Privacy Policy

Information We Collect and Store

Over the prior twelve (12) months, we have collected the following categories of personal information from users through direct submissions and your activity on the Website:

• Identifiers: Name, Phone Number, Email Address, IP Address, Device Identifiers, Online Identifiers, Social Media User IDs.
• Internet or Other Electronic Activity Information: Browsing history, search history, interaction with ads and videos, Website activity logs.
• Sensitive Personal Information: We do not knowingly collect sensitive personal information, including precise geolocation data, except where explicitly disclosed and consented to by the user in connection with future services.
• Legal Bases for Collection and Use: Your consent; our legitimate business interests; compliance with legal obligations; or other lawful bases as required.

Purposes for Processing:

• Marketing and advertising efforts
• Transaction fulfillment and payment processing
• Customer service and support
• Website and service analytics
• Security, fraud prevention, and enforcement of our Terms of Service
• Delivery of digital content and personalized experiences
• Dispute resolution

Consequences of Non-Disclosure: Failure to provide certain personal information may limit our ability to provide requested services, process transactions, or protect the security of our Website and users.

Note:We do not use personal information for profiling as defined under U.S. state privacy laws. See the “Your Rights” section below for details on how to exercise privacy rights related to profiling.

Data Minimization

We limit our collection of personal information to what is adequate, relevant, and reasonably necessary and proportionate to provide the services you have requested or for the purposes disclosed in this Policy. We do not collect personal information beyond what is needed for the disclosed purposes.

With Whom We Share Your Personal Information

In the last 12 months, we have shared personal information with the following categories of third parties for the purposes described below. The types of personal information disclosed vary by user interaction, but generally fall into the categories listed.

We use third-party payment processors, such as Stripe, Inc., to process payments. SARAS does not store full payment card details; payment information is handled directly by our payment processors in accordance with their privacy and security practices.

Categories of Third Parties

We may share your personal information with:

• Content Management Systems (CMS)
• Customer Relationship Management (CRM) Systems
• Data Analytics Providers
• Data Linking Platforms
• Email Marketing and Email Service Providers
• Financial Transaction Processors
• Fraud and Security Vendors
• Hosting and Cloud Infrastructure Providers
• Marketing and affiliate partners (for attribution and promotional purposes only)
• Operating Systems and Platforms
• Shipping or Fulfillment Vendors
• Social Networks
• Spam Prevention Services
• Video Embedding Vendors
• Website/Application Development and Design Vendors
• Font and Display Technology Vendors

Third-Party Identity Disclosure: Residents of certain states, including Minnesota and Oregon, may request the specific names of third parties (not just categories) to whom we have disclosed their personal information. To make such a request, please contact us using the information provided below.

Purposes for Sharing

We share personal information for the following business or commercial purposes:

• To manage and maintain our interactions with you
• To process transactions and provide requested services
• To host and deliver our website and digital content
• To send you emails or other communications
• To analyze user interactions and site behavior
• To build or improve website features
• To provide you with personalized advertisements
• To detect and resolve bugs or security incidents
• To prevent fraud, spam, or other malicious activity
• To ensure ad delivery and attribution
• To embed and track video content

Types of Personal Information Shared

We only share personal information as necessary to operate our business, provide services, comply with legal obligations, or pursue legitimate interests, and always in accordance with applicable privacy laws.

How We Protect Your Personal Information

We implement a range of administrative, technical, and physical safeguards to protect your personal information, including:

• Collecting only what is necessary
• Using SSL encryption and other secure technologies for data transmission
• Deleting personal information when it is no longer needed
• Maintaining written security policies and procedures
• Conducting background checks on personnel with access to sensitive data
• Training employees on data security and requiring confidentiality agreements
• Using anti-virus software and intrusion detection systems
• Keeping software and security safeguards up to date

Data Protection Assessments

We conduct data protection impact assessments for processing activities that present significant risk to consumer privacy, as required by applicable state laws. These assessments include, but are not limited to, processing activities involving:

• Selling or sharing personal information
• Processing sensitive personal information
• Targeted advertising
• Profiling that presents a reasonably foreseeable risk of harm
• Use of automated decision-making technology for significant decisions

Sale of Your Information

We do not sell your personal information.

