Privacy Policy

1. Who We Are and What This Policy Covers

This Privacy Policy applies to Gym Tech Fitness Service LLC and Gym Tech Sales LTD (together, “Gym Tech Fitness,” “we,” “us” or “our”), operators of gymtechfitness.com and our related digital properties.

We are an independently owned premium fitness equipment retailer, service provider and gym design company serving the New York tri-state area since 2004, with showrooms in Forest Hills (NYC), Southampton (The Hamptons), Woodbury (Long Island) and Greenwich (Connecticut).

1.1 Scope

This policy covers personal information we handle through:

• Our website, including all forms, interactive widgets and the online store
• Email, telephone and text message communications with us
• In-person interactions at our showrooms and at your property during design, delivery, installation and service visits
• Our advertising and analytics activity across third-party platforms

This policy does not cover the independent practices of third-party websites, manufacturer sites, financing portals or social platforms that we link to. See section 18.

1.2 Our Role

For the information described here, we act as the controller (also called the “business” under United States state privacy laws) — meaning we determine why and how your personal information is processed. Vendors that process data on our behalf and under our instruction act as processors (or “service providers”). Those vendors are identified in section 6.

1.3 Privacy Contact

2. Information We Collect

2.1 Information You Give Us Directly

Identity data

First name, last name, and any name you supply in a message field.

Contact data

Email address, telephone and mobile number, billing address, shipping or service address.

Inquiry data

Service type, budget range, purchase timeframe, equipment type and age, fault description, room or facility type, square footage, access constraints such as stairs, company or facility name, daily user volume, preferred contact method and time, urgency, and free-text messages.

Consent and preference data

Your cookie category selections, marketing consent, SMS consent, selected showroom region, and accessibility display preferences.

Transaction data

Order contents, order value, invoices, delivery scheduling and payment method type. We do not receive or store complete payment card numbers — those are captured directly by our PCI DSS compliant payment gateway.

Service data

Equipment make, model and serial number, repair and preventive maintenance history, technician notes, appointment records and warranty claims.

2.2 Information Collected Automatically

When you use our website, our own systems and our analytics and advertising partners may record the following. We disclose this in specific detail because our contact widget attaches diagnostic and attribution metadata to each submission.

Device and technical data

IP address, user agent string, browser name and version, operating system, device category, screen and viewport dimensions, browser language, time zone, and network connection type.

Approximate location data

Country, state and city inferred from IP address by our analytics providers. We do not request or use the browser Geolocation API, and we do not collect precise or GPS location.

Usage and interaction data

Pages viewed, referring and exit URLs, on-site search terms, links and buttons clicked, maximum scroll depth, time on page, pages per session, session identifier and session start time, and whether pointer, touch or keyboard input was detected.

Attribution data

Campaign parameters (utm_source, utm_medium, utm_campaign, utm_content, utm_term, utm_id) and click identifiers (gclid, fbclid, msclkid, ttclid), plus first-party analytics identifiers such as the Google Analytics client ID and the HubSpot visitor token.

Diagnostic data

Where your browser exposes it, battery level and charging state. This is used only to diagnose form failures on mobile devices and is not used for advertising or profiling.

Storage data

Cookies, plus browser localStorage and sessionStorage entries. Section 9 lists these individually.

2.3 Information We Receive From Others

• Advertising platforms. Aggregated campaign and conversion reporting from Google and Meta.
• Analytics providers. Aggregated reports, behavioural metrics and session replays from Google Analytics and Microsoft Clarity.
• Our CRM. Interaction history, email engagement and lifecycle stage maintained in HubSpot.
• Public and commercial sources. Publicly available business information relevant to commercial and facility inquiries.
• Referrals. Contact details supplied by architects, designers, contractors, property managers or existing clients who refer you. If you are referred, you may contact us to ask how we obtained your details.

2.4 Sensitive Information We Do Not Want

We do not seek, and ask that you do not submit, the following through our website, forms or chat assistant: Social Security or government identification numbers, full financial account or payment card numbers, health, medical or disability records, precise geolocation, biometric identifiers, racial or ethnic origin, religious or philosophical beliefs, trade union membership, sexual orientation, immigration status, or account credentials.

If you submit such information anyway, we will delete it from our active records once identified. Sending it does not create any obligation on our part to retain, secure or process it in any particular manner beyond what applicable law requires.

