Beamghflushingux

Privacy Policy

This document explains how Beamghflushingux collects, processes, stores, and protects personal data when you visit beamghflushingux.world or use our online morning workout programs.

Last updated:

1. Data Controller Information

The data controller responsible for your personal information is Beamghflushingux, located at 2934 Russell St, Detroit, MI 48207, USA. For privacy-related inquiries, contact us at assist@beamghflushingux.world or call +1 313-833-9300 during business hours (Monday through Friday, 9:00 AM to 5:00 PM Eastern Standard Time).

We operate the website beamghflushingux.world and provide educational online morning workout programs. This Privacy Policy applies to all interactions with our website, account services, and customer support channels.

2. Scope and Applicable Law

This Privacy Policy is designed to comply with the General Data Protection Regulation (GDPR) for users in the European Economic Area, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) for California residents, and other applicable United States federal and state privacy laws.

By using our website, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our data practices, please discontinue use of the website and contact us to request deletion of any data we may hold.

3. Categories of Personal Data We Collect

3.1 Information You Provide Directly

When you interact with our website, we may collect the following categories of personal data that you voluntarily provide:

  • Identity data: full name, username, or account identifier
  • Contact data: email address, phone number, mailing address
  • Communication data: messages submitted through our contact form, support tickets, and email correspondence
  • Account data: program preferences, session log entries, and progress journal notes you choose to record
  • Payment data: billing name, billing address, and transaction identifiers (payment card details are processed by our third-party payment processor and are not stored on our servers)
  • Consent records: timestamps and categories of cookie and marketing consents you provide

3.2 Information Collected Automatically

When you visit our website, certain technical data is collected automatically through cookies, server logs, and similar technologies:

  • Device and browser data: IP address, browser type and version, operating system, device type, screen resolution
  • Usage data: pages visited, time spent on pages, click paths, referral URLs, session duration
  • Location data: approximate geographic location derived from IP address (country and region level only)
  • Cookie identifiers: unique identifiers stored in cookies or local storage as described in our Cookie Policy

3.3 Information from Third Parties

We may receive limited personal data from third-party service providers, including payment processors (transaction confirmation), analytics providers (aggregated usage statistics), and email delivery services (delivery and open rates for communications you have consented to receive).

4. Purposes and Legal Bases for Processing

We process your personal data only for specified, explicit, and legitimate purposes. The table below outlines our primary processing activities and their legal bases under GDPR:

  • Providing access to workout programs and account services — Performance of a contract (Article 6(1)(b) GDPR)
  • Responding to contact form submissions and support requests — Legitimate interest in customer communication (Article 6(1)(f) GDPR) or consent where applicable (Article 6(1)(a) GDPR)
  • Processing payments and managing subscriptions — Performance of a contract (Article 6(1)(b) GDPR)
  • Website analytics and performance improvement — Consent (Article 6(1)(a) GDPR) for non-essential cookies; legitimate interest for essential operations
  • Compliance with legal obligations — Legal obligation (Article 6(1)(c) GDPR)
  • Fraud prevention and security monitoring — Legitimate interest in protecting our services and users (Article 6(1)(f) GDPR)
  • Marketing communications — Consent (Article 6(1)(a) GDPR), which you may withdraw at any time

5. How We Use Your Personal Data

Your personal data is used exclusively for the purposes described in this policy. Specifically, we use collected information to:

  • Create and manage your user account and program access credentials
  • Deliver morning workout session content, progress tracking tools, and challenge participation features
  • Process and confirm payments, issue receipts, and manage refund requests per our Refund Policy
  • Respond to inquiries submitted through our contact form, email, or phone
  • Send transactional communications such as account confirmations, password resets, and service updates
  • Send marketing communications only where you have provided explicit consent
  • Analyze website usage patterns to improve content, navigation, and user experience
  • Detect, investigate, and prevent fraudulent transactions, unauthorized access, and other illegal activities
  • Comply with applicable laws, regulations, court orders, and government requests
  • Establish, exercise, or defend legal claims where necessary

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

6. Data Sharing and Third-Party Recipients

We do not sell your personal data to third parties. We share personal data only in the following circumstances:

  • Service providers: trusted vendors who assist with hosting, payment processing, email delivery, analytics, and customer support, bound by data processing agreements requiring them to protect your data and process it only on our instructions
  • Legal requirements: when required by law, regulation, legal process, or enforceable governmental request
  • Business transfers: in connection with a merger, acquisition, or sale of assets, with notice provided to affected users
  • Protection of rights: when necessary to protect the rights, property, or safety of Beamghflushingux, our users, or the public

A list of key sub-processors is available upon request by contacting assist@beamghflushingux.world.

