Privacy
Policy

Who We Are

This Privacy Policy is published by Peakstone Performance LLC ("Peakstone Performance," "we," "us," or "our"), located at 1601 Riverfront Dr, Grand Junction, CO 81501, United States. We operate the Peakstone Performance website and online fitness platform.

For the purposes of applicable data protection laws — including the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR), and other relevant regulations — Peakstone Performance acts as the data controller in respect of personal data collected through our platform.

If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, you may contact us at support@peakstoneperformance.com. We take all privacy inquiries seriously and commit to responding within 30 days of receipt.

Information We Collect

We collect personal information in several ways: directly from you when you register or use the platform, automatically through your use of the Services, and in some cases from third-party services. Below is a detailed breakdown of the categories of data we collect:

We do not knowingly collect personal information from individuals under 18 years of age. If we become aware that a minor has provided us with personal data, we will take immediate steps to delete that information from our records.

How We Use Your Information

We use the personal information we collect for the following purposes:

• Service delivery: To create and manage your account, process payments, deliver daily tasks, generate progress reports, and provide coach support;
• Personalization: To adapt program content, task difficulty, and recommendations based on your stated preferences, fitness level, and completion history;
• Communication: To send transactional emails (order confirmations, password resets), program updates, weekly progress summaries, and — where you have opted in — promotional communications about new programs, offers, or features;
• Analytics and improvement: To understand how users interact with the platform, identify bugs, improve user experience, and develop new features;
• Safety and security: To detect and prevent fraudulent activity, unauthorized access, and violations of our Terms of Service;
• Legal compliance: To comply with applicable laws, regulations, legal processes, and lawful requests from government authorities;
• Support: To respond to inquiries, troubleshoot technical issues, and process refund or dispute requests.

We will not use your personal information for purposes materially different from those listed above without providing you with prior notice and, where required by law, obtaining your consent.

Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), the United Kingdom, and other jurisdictions where a legal basis for data processing is required, we process your personal data under the following lawful bases:

• Contract performance: Processing necessary to deliver the Services you have purchased or registered for;
• Legitimate interests: Processing for our legitimate business interests such as platform security, fraud prevention, analytics, and service improvement, where those interests are not overridden by your rights;
• Consent: Where you have given explicit consent, such as opting in to marketing communications. You may withdraw consent at any time;
• Legal obligation: Processing required to comply with a legal obligation applicable to us, such as financial record-keeping or responding to lawful government requests.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on the platform, analyze usage patterns, and deliver relevant content. Cookies are small text files stored on your device. We use the following types:

• Essential cookies: Necessary for the platform to function correctly, including session management and authentication. These cannot be disabled without affecting the Services;
• Analytics cookies: Help us understand how users navigate the platform, which pages are most visited, and how long users engage with content. We use tools such as Google Analytics for this purpose;
• Preference cookies: Store your settings and preferences to provide a more personalized experience on return visits;
• Marketing cookies: Used to deliver relevant advertising and measure the effectiveness of our marketing campaigns, only where you have consented.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling cookies may affect the functionality of certain features. Where required by law, we will request your consent before placing non-essential cookies on your device.

How We Share Your Information

We do not sell your personal information to third parties. We may share your data in the following limited circumstances:

• Service providers: We work with trusted third-party vendors who provide services on our behalf, including payment processing (Shopify Payments, Stripe), email delivery (Klaviyo or similar), cloud hosting, analytics (Google Analytics), and customer support tools. These parties are contractually required to use your data only for the specific purpose for which it was shared and to maintain appropriate security standards;
• Coaches and program staff: Your program activity, task completions, and notes are accessible to Peakstone Performance coaches for the purpose of providing feedback and program adjustments;
• Community features: Content you submit to community areas of the platform — such as progress updates, check-ins, or comments — may be visible to other participants;
• Legal requirements: We may disclose your data where required to do so by law, regulation, court order, or in response to lawful requests by public authorities;
• Business transfers: In the event of a merger, acquisition, sale of assets, or reorganization of Peakstone Performance, your personal data may be transferred as part of the business transaction, subject to the same privacy protections outlined in this policy.

In all cases, we take appropriate steps to protect your information and require recipients to handle it responsibly.

Data Retention

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including to comply with legal, accounting, or reporting obligations.

Specifically:

• Account data is retained for the duration of your account and for up to 3 years after account deletion, unless a longer retention period is required by law;
• Transaction and billing records are retained for a minimum of 7 years in accordance with tax and financial regulations;
• Program completion logs and fitness data are retained for the life of your account and up to 2 years following closure;
• Support and communication records are retained for up to 2 years after resolution;
• Analytics data may be retained in aggregated, anonymized form indefinitely.

When your data is no longer required, we will securely delete or anonymize it in accordance with applicable law. You may also request deletion of your data at any time, subject to our legal retention obligations.

Data Security

We take the security of your personal information seriously and have implemented appropriate technical and organizational measures to protect it against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption of data in transit using TLS (Transport Layer Security);
• Encrypted storage of sensitive account credentials using industry-standard hashing algorithms;
• Access controls that limit employee access to personal data to only what is necessary for their role;
• Regular security assessments and monitoring of our platform infrastructure;
• Contractual data protection obligations with all third-party service providers.

Despite these measures, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your data. In the event of a data breach that affects your rights and freedoms, we will notify you and applicable regulatory authorities as required by law.

International Data Transfers

Peakstone Performance is based in the United States. If you are located outside the United States, your personal data will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

For users in the EEA and UK, we implement appropriate safeguards for international transfers, including Standard Contractual Clauses (SCCs) as approved by the European Commission, where required. By using our Services, you consent to the transfer of your data to the United States.

If you have questions about how your data is handled when transferred internationally, please contact us at support@peakstoneperformance.com.

Your Privacy Rights

Depending on your location, you may have certain rights with respect to your personal data. We respect and will honor these rights in accordance with applicable law:

To exercise any of these rights, please contact us at support@peakstoneperformance.com. We will respond to all verifiable requests within 30 days. In some cases, we may need to verify your identity before processing a request.

Children's Privacy

Our Services are not directed to individuals under 18 years of age. We do not knowingly collect, process, or retain personal data from children. If a parent or guardian believes that their child has submitted personal information to us, they should contact us immediately at support@peakstoneperformance.com, and we will take prompt action to delete such information.

If we learn that we have collected personal information from a child under 18 without parental consent, we will delete that information as soon as possible. We reserve the right to suspend or terminate any account found to belong to a minor.

Third-Party Links and Services

Our platform may contain links to third-party websites, apps, or services that are not operated by Peakstone Performance. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policy of any third-party service you visit or use.

This Privacy Policy applies solely to information collected by Peakstone Performance through our platform and Services. It does not apply to information collected through any offline channels or by any third-party operators.

Marketing Communications

With your consent, we may send you marketing communications about new programs, special offers, platform features, fitness tips, and company news. You may opt out of marketing communications at any time by clicking "Unsubscribe" in any marketing email or by contacting us at support@peakstoneperformance.com.

Opting out of marketing communications will not affect transactional messages related to your account, purchases, or active programs. You will continue to receive order confirmations, program updates, and support responses regardless of your marketing preferences.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects without your explicit consent.

Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. We will indicate the date of the most recent update at the top of this page.

For material changes that affect how we handle your personal data, we will provide notice by email to the address associated with your account, or through a prominent notice on the platform, at least 30 days before the change takes effect where required by law.

Your continued use of the Services following any update to this Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this page periodically.