3. How We Collect Information

• Website forms and the contact widget. Sales, service, gym design, move and install, flooring, commercial, callback, email and showroom contact forms, submitted through the floating contact widget.
• The AI chat assistant. Messages you type, plus any contact details you volunteer in conversation. See section 4.4.
• Cookies, pixels and browser storage. Set by us and by the partners named in section 6, subject to your cookie choices.
• Online store checkout. Order, billing, shipping and account data captured through WooCommerce.
• Telephone, email and text. Anything you tell us when you call, write or text, including notes our team records in the CRM.
• Showroom and on-site visits. Business cards, written quotations, signed service agreements, site measurements and installation notes.
• Marketing engagement. Whether you opened or clicked an email, and which links you followed.

4. Consent and Preference Tools on Our Website

Our website presents four separate interactive tools. They operate independently, rely on different legal bases, and store different things. This section explains exactly what each one does, because your choice in one tool does not silently change another.

4.1 Cookie Consent Banner and Preference Centre

On your first visit a consent banner appears in the lower-left corner of the screen. It remains available until you make a choice, and it offers four equally prominent actions. No option is pre-selected, no option is hidden behind extra clicks, and closing the page without choosing does not grant consent.

Accept

Grants consent for all optional categories: analytics and performance, marketing and advertising, and personalization.

Essential

Keeps only strictly necessary cookies. Analytics, advertising and personalization remain switched off.

Decline

Refuses all non-essential cookies. This is functionally equivalent to Essential and is offered separately so that refusal is as easy and as visible as acceptance.

Manage Preferences

Opens the preference centre where you can switch each optional category on or off individually and save your selection.

Your choice is recorded in your browser's localStorage under the key gtf_consent_v20, together with the date, time and policy version. Nothing in that record identifies you personally; it is a set of true or false flags. Because it is stored in your browser, clearing site data will remove it and the banner will appear again.

Google Consent Mode

We implement Google Consent Mode v2. Before you make a choice, all of ad_storage, analytics_storage, ad_user_data, ad_personalization, personalization_storage and functionality_storage default to denied. Only security_storage defaults to granted. Tags that depend on a denied signal do not write identifiers or read existing ones. When you choose, the signals update immediately and a gtf_consent_updated event is pushed to the data layer.

Changing or Withdrawing Consent

Consent is not permanent. Select the accessibility and privacy button in the lower-left corner of any page at any time, open the Privacy tab, adjust any category and save. Withdrawal takes effect immediately for future processing. It cannot undo processing that already lawfully occurred, and it does not by itself delete data already collected — to request deletion, see section 12.

4.2 Showroom and Location Preference Tool

We serve four regions with different showrooms, telephone numbers, addresses and opening hours. A short dialog may appear once asking you to select your state and your nearest showroom so that the correct details are displayed to you.

What This Tool Stores

A single short text value such as long-island or greenwich, plus the state you selected and a small record noting that we have already asked you. Storage keys used are gtf_region, gtf_state, gtf_region_prompt_v1 and a receipt at gtf_region_consent_v1 recording the date, the scope you chose and the method of your request.

What This Tool Does Not Do

• It does not request or use the browser Geolocation API, so no GPS permission prompt is triggered
• It does not perform IP-address-to-location lookup to guess where you are
• It does not use device fingerprinting or any probabilistic identification technique
• It does not create an advertising identifier or feed any advertising, profiling or lookalike audience
• It does not transmit your selection to us or to any third party — the value stays in your browser

Legal Basis and Storage Duration

Storing a display preference that you actively selected is a service you explicitly requested. We therefore rely on the strictly-necessary exemption for this storage, the same basis that applies to language selectors, currency selectors and shopping baskets. This basis is independent of the cookie consent banner. Declining analytics and advertising cookies does not disable the showroom selector, and selecting a showroom does not enable any analytics or advertising processing.

Because persistence beyond a single visit should be something you actually asked for, the dialog includes a plainly labelled “Remember my choice on this device” checkbox that states the duration and the effect of unticking it.

Checkbox ticked

Your selection is kept for up to twelve months in localStorage and in a first-party cookie, so we do not ask again.

Checkbox unticked

Your selection is kept in sessionStorage only and is discarded when you close your browser. Nothing persists on your device.

Dialog skipped or closed

Nothing is stored. We record only that we already asked, so that you are not prompted again on the next page.

Changing or Erasing Your Location Preference

Select Change my location in the site footer to switch showrooms at any time, or to clear the stored preference entirely. Clearing your browser's site data for our domain also removes it.

4.3 Accessibility Preferences Tool

The same lower-left corner button opens an Accessibility tab offering text size, line spacing, dark theme, high contrast, reduced motion, a high-legibility typeface, a reading guide and an enlarged cursor.

These settings are stored in your browser's localStorage under gtf_prefs_v20 as numeric levels and true or false flags. They are display settings only. They are never transmitted to us, never linked to your identity, never used to infer a disability, and never used for analytics, advertising, segmentation or profiling of any kind.

4.4 AI Chat Assistant

Our website offers an AI chat assistant, powered by Voiceflow, that can answer questions about equipment, gym design and service. Before the first message a privacy notice is displayed and you must choose to begin the conversation. Using the chat is entirely optional.

What is processed

The messages you type, the assistant's replies, the conversation timestamp, and any name, email address, telephone number or project detail you choose to provide in the conversation.

Where the transcript is held

Conversation state is stored in your browser's localStorage so the thread survives page navigation. Transcripts are also processed on Voiceflow's infrastructure in the United States.

Human review

Our team may review transcripts to answer a question you raised, to improve the assistant's accuracy, and to follow up on an inquiry you asked us to follow up on.

What not to send

Please do not enter payment card numbers, government identification numbers, passwords or health information into the chat. See section 2.4.

Automated content

Replies are generated by a large language model and are labelled as such in the interface. They may occasionally be inaccurate or incomplete. See section 10.

Clearing a conversation

Select Restart conversation in the chat menu, or clear your browser's site data for our domain.

5. How We Use Your Information

We use personal information only for the purposes below. Each purpose is paired with the basis on which we rely. Where consent is the basis, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

5.1 What We Do Not Do

• We do not sell your personal information, and we have not sold personal information in the preceding twelve months
• We do not share personal information for cross-context behavioural advertising without your consent to the marketing cookie category
• We do not make decisions about you by automated means alone that produce legal effects or similarly significant effects
• We do not use your data to set individualised prices
• We do not knowingly process the personal information of children under thirteen

6. Service Providers and Data Sharing

We share personal information with the vendors below so that they can perform services for us. Each is engaged under a written agreement that limits them to our documented instructions, requires appropriate security, and prohibits use of the data for their own unrelated purposes.

6.1 Analytics and Advertising

6.2 Business Operations

6.3 Other Permitted Disclosures

Legal process

Where disclosure is required by law, subpoena, court order, warrant or a lawful request from a governmental or regulatory authority. Where we are permitted to notify you, we will.

Rights and safety

Where necessary to investigate suspected fraud, to enforce our Terms of Use, or to protect the rights, property or safety of Gym Tech Fitness, our customers, our staff or the public.

Corporate transactions

In connection with a merger, acquisition, financing, reorganisation or sale of assets. Any acquirer will be bound to honour this policy for information received, and we will provide notice of any material change in how your information is handled.

With your direction

Any other disclosure you specifically ask us to make, such as sharing a design specification with your architect or contractor.

7. Email Marketing

We send marketing email only where we have your consent or an existing customer relationship that permits it, consistent with the CAN-SPAM Act and applicable state law.

7.1 What We May Send

• New arrivals and featured equipment
• Promotions, seasonal offers and showroom events
• Gym design ideas and space planning guidance
• Preventive maintenance reminders and service tips
• Company news and announcements

Transactional email — order confirmations, delivery scheduling, service appointment notices, warranty and safety notices — is not marketing. It relates to a transaction you entered into and may be sent whether or not you have marketing consent.

7.2 How We Obtain Consent

• Form opt-in. A clearly labelled checkbox that is never pre-ticked, on contact forms, quotation forms and at checkout
• Newsletter sign-up. Where you subscribe of your own accord
• Existing customer relationship. Purchasers may receive marketing about similar goods and services, with an opt-out in every message

We do not buy, rent or append marketing lists, and we do not add addresses without a lawful basis.

7.3 How to Stop Receiving Marketing Email

7.4 CAN-SPAM Compliance

• Header information and the sending domain accurately identify us
• Subject lines accurately describe the content
• Commercial messages are identifiable as advertisements
• A valid physical postal address appears in every marketing message
• A clear and conspicuous opt-out mechanism appears in every marketing message
• Opt-outs are honoured promptly and are not conditioned on any fee or additional information

8. Text Messages and TCPA Compliance

We send text messages only where you have given the level of consent that the Telephone Consumer Protection Act and applicable state law require for the type of message concerned.

8.1 Types of Message

Service messages

Appointment confirmations and reminders, technician dispatch and arrival notices, completion confirmations.

Inquiry follow-up

Replies to a text-back request you submitted through our website.

Transactional messages

Order confirmations, delivery windows and status updates.

Marketing messages

Promotions, event invitations and new product announcements. These require separate express written consent and are never bundled with service consent.

8.2 How We Obtain Consent

• Website checkbox. Never pre-ticked, and disclosing the sender, message types, that rates may apply, how to stop, how to get help, and a link to this policy
• Written consent in showroom. On a service agreement or intake form
• Verbal consent. Recorded in our CRM with date, time and the person who took it, for service-related messages

8.3 How to Stop Receiving Text Messages

• Reply STOP to any message from us to end marketing texts immediately
• Reply HELP for assistance and our contact details
• Email webmaster@gymtechfitness.com with your mobile number and “Remove from SMS” in the subject line
• Telephone (866) 496-8324

You will receive one confirmation message and then no further marketing texts. Transactional messages about an active order or a booked appointment may continue unless you ask us to stop those as well.

8.4 Our TCPA Commitments

• Consent to receive marketing texts is never a condition of purchasing any product or service
• We do not use an automatic telephone dialling system or an artificial or prerecorded voice for marketing without prior express written consent
• We do not make marketing calls or send marketing texts to numbers on the National Do Not Call Registry or on our internal do-not-contact list without consent
• We keep records of each consent, including the date, time, method, exact disclosure text and number
• We honour revocation by any reasonable means, and within one business day
• We observe calling and messaging time restrictions under federal and state law

9. Cookies, Pixels and Browser Storage

Cookies are small files placed on your device by a website. We also use related technologies: pixel tags and web beacons that signal an event, localStorage and sessionStorage that hold values in your browser, and software development kits inside embedded content.

9.1 Categories

9.2 Cookies and Storage in Use

Third parties occasionally rename or add cookies. This table is reviewed regularly. If you find an entry that is not listed, please tell us and we will investigate and update it.

9.3 Controlling Cookies

• Our preference centre. The most direct route. Select the accessibility and privacy button in the lower-left corner of any page, open the Privacy tab, and change any category
• Browser settings. Every major browser can block or delete cookies and clear site storage. Blocking strictly necessary cookies will break the basket, checkout and login
• Industry tools. optout.aboutads.info (opens in a new tab) and optout.networkadvertising.org (opens in a new tab)

9.4 Global Privacy Control and Do Not Track

We honour the Global Privacy Control signal. Where your browser or extension transmits GPC, we treat it as a valid request to opt out of sale and of sharing for cross-context behavioural advertising, and we apply it automatically without requiring any further action from you.

We do not respond to the older DNT header, because no common industry interpretation of that header was ever settled. Please use GPC or our preference centre instead.

10. Artificial Intelligence and Automated Processing

10.1 Where We Use Automation

AI chat assistant

Generates conversational answers about equipment, design and service, and can collect the details needed to pass an inquiry to a person.

Lead routing

Rules-based workflows direct a submission to the correct showroom or team using the service type and region you selected.

Lead prioritisation

Submissions may be ordered for follow-up using the budget, timeframe and urgency you supplied. This affects only the order in which our team makes contact.

Spam and fraud screening

Automated checks, including hidden honeypot fields and submission pattern analysis, filter automated traffic.

10.2 Human Involvement

No pricing, credit, eligibility, service refusal or other consequential decision about you is made by automated means alone. A member of our team reviews and decides. You may ask for human review of any automated outcome by emailing webmaster@gymtechfitness.com.

10.3 Accuracy of Generated Content

10.4 Training

We do not authorise our processors to use your conversations or submissions to train general-purpose or third-party foundation models. We may review transcripts internally to correct errors and improve the assistant's configuration for our own site.

11. How Long We Keep Information

We keep personal information only as long as needed for the purpose it was collected for, to meet legal and tax obligations, to resolve disputes, and to enforce our agreements. Retention periods below are defaults and may be extended where a legal hold, claim, investigation or regulatory requirement applies.

At the end of a retention period we securely delete or irreversibly anonymise the data. Anonymised and aggregated statistics that can no longer identify anyone may be kept indefinitely.

12. Your Privacy Rights

The rights below are available to everyone who contacts us, regardless of where you live. We extend them voluntarily rather than restricting them to residents of particular states.

12.1 How to Make a Request

• Email webmaster@gymtechfitness.com with “Privacy Rights Request” in the subject line
• Telephone (866) 496-8324
• In person at any of our four showrooms

Please tell us which right you wish to exercise and give us enough detail to find your records. If you cannot use email or the telephone because of a disability, tell us how you would prefer to communicate and we will accommodate it — see our Accessibility Statement.