7. International Data Transfers

Beamghflushingux is based in the United States. If you access our website from the European Economic Area, United Kingdom, or other regions with data transfer restrictions, your personal data may be transferred to and processed in the United States or other countries where our service providers operate.

For transfers from the EEA, we rely on appropriate safeguards including Standard Contractual Clauses approved by the European Commission, supplemented by technical and organizational measures to ensure an adequate level of data protection.

8. Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required or permitted by law:

  • Account data: retained for the duration of your active account plus three years after account closure
  • Contact form submissions: retained for two years from the date of submission
  • Payment and transaction records: retained for seven years to comply with tax and accounting regulations
  • Cookie consent records: retained for three years from the date of consent
  • Server logs and security records: retained for twelve months unless needed for an ongoing investigation
  • Marketing consent records: retained until consent is withdrawn, plus one year for audit purposes

After the applicable retention period expires, personal data is securely deleted or anonymized so it can no longer be associated with you.

9. Security Measures

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • HTTPS encryption for all data transmitted between your browser and our servers
  • Encryption of sensitive data at rest where technically feasible
  • Role-based access controls limiting employee access to personal data on a need-to-know basis
  • Regular security assessments and vulnerability monitoring
  • Secure password hashing and authentication mechanisms for user accounts
  • Incident response procedures for detecting and responding to data breaches
  • Staff training on data protection practices and confidentiality obligations

While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security but commit to notifying affected users and relevant authorities of any breach as required by applicable law.

10. Your Rights Under GDPR and Applicable Laws

Depending on your location, you may have the following rights regarding your personal data:

  • Right of access: request a copy of the personal data we hold about you
  • Right to rectification: request correction of inaccurate or incomplete personal data
  • Right to erasure: request deletion of your personal data where there is no compelling reason for continued processing
  • Right to restriction: request that we limit processing of your personal data in certain circumstances
  • Right to data portability: receive your personal data in a structured, commonly used, machine-readable format
  • Right to object: object to processing based on legitimate interests or for direct marketing purposes
  • Right to withdraw consent: withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing
  • Right not to be subject to automated decision-making: as stated in Section 5, we do not engage in such processing

California residents additionally have the right to know what personal information is collected, request deletion, opt out of the sale of personal information (we do not sell personal data), and not be discriminated against for exercising privacy rights.

To exercise any of these rights, contact us at assist@beamghflushingux.world with sufficient information to verify your identity. We will respond within thirty days for GDPR requests and forty-five days for CCPA requests, with possible extensions as permitted by law.

11. Children's Privacy

Our website and services are intended for adults aged eighteen and older. We do not knowingly collect personal data from individuals under eighteen years of age. If we become aware that we have collected personal data from a minor, we will take steps to delete that information promptly. Parents or guardians who believe their child has provided personal data to us should contact assist@beamghflushingux.world immediately.

12. Cookies and Tracking Technologies

We use cookies and similar technologies as described in our Cookie Policy. Non-essential cookies are placed only with your consent, which you may manage through our cookie banner or browser settings.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or business operations. Material changes will be communicated by posting the updated policy on this page with a revised "Last updated" date. We encourage you to review this policy regularly. Continued use of the website after changes constitutes acceptance of the updated policy.

14. Supervisory Authority and Complaints

If you are located in the EEA and believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local data protection supervisory authority. We encourage you to contact us first at assist@beamghflushingux.world so we can attempt to resolve your concern directly.

15. Contact Information

For questions, requests, or complaints regarding this Privacy Policy or our data practices, contact:

Beamghflushingux