Maryland Residents: Consistent with the Maryland Online Data Privacy Act, we do not sell sensitive personal information under any circumstances, including precise geolocation data, health data, biometric data, or other categories of sensitive information as defined by Maryland law.

Please refer to the “Your Rights” section for information on how to exercise your privacy rights related to the sale of data under applicable law.

Cookies

We use only strictly necessary cookies required for the Website to function securely and to keep you signed in. We do not use analytics, advertising, or tracking cookies. For more detail, see our Cookie Policy.

Children's and Minors' Privacy

This Website is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware that such data has been collected, we will delete it and take steps to prevent future collection.

Consumers Under 18: In states where required by law (including Maryland, Connecticut, Delaware, and others), we do not sell personal data of consumers we know or have reason to believe are under 18 years of age, and we do not process their personal data for purposes of targeted advertising. This protection applies regardless of whether parental consent has been obtained.

Analytics

We do not use Google Analytics or other third-party web analytics services to track your activity on the Website.

Information Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, or as otherwise required by law. Retention periods are as follows:

• Identifying Information: Retained as long as necessary for legitimate business purposes, legal compliance, or until you request deletion, subject to applicable retention requirements.
• Internet or Electronic Activity Information: Retained until no longer needed or you request deletion.
• Sensitive Personal Information: Retained until no longer needed or you request deletion.

Direct Marketing

We may use your information for direct marketing, which involves contacting you directly about our services or offerings.

See the “Your Rights” section to learn how you can opt out of such communications.

Your Rights

Depending on where you reside, you may have certain rights regarding your personal information under applicable U.S. state privacy laws. These rights apply in all states that have enacted comprehensive consumer data protection laws, including—but not limited to—California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Nebraska, Tennessee, Minnesota, Maryland, Iowa, Delaware, New Hampshire, Indiana, Kentucky, New Jersey, Rhode Island, and Florida. We update this section as new laws take effect.

Access & Transparency Rights

• Right to Confirm Processing: You may request confirmation as to whether we are processing your personal information.
• Right to Access: You may request access to the personal information we hold about you.
• Right to Know (California-specific): California residents may request:
  • Categories of personal information collected
  • Sources of that information
  • Business or commercial purposes for collection
  • Categories of third parties with whom your information was shared or sold
• Right to Know Third Parties: Some states (including Minnesota and Oregon) grant rights to request the specific names of third parties with whom your data was shared, as well as categories of personal data sold or disclosed.

Portability & Correction Rights

• Right to Data Portability: You may request your personal information in a portable, machine-readable format.
• Right to Data Transfer: Where feasible, you may request that your data be transmitted to another provider.
• Right to Correction: You may request correction of inaccurate personal information we hold about you.

Consent, Deletion & Restriction Rights

• Right to Withdraw Consent: You may withdraw your consent to our processing activities, where consent was required.
• Right to Restrict Processing: You may request that we limit the ways in which we use your personal data.
• Right to Deletion: You may request that we delete the personal data we have collected about you, subject to certain exceptions.

Objection & Opt-Out Rights

• Right to Opt Out of Direct Marketing: You may opt out of receiving marketing communications from us.
• Right to Opt Out of Sale of Personal Information: You may opt out of the sale of your personal data to third parties.
• Right to Opt Out of Sharing for Targeted Advertising: You may opt out of the sharing of your personal data for targeted or cross-context behavioral advertising.
• Right to Opt Out of Profiling: You may opt out of the use of your personal data for profiling in furtherance of decisions that produce legal or similarly significant effects.
• Right to Opt Out of Location Tracking: You may opt out of tracking of your geographic location through your browser or device settings.
• Right to Opt Out of Automated Decision Making: You may opt out of decisions made solely through automated processing that produce legal or similarly significant effects.