12.2 Verification

To protect you, we must be reasonably certain who is asking. We normally verify by matching two or more data points already in our records, or by replying to the email address or telephone number we already hold. We will not ask for a government identification document or a payment card number to verify a routine request. Verification information is used only for verification and is then deleted.

12.3 Authorised Agents

An agent may submit a request for you with written authorisation signed by you, or with a valid power of attorney. We may contact you directly to confirm the authorisation and the agent's identity.

12.4 Timing

• Acknowledgement within 10 calendar days
• Substantive response within 45 calendar days, extendable once by a further 45 days where the request is complex, with notice to you of the extension and the reason
• Marketing opt-outs actioned within 10 business days for email and 1 business day for text
• Appeals answered in writing within 45 calendar days

Requests are free. We may charge a reasonable fee only for repetitive or excessive requests, and we will tell you before doing so.

12.5 When We May Decline

We may refuse, in whole or in part, where we cannot verify identity, where the request is manifestly unfounded or excessive, where fulfilling it would infringe another person's rights, where we must retain the record to comply with a legal obligation such as tax record-keeping, or where the information is needed to establish, exercise or defend a legal claim. We will always tell you which ground applies and how to appeal.

12.6 State-Specific Notes

California

Residents have the rights above under the CCPA as amended by the CPRA, including the right to know, delete, correct, opt out of sale or sharing, and limit the use of sensitive personal information. We have not sold personal information and have not shared it for cross-context behavioural advertising other than through the marketing cookie category, which requires your opt-in. We do not use or disclose sensitive personal information for purposes requiring a right to limit.

Nevada

Residents may submit a verified request not to sell covered information under Nevada Revised Statutes Chapter 603A. We do not sell covered information, and we will record any request received.

New York

As a New York business we comply with the SHIELD Act's reasonable safeguards and breach notification requirements, and with New York General Business Law provisions on consumer protection and unsolicited communications.

Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other comprehensive-law states

Residents may exercise the rights above, including the right to opt out of targeted advertising and profiling and to appeal a refusal. Our universal opt-out honours the Global Privacy Control signal described in section 9.4.

Outside the United States

If you are in a jurisdiction with additional statutory rights, we will honour them to the extent they apply to us. Please identify your jurisdiction in your request.

13. Every Opt-Out in One Place

14. Children's Privacy

Our website, products and services are directed to adults. We do not knowingly collect personal information from children under thirteen, and our advertising is not directed to them, consistent with the Children's Online Privacy Protection Act.

If you believe a child under thirteen has given us personal information, email webmaster@gymtechfitness.com with enough detail for us to locate the record. We will delete it promptly and confirm to you in writing.

If you are between thirteen and eighteen, please obtain your parent's or guardian's permission before submitting personal information or making a purchase. We do not knowingly sell to minors without adult authorisation.

Fitness equipment can cause serious injury if used without supervision or instruction. Nothing in this policy or on our website is an invitation for a minor to use equipment unsupervised, and our Terms of Use govern product use.

15. Security

We maintain administrative, technical and physical safeguards designed to protect personal information against unauthorised access, disclosure, alteration and destruction, as required by the New York SHIELD Act and comparable standards.

15.1 Measures in Place

• TLS encryption for all traffic between your browser and our site, and for all onward transmission to our processors
• Managed hosting with network-level filtering, monitoring and patch management
• Role-based access control, so staff see only the data their role requires
• Multi-factor authentication on administrative and CRM accounts
• Payment card data captured directly by a PCI DSS compliant gateway and never stored on our systems
• Routine security updates to the platform, plugins and dependencies
• Honeypot fields and submission pattern analysis to filter automated abuse
• Automatic masking of input fields in session replay tooling
• Written data processing agreements with every processor
• Periodic review of vendor access and removal of access that is no longer needed
• Staff training on data handling and phishing awareness

15.2 If a Breach Occurs

• Contain and investigate the incident, and preserve evidence
• Assess which individuals and which categories of data are affected
• Notify affected individuals in the most expedient time possible and without unreasonable delay, as required by the SHIELD Act and other applicable breach laws
• Notify the New York Attorney General and other regulators where required
• Describe what happened, what was involved, what we are doing, and what you can do
• Remediate the root cause and update our controls

15.3 Reporting a Vulnerability

If you believe you have found a security vulnerability in our website, please report it to webmaster@gymtechfitness.com. Please give us a reasonable opportunity to investigate and remediate before public disclosure. We will not pursue action against good-faith research that avoids privacy violations, service degradation and data destruction.

16. Where Your Information Is Processed

Gym Tech Fitness is established in the United States and serves the New York tri-state area. Our systems and all of our processors operate in the United States. If you access our website from outside the United States, your information will be transferred to and processed in the United States, where data protection law differs from the law of your own country and where public authorities may have rights of access under United States law.

By submitting information to us you acknowledge this transfer. Where a transfer mechanism is legally required for your jurisdiction, we will put an appropriate one in place. Contact us to ask which safeguards apply to you.

17. Legal Terms Applying to This Policy

17.1 Relationship to Our Other Terms

This policy explains our information practices. It does not by itself create a contract, and it does not grant rights beyond those given by applicable law. Your use of the website and purchase of products and services is governed by our Terms of Use and by any signed quotation, sales order or service agreement. Where a signed agreement conflicts with this policy on a data handling matter, the signed agreement controls for that matter.

17.2 No Professional Advice

Content on our website, including guidance produced by the AI assistant, is general information only. It is not medical, health, fitness, architectural, engineering, structural, electrical, legal, tax or financial advice. Consult a suitably qualified professional before relying on it. Always obtain confirmation from our team before committing to a purchase, installation or structural change.

17.3 Accuracy of Information You Give Us

You are responsible for the accuracy of the information you submit. Providing inaccurate details may cause us to send communications to the wrong recipient, misroute an inquiry, or attend an incorrect address. Please keep your details current and tell us of any change. Do not submit another person's information unless you are authorised to do so.

17.4 Third-Party Conduct

The processors named in section 6 are independent companies. We select them with care, bind them by contract and monitor them, but we do not control their internal systems. To the extent permitted by law, we are not responsible for acts or omissions of a third party that occur outside our instructions, nor for the independent privacy practices of any external website you reach through a link.

17.5 Limitation of Liability

17.6 Governing Law and Forum

This policy is governed by the laws of the State of New York, without regard to conflict of laws principles. Any dispute concerning this policy will be brought exclusively in the state or federal courts located in the State of New York, and you consent to their personal jurisdiction. This does not limit your right to complain to a regulator in your own jurisdiction or to pursue any non-waivable statutory remedy.

17.7 Severability and No Waiver

If any provision of this policy is held unenforceable, that provision will be modified to the minimum extent needed to make it enforceable, or severed, and the remaining provisions will continue in full force. Our failure to enforce any provision is not a waiver of it.

17.8 Language

This policy is published in English. Any translation is provided for convenience only, and the English version controls in the event of a discrepancy.

18. Links, Embedded Content and Social Features

Our website links to and embeds content from third parties, including manufacturer sites, financing portals, mapping and review services, and social platforms. This policy covers only gymtechfitness.com.

Embedded content behaves as though you had visited the third party's own site. It may set cookies, collect usage data and, if you are signed in to that platform, associate the visit with your account there. Please review the privacy notice of any third party whose content you interact with.

A link is not an endorsement, and we do not warrant the accuracy, safety, accessibility or legality of external content. If an embedded element presents an accessibility barrier, tell us and we will provide the information another way — see our Accessibility Statement.

19. Changes to This Policy

We may update this policy to reflect changes in our practices, technology or the law. When we do:

• We update the effective date and the review date at the top of the page
• For material changes we display a notice on the website for a reasonable period
• For material changes affecting how we use information we already hold, we email customers with an active account or a recent interaction
• Where a change requires consent, we ask for fresh consent before applying it, and the cookie banner reappears

Continuing to use the website after the effective date means you accept the updated policy, except where consent is legally required, in which case we rely on your fresh consent instead. Previous versions are available on request from webmaster@gymtechfitness.com.

20. Contact Us

Questions, concerns and rights requests all go to the same place. Our Webmaster is our designated privacy contact.

20.1 Regulators

You may also contact a regulator. In New York, the Office of the Attorney General, Bureau of Internet and Technology (opens in a new tab). In California, the California Privacy Protection Agency (opens in a new tab). You may also contact the Federal Trade Commission (opens in a new tab). We would prefer the chance to resolve your concern first.

20.2 Related Documents

• Accessibility StatementOur WCAG 2.2 AA conformance and how to report a barrier
• Terms of UseTerms governing use of our website and services
• Policies OverviewReturns, delivery, installation and warranty
• Ask a Privacy Questionwebmaster@gymtechfitness.com