Privacy - Cosumer Health Data

Effective Date: July 31, 2026
Last Updated: July 31, 2026

This Consumer Health Data Privacy Notice (“Health Data Notice”) supplements the Training A GOAT LLC Privacy Policy. It applies to “consumer health data” regulated by the Washington My Health My Data Act, Nevada consumer health data law, Connecticut Data Privacy Act, and similar laws.

This Health Data Notice is intended to be published separately and linked prominently from the homepage and from every application, assessment, checkout, or form that collects consumer health data.

Consumer Health Data We Collect

Depending on the Service you request and the information you voluntarily provide, we may collect:

• Physical or mental health conditions, status, symptoms, diagnoses, injuries, limitations, accessibility needs, or health history.

• Medications, treatment, care, allergies, sensitivities, or dietary restrictions you choose to disclose.

• Height, weight, body measurements, body composition, progress measurements, and physical characteristics.

• Exercise, movement, activity, strength, mobility, training, recovery, and fitness information.

• Nutrition, food, hydration, supplement, dietary preference, and eating-habit information.

• Sleep, energy, stress, habits, lifestyle, and wellness information.

• Fitness, nutrition, wellness, appearance, performance, or other personal goals and progress.

• Photographs, videos, recordings, assessments, coaching notes, check-ins, and community submissions that reveal or permit an inference about health or bodily condition.

• Purchases, searches, applications, or interactions that identify or allow an inference about a health-related interest, service, product, supplement, or condition.

• Information derived or inferred from the information above for the limited purpose of providing a program, coaching, recommendation, safety measure, or other Service you request.

We do not use facial recognition or other biometric identification technology on progress photos or videos unless we first provide a specific notice and obtain legally required consent.

Sources of Consumer Health Data

We collect consumer health data:

• Directly from you through applications, assessments, onboarding, check-ins, forms, communications, community participation, coaching, events, purchases, and content you submit.

• From your interactions with a Service, including the health-related products, programs, content, or services you request.

• From coaches, contractors, or service providers acting on our instructions to deliver a Service you requested.

• From another person or organization only when you direct or authorize the disclosure or when law otherwise permits it.

We do not seek consumer health data from a health-care provider, insurer, or connected device unless we first explain the arrangement and obtain any authorization or consent required by law.

Why We Collect and Use Consumer Health Data

We collect and use consumer health data to:

• Review an application and determine whether a requested program or experience may be appropriate.

• Provide and personalize coaching, fitness, nutrition, accountability, education, community support, events, retreats, supplements, or related Services you request.

• Develop plans, track progress, respond to questions, support safety, and adjust a requested Service.

• Process and fulfill health-related purchases and maintain transaction records.

• Communicate about your participation, support needs, account, safety, or requested Service.

• Maintain security, prevent misuse, comply with law, and establish or defend legal claims.

• Conduct internal quality assurance using access-limited or de-identified information where appropriate.

We do not collect or use additional categories of consumer health data, or use consumer health data for materially different purposes, without updating this Health Data Notice and obtaining affirmative consent when required.

Consumer Health Data We Share

We may share the minimum consumer health data reasonably necessary with processors that help us deliver a Service you requested. Depending on how a Service is configured, these may include:

• HighLevel for secure forms, customer relationship management, communications, and program workflows.

• Skool for private community and program participation.

• Zoom for coaching calls, meetings, webinars, or events.

• Microsoft 365 for business email, documents, and administration.

• Stripe for transaction and payment administration; Stripe generally does not need the substance of coaching or health questionnaires.

• Contractors, coaches, event or retreat operators, product-fulfillment providers, and professional advisers who need limited access to deliver the Service, protect safety, comply with law, or defend claims.

We do not intentionally share consumer health data with Meta Pixel, Google Analytics, Vidalytics, YouTube, or other advertising or general analytics services. Health-data forms and pages should be configured to prevent the contents of health-related fields, URLs, events, or submissions from being transmitted to those tools.

Specific corporate affiliates receiving consumer health data as of the Effective Date: None.

We may disclose consumer health data when required by law, court order, subpoena, or valid legal process; to protect a person from a serious and imminent threat where legally permitted; or with your specific direction or consent.

Sale and Targeted Advertising

We do not sell consumer health data. We do not offer to sell consumer health data. We do not use consumer health data for targeted advertising.

If this practice changes, we will update this notice and obtain any separate written authorization required by law before a sale. A general acceptance of Terms of Service or this Health Data Notice will not serve as an authorization to sell consumer health data.

Consent and Withdrawal

Where consent is required, the request will identify:

• The categories of consumer health data to be collected or shared.

• The purpose of the collection or sharing and how the data will be used.

• The categories of recipients.

• How to withdraw consent.

Consent to collect and consent to share will be requested separately when required. You may withdraw consent for future collection or sharing by emailing [email protected] with the subject line Withdraw Health Data Consent. Withdrawal does not affect processing completed before withdrawal. If the information is necessary to deliver a personalized Service you requested, withdrawal may require us to discontinue or limit that Service.

Your Consumer Health Data Rights

Subject to applicable law and exceptions, you may have the right to:

• Confirm whether we collect, share, or sell consumer health data concerning you.

• Access your consumer health data.

• Receive a list of affiliates and third parties with whom your consumer health data was shared or sold, including contact information when required.

• Withdraw consent to future collection or sharing.

• Request deletion of consumer health data from our active systems and, within the legally permitted period, archives and backups.

• Require us to notify relevant processors, affiliates, contractors, and third parties of a valid deletion request.

• Appeal a refusal to act on your request.

• Exercise rights without unlawful discrimination.

Submit a request to [email protected] with the subject line Consumer Health Data Request. To appeal, use Consumer Health Data Appeal. You do not need to create a new account to submit a request. We may reasonably authenticate your identity and will respond within the period required by law.

Security and Retention

We limit access to consumer health data to personnel and processors who reasonably need it for an authorized purpose. We use administrative, technical, and physical safeguards appropriate to the volume and nature of the information.

We generally retain consumer health data for the duration of the requested Service and up to three years afterward, unless you request deletion and no exception applies, or a longer period is reasonably necessary to comply with law, resolve a dispute, respond to a product-safety issue, or establish or defend a claim. We delete, de-identify, or securely isolate data when retention is no longer necessary. Deletion from archives and backups may occur on a delayed schedule permitted by law.

Changes to This Health Data Notice

We will not collect, use, or share additional categories of consumer health data, or use existing data for materially different purposes, without first updating this notice and obtaining affirmative consent when required. The “Last Updated” date identifies the latest revision.

Contact

Training A GOAT LLC - Privacy Lead | 4539 N 22nd St, Suite R, Phoenix, Arizona 85016, United States | [email protected]