Additional Rights

• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Limit Use of Sensitive Personal Information: You may request that we limit our use and disclosure of sensitive personal information to those uses necessary to perform our services.
• Right to Lodge a Complaint: You may file a complaint with your state's attorney general or data protection authority.

Exercising Your Rights

If you wish to exercise any of your privacy rights under this Policy, please contact us using one of the methods below:

Email: sarasfit.help@gmail.com

Mail: SARAS Fitness, LLC, 4604 Alexandra Drive, Colleyville, TX 76034

You may also direct any questions or comments about this Privacy Policy or our privacy practices to the contact information above.

Your Privacy Choices

Universal Opt-Out Mechanisms / Global Privacy Control

We recognize and honor Global Privacy Control (GPC) signals and other universal opt-out mechanisms (UOOMs) as valid requests to opt out of the sale or sharing of your personal information and targeted advertising. When we detect a GPC signal from your browser or device, we will automatically suppress tracking technologies used for targeted advertising, audience building, and cross-site profiling in real time.

Opt-Out Confirmation: When your opt-out preference signal is processed, we will display a visible confirmation (such as “Opt-Out Request Honored”) to acknowledge that your request has been received and honored.

You can also opt out of location tracking and targeted advertising through:

• Adjusting the settings on your browser or device
• Enabling Global Privacy Control (GPC) in your browser

If you opt out using the GPC signal, the signal will be stored in your browser. If you opt out by contacting us directly, your preference will be applied to your account and our internal systems, including offline records.

California residents may also exercise their right to opt out of the sharing of their personal information by enabling GPC in their browser, or by contacting us directly at sarasfit.help@gmail.com.

Identity Verification

Before we process your request, we must verify your identity. To do so, please provide the following:

• Full Name
• Phone Number
• Email Address

We may be unable to fulfill your request if you do not provide the required information.

Authorized Agents

You may designate an authorized agent to act on your behalf. Agents may submit requests using the same contact methods listed above. To verify their authority, we require:

• A valid power of attorney
• A copy of the requester's valid government-issued ID
• A copy of the authorized agent's valid government-issued ID

Requests may be denied if proper verification is not provided.

Response Time and Appeals

Response Time: We will respond to most requests within 45 days. If additional time is needed (up to an additional 45 days), we will notify you in writing of the reason for the extension.

Denials: If we deny your request, we will provide the reason for the denial.

Appeals:You have the right to appeal our refusal to take action. Appeals may be submitted using the same contact information above. We will respond to most appeals within 45–60 days, or up to 105 days with an extension. Our response will explain any action taken or not taken and why.

Fees: We generally do not charge for requests. However, we may impose a fee for second or subsequent requests within a 12-month period.

Accountability

Our designated Privacy Officer is responsible for overseeing our privacy practices and ensuring compliance with applicable data protection laws.

You may contact the Privacy Officer using the contact details provided above.

Location of Data Processing

All personal information we process is handled within the United States.

We may transfer your data across borders for processing. Your information may be subject to access by law enforcement or national security authorities in the receiving jurisdiction. Where applicable, we use standard contractual clauses, adequacy decisions, and additional safeguards for international data transfers.

Third-Party Websites

Our Website may contain links to third-party websites. These links are provided for your convenience only. We are not responsible for the content, security, or privacy practices of such external sites. You are encouraged to review their privacy policies separately.

Do Not Track (DNT) and Opt-Out Preference Signals

Your browser may support “Do Not Track” settings. While we do not respond to DNT signals, we do recognize and honor Global Privacy Control (GPC) signals as valid opt-out requests, as described in the “Your Privacy Choices” section above.

Changes to This Policy

We reserve the right to modify this Privacy Policy at any time. Changes may be made without prior notice. We encourage you to review this Policy regularly to stay informed about our privacy practices.