Privacy Policy

Privacy Policy

Girls Gone Strong LLC

Last Updated: August 4, 2026

Girls Gone Strong LLC ("Girls Gone Strong," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our websites, purchase our products or services, enroll in coaching or certifications, or otherwise interact with us.

This policy applies to all users, including those located in the United States, European Economic Area (EEA), and United Kingdom (UK). Where specific rights or obligations apply based on your location, we identify them in the relevant sections below.

1. Information We Collect

We may collect the following categories of personal information:

A. Information You Provide to Us

• Name
• Email address
• Mailing address
• Phone number
• Payment information (processed by third-party payment processors; we do not store payment card data)
• Account login credentials
• Survey responses
• Coaching-related information you voluntarily provide
• Communications you send to us via email, SMS, chat, or support platforms

B. Transaction Information

• Products or services purchased
• Payment status
• Subscription details
• Order history

C. Device and Usage Information

• IP address
• Browser type and version
• Device type and operating system
• Cookie identifiers and similar tracking technologies
• Website usage data (pages visited, time on site, referral source)

D. Sensitive Information

In connection with coaching services, you may voluntarily provide information relating to health, fitness, lifestyle, or personal goals. For users located in the EEA or UK, this may constitute "special category data" under Article 9 of the GDPR. We process such information solely on the basis of your explicit consent, for the purpose of delivering requested coaching services, and maintain appropriate technical and organizational safeguards.

We do not intentionally collect information from individuals under the age of 13.

E. SMS and Text Messaging

If you opt in to receive SMS or text messages from us (including through platforms such as ManyChat), we may collect your phone number and messaging preferences. Message and data rates may apply. You may opt out at any time by replying STOP. Consent to receive text messages is not a condition of purchase. For details, see our SMS Terms of Service.

2. How We Use Your Information

We use personal information for the following purposes:

• To process transactions and fulfill orders
• To deliver products, certifications, and coaching services
• To manage subscriptions and accounts
• To respond to customer service inquiries
• To improve our website, services, and offerings
• To detect errors, fraud, or misuse
• To send marketing communications (you may opt out at any time)
• To send SMS or text messages where you have opted in
• To comply with legal obligations
• To support internal analytics and business operations

3. Legal Basis for Processing (EEA and UK Users)

If you are located in the EEA or UK, we process your personal information only where we have a valid legal basis under the General Data Protection Regulation (GDPR) or UK GDPR. The legal bases we rely on include:

• Contractual Necessity: Processing necessary to fulfill a contract with you (e.g., delivering a certification, coaching program, or product you purchased).
• Consent: Where you have given explicit consent (e.g., marketing emails, SMS messages, cookies, processing of health-related coaching data).
• Legitimate Interest: Processing necessary for our legitimate business interests (e.g., fraud prevention, website analytics, improving services), provided these interests do not override your rights.
• Legal Obligation: Processing required to comply with applicable laws.

You may withdraw consent at any time by contacting us at info@girlsgonestrong.com. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

4. Automated Processing and AI

We may use automated technologies, including business-tier AI-assisted systems (such as Claude, ChatGPT, and Gemini), to analyze information for internal business purposes such as:

• Improving services and identifying operational issues
• Detecting system errors and broken automations
• Analyzing trends in customer service and business operations
• Enhancing customer experience
• Preventing fraud

These AI systems operate under commercial agreements and secure API connections as contracted third-party data processors—the same legal category as our CRM, payment processor, and other service providers. We do not sell personal information, and we do not use customer data to train publicly available AI models.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Operate our website
• Analyze traffic and usage patterns
• Provide marketing and advertising

For users in the EEA and UK: We deploy a consent management platform (currently Cookiebot) to obtain your consent before placing non-essential cookies. You will be presented with a cookie consent banner on your first visit and may update your preferences at any time through that tool.

For all users: You may manage cookies through your browser settings. Note that disabling cookies may affect website functionality.

6. How We Share Information

We may share personal information with trusted third-party service providers ("data processors") that assist us in operating our business, including:

• Payment processors (e.g., Stripe)
• Email service providers and CRM platforms (e.g., ActiveCampaign)
• Customer support platforms (e.g., Help Scout)
• Survey and form providers (e.g., SurveyMonkey)
• Cloud hosting and productivity providers (e.g., Google Workspace)
• Automation platforms (e.g., Make)
• Analytics providers
• Advertising platforms
• Business-tier AI service providers (e.g., Anthropic/Claude, OpenAI/ChatGPT, Google/Gemini)

These providers process personal information on our behalf under contractual agreements (including Data Processing Agreements where required) and are not permitted to use your information for their own marketing purposes.

We may also disclose information if required by law, court order, or governmental regulation, or to protect our rights, property, or safety.

Wildcat Mattress & Massage Chairs

Girls Gone Strong and Wildcat Mattress Distributions, Inc., doing business as Wildcat Mattress & Massage Chairs ("Wildcat"), are affiliated companies. We occasionally promote Wildcat products to our audience and collaborate on offers.

If you submit a Wildcat request form through Girls Gone Strong, the information you enter on that form — your name, phone number, email address, ZIP code, and your answers to the form’s questions — is shared with Wildcat so they can contact you about your request.

This is the only circumstance in which we share your information with a company that uses it for its own sales purposes. We share only what you submit on that form. We do not share your account history, purchase history, or coaching information.

Girls Gone Strong may earn commission on Wildcat purchases. Completing these forms is optional, and you may ask Wildcat to stop contacting you at any time.

7. International Data Transfers

Girls Gone Strong is based in the United States. If you access our services from the EEA, UK, or other regions with data protection laws, your personal information may be transferred to and processed in the United States.

For transfers from the EEA or UK to the United States or other countries not deemed to have adequate data protection, we rely on:

• The EU-U.S. Data Privacy Framework (where applicable)
• Standard Contractual Clauses (SCCs) approved by the European Commission
• The UK International Data Transfer Agreement or UK Addendum to SCCs (for UK transfers)

By using our services, you acknowledge that your information may be transferred to and processed in the United States. If you have questions about the safeguards in place, please contact us.

8. Data Retention

We retain personal information only for as long as necessary for the purposes described in this policy. General retention guidelines:

• Transaction and financial records: Up to 7 years (as required by tax and accounting obligations)
• Customer account data: Duration of the account relationship plus 2 years
• Coaching records (including health-related data): Duration of the coaching engagement plus 2 years, unless you request earlier deletion
• Marketing and communication data: Until you opt out or request deletion
• Website analytics and cookie data: Up to 26 months
• Customer support records: Up to 3 years after resolution

We may retain anonymized or aggregated data indefinitely for analytics purposes. If you request deletion of your data, we will honor that request subject to any legal obligations requiring retention.

9. Your Privacy Rights

A. All Users

Regardless of your location, you may:

• Opt out of marketing emails by clicking "unsubscribe" in any email
• Opt out of SMS messages by replying STOP
• Request information about what data we hold about you
• Request deletion of your personal information

B. EEA and UK Users (GDPR / UK GDPR)

If you are located in the EEA or UK, you have the following additional rights:

• Right of Access: Obtain confirmation of whether we process your data and request a copy
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request deletion of your data (subject to legal exceptions)
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests, including direct marketing
• Right Regarding Automated Decision-Making: Not be subject to decisions based solely on automated processing that produce legal or similarly significant effects
• Right to Withdraw Consent: Where processing is based on consent, withdraw at any time
• Right to Lodge a Complaint: File a complaint with your local supervisory authority (e.g., the ICO in the UK or your national data protection authority in the EEA)

To exercise any of these rights, please contact us at info@girlsgonestrong.com. We will respond within 30 days (or as otherwise required by applicable law).

C. California Residents (CCPA/CPRA)

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell personal information. To exercise your rights, contact us at info@girlsgonestrong.com.

California residents: our sharing of Wildcat request form information with Wildcat Mattress & Massage Chairs, as described in Section 6, may constitute a "sale" or "sharing" of personal information under the CCPA/CPRA. To opt out, contact us at info@girlsgonestrong.com.

10. Data Security

We implement reasonable administrative, technical, and organizational safeguards designed to protect personal information, including:

• SSL/TLS encryption for data in transit
• Access controls limiting data access to authorized personnel
• Secure third-party payment processing (we do not store payment card data)
• Contractual safeguards with service providers

No method of transmission over the Internet is 100% secure. While we strive to use commercially reasonable safeguards, we cannot guarantee absolute security.

11. Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach (as required under GDPR/UK GDPR)
• Notify affected individuals without undue delay where the breach is likely to result in a high risk to their rights and freedoms
• Comply with any additional breach notification requirements under applicable U.S. state laws

12. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

13. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will take steps to delete it.

14. SMS and Text Messaging Terms

By opting in to receive SMS or text messages from Girls Gone Strong, you agree to the following:

• Message frequency varies
• Message and data rates may apply
• Reply STOP to opt out at any time
• Reply HELP for assistance
• Consent is not required for purchase

We do not share your phone number with third parties for their marketing purposes. For questions about our SMS program, contact info@girlsgonestrong.com.

One exception applies. If you submit a Wildcat request form, the phone number you provide on that form is shared with Wildcat Mattress & Massage Chairs so they may call or text you about your request. You may ask them to stop at any time.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised "Last Updated" date at the top of this page. Material changes will be communicated via email or prominent notice on our website.

16. Contact Us