Contact and booking records: 3 years after service completion. Inquiry correspondence: 12 months. Sensitive planning details follow the shorter schedules in Section 1.

7. Your rights

You may request access, correction, deletion, or a portable copy of your information. To exercise any right, contact Section 9 — no forms, no fees. We respond within 30 days.

8. Updates

Changes are posted with a new effective date; material changes are announced on this page for 30 days.

9. Contact