Privacy Policy

1. Data Controller

The business entity responsible for processing your personal information on this website is:

Triumphanttraini
1205 E Lyons Ave
Spokane, WA 99208
United States
Email: talk@triumphanttraini.world
Phone: +1 509 484 4242

2. Scope and Purpose

This Privacy Policy describes how we collect, use, store, disclose, and protect personal information when you visit triumphanttraini.world and use our informational services related to balanced weekly meal planning.

This policy applies to visitors in the United States and internationally. We comply with applicable United States federal and state privacy laws, including but not limited to:

• California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)
• Washington Privacy Act and Washington state consumer privacy statutes
• Children's Online Privacy Protection Act (COPPA)
• Controlling the Assault of Non-Solicited Pornography and Marketing Act (CAN-SPAM Act)
• General Data Protection Regulation (GDPR) for visitors in the European Economic Area

3. Information We Collect

3.1 Information You Provide Directly

When you use our contact form, we collect:

• Your name
• Your email address
• Your message content
• Your consent to data processing

3.2 Information Collected Automatically

When you visit our website, we may automatically collect:

• IP address
• Browser type and version
• Operating system and device type
• Referring URL and exit pages
• Pages visited, links clicked, and time spent on pages
• Date and time of access
• General geographic location based on IP address

3.3 Cookies and Similar Technologies

We use cookies, localStorage, and similar technologies as described in our Cookie Policy. Cookie consent preferences are stored locally in your browser.

3.4 Information We Do Not Collect

We do not knowingly collect Social Security numbers, financial account information, precise geolocation data, biometric data, or sensitive personal information as defined under applicable state privacy laws.

4. How We Use Your Information

We use personal information for the following business and commercial purposes:

• Responding to inquiries submitted through the contact form
• Providing, operating, and maintaining our website
• Improving website content, functionality, and user experience
• Analyzing website usage and traffic patterns (with consent where required)
• Measuring advertising campaign performance (with consent where required)
• Detecting, preventing, and addressing security incidents and fraud
• Complying with legal obligations and enforcing our Terms of Use
• Communicating with you about your inquiry, when you have provided consent

We do not use personal information for automated decision-making or profiling that produces legal or similarly significant effects.

5. Legal Basis for Processing

5.1 United States

We process personal information based on:

• Consent: When you submit the contact form or opt in to non-essential cookies and marketing communications.
• Legitimate Business Interests: For website security, fraud prevention, analytics (where permitted), and service improvement.
• Legal Compliance: When required to comply with applicable federal, state, or local laws.
• Contractual Necessity: To respond to requests you initiate through our contact form.

5.2 European Economic Area (GDPR)

For EEA visitors, we additionally rely on GDPR Article 6 legal bases including consent (Art. 6(1)(a)), legitimate interest (Art. 6(1)(f)), and legal obligation (Art. 6(1)(c)).

6. How We Share Information

We may disclose personal information to the following categories of third parties:

• Service Providers: Hosting, infrastructure, email delivery, and website maintenance providers who process data on our behalf under contractual obligations.
• Analytics Providers: Only when you have consented to analytics cookies, to help us understand website usage.
• Advertising Partners: Including Google Ads, only when you have consented to marketing cookies. These partners may use cookies to measure ad performance and deliver relevant advertisements. See Google's privacy policy at policies.google.com/privacy.
• Legal Authorities: When required by law, court order, subpoena, or to protect our rights, safety, or property.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice provided as required by law.

In the preceding twelve months, we have not sold personal information. We may share limited device and usage data with advertising partners for cross-context behavioral advertising only when you provide consent through our cookie banner.

7. Data Retention

We retain personal information only as long as reasonably necessary for the purposes described in this policy:

• Contact form submissions: up to 24 months from the date of submission
• Server and security log files: up to 90 days
• Cookie consent records: up to 12 months
• Analytics data: up to 26 months (with consent)
• Marketing and advertising data: up to 12 months (with consent)

When retention periods expire, we securely delete or irreversibly anonymize personal information.

8. Your Privacy Rights (United States)

Depending on your state of residence, you may have the following rights regarding your personal information:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Access: Obtain a copy of personal information we hold about you.
• Right to Delete: Request deletion of personal information we collected from you, subject to legal exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt Out: Opt out of the sale or sharing of personal information for cross-context behavioral advertising. We do not sell personal information; to opt out of advertising cookies, use our cookie banner or browser settings.
• Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined under CPRA.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Appeal: Washington state residents may appeal a denied privacy request by contacting us with "Privacy Appeal" in the subject line.

8.1 California Residents (CCPA/CPRA)

California residents have additional rights under the CCPA and CPRA, including the right to know what personal information is collected, the right to delete, the right to correct, and the right to opt out of sale/sharing. We have not sold personal information in the preceding 12 months.

California residents may also request information about disclosures to third parties for direct marketing purposes under California Civil Code Section 1798.83 (Shine the Light law) by contacting us at the email address below.

8.2 How to Submit a Request

To exercise your privacy rights, contact us at talk@triumphanttraini.world or call +1 509 484 4242. Include "Privacy Request" in your subject line and provide sufficient information for us to verify your identity. We will respond within 45 days, or inform you if an extension is needed.

You may designate an authorized agent to submit a request on your behalf by providing written authorization and verification of the agent's identity.

8.3 Global Privacy Control (GPC)

We honor Global Privacy Control (GPC) signals as a valid opt-out preference for sharing personal information for targeted advertising where technically feasible.

9. Your Rights (European Economic Area)

EEA residents have rights under GDPR including access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Contact us to exercise these rights. You may lodge a complaint with your local supervisory authority.

10. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect personal information, including:

• HTTPS/TLS encryption for data in transit
• Access controls limiting employee and contractor access to personal data
• Regular review of security practices and infrastructure
• Incident response procedures for suspected data breaches

No method of transmission over the Internet is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

11. Data Breach Notification

In the event of a data breach affecting personal information, we will notify affected individuals and relevant authorities as required by applicable federal and state laws, including Washington state breach notification requirements.

12. Children's Privacy (COPPA)

Our website is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, contact us immediately and we will delete such information promptly.

For EEA visitors, we do not knowingly collect data from individuals under 16 without parental consent.

13. Third-Party Links and Services

Our website may contain links to third-party websites or integrate third-party services (such as Google Fonts and Font Awesome CDN). We are not responsible for the privacy practices of third parties. We encourage you to review their privacy policies before providing personal information.

14. Do Not Track Signals

Some browsers transmit "Do Not Track" (DNT) signals. Because there is no uniform industry standard for responding to DNT signals, we do not currently respond to them. We do honor Global Privacy Control signals as described above.

15. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. Material changes will be posted on this page with an updated revision date. Your continued use of the website after changes constitutes acceptance of the updated policy.

16. Contact Us

For privacy-related questions, requests, or complaints, contact:

Triumphanttraini
1205 E Lyons Ave, Spokane, WA 99208, United States
Email: talk@triumphanttraini.world
Phone: +1 509 484 4242