Privacy Policy

1. Information We Collect

Information You Provide Directly

When you make a purchase, create an account, subscribe to our newsletter, or contact us, we collect:

• Full name and contact details (email address, phone number)
• Billing and shipping address
• Payment information (processed securely via encrypted payment processors — we do not store full card numbers)
• Account credentials (username and encrypted password)
• Communications you send to our support team

Information Collected Automatically

When you visit our website, we automatically collect certain technical data:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages visited, time spent, and navigation paths
• Referring URLs and exit pages
• Device identifiers and screen resolution

Information from Third Parties

We may receive information about you from trusted third parties, such as payment processors, shipping carriers, advertising networks, and analytics providers, in connection with providing our services.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Processing and fulfilling your orders, including shipping and delivery confirmation
• Sending order confirmations, invoices, and customer support communications
• Sending promotional emails and newsletters (you may opt out at any time)
• Improving our website, product offerings, and customer experience
• Analyzing usage trends to better understand our audience
• Detecting and preventing fraudulent transactions and unauthorized access
• Complying with applicable legal obligations
• Administering our 180-day money-back guarantee and refund requests

3. Sharing of Information

We may share your information with select third parties only as necessary to provide our services:

• Payment Processors: Stripe, PayPal, and similar services process your payment data under their own privacy policies and PCI-DSS security standards.
• Shipping Partners: USPS, FedEx, UPS, and other carriers receive your shipping address to deliver your order.
• Analytics Providers: Google Analytics and Microsoft Clarity collect anonymized usage data to help us understand website performance.
• Email Marketing: We use reputable email service providers to send transactional and marketing emails on our behalf.
• Legal Requirements: We may disclose information if required to do so by law, court order, or government authority.

All third-party service providers are contractually obligated to protect your information and use it only for the purposes for which it was shared.

4. Cookies & Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and gather analytical data. Types of cookies we use include:

• Essential Cookies: Required for the website to function correctly (e.g., shopping cart, login sessions).
• Analytics Cookies: Help us understand how visitors interact with our site (e.g., Google Analytics).
• Marketing Cookies: Used to show relevant advertisements on third-party platforms (e.g., Meta Pixel, Bing Ads).
• Preference Cookies: Remember your settings and preferences for future visits.

You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality. We honor Do Not Track (DNT) signals where technically feasible.

5. Data Security

We implement industry-standard security measures to protect your personal information, including:

• SSL/TLS encryption for all data transmitted between your browser and our servers
• PCI-DSS compliant payment processing — we never store raw credit card numbers
• Access controls limiting employee access to personal data on a need-to-know basis
• Regular security audits and vulnerability assessments
• Two-factor authentication for administrative access to customer data systems

While we take every precaution, no method of data transmission over the internet is 100% secure. We encourage you to use strong, unique passwords and to notify us immediately if you suspect any unauthorized activity.

6. Your Rights & Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations.
• Portability: Request your data in a machine-readable format.
• Opt-Out of Marketing: Unsubscribe from marketing emails at any time using the link in any email we send.
• Restrict Processing: Request that we limit how we use your data in certain circumstances.

California residents have additional rights under the CCPA, including the right to know, delete, and opt out of the sale of personal information. To exercise any of these rights, contact us at privacy@fitspresso.com.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, including:

• Order records are retained for 7 years for accounting and legal compliance purposes.
• Customer support communications are retained for 3 years.
• Marketing data is retained until you opt out or request deletion.
• Analytics data is retained in anonymized/aggregated form indefinitely.

After the applicable retention period, your data is securely deleted or anonymized.

8. Children's Privacy

FitSpresso products and this website are intended for adults aged 18 and older. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that a minor has provided us with personal data, we will delete that information promptly. If you believe a child has submitted information to us, please contact us immediately.

9. International Users

FitSpresso is based in the United States. If you access our website from outside the United States, please be aware that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

For users in the European Economic Area (EEA) or United Kingdom, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission as the legal basis for international data transfers.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Send an email notification to registered customers for significant changes
• Post a notice on our website homepage for 30 days following material updates

Your continued use of our website or services after any changes constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Privacy Team:

• Email: privacy@fitspresso.com
• Mailing Address: FitSpresso Privacy Team, 123 Wellness Blvd, Suite 400, Austin, TX 78701
• Response Time: We aim to respond to all privacy inquiries within 5 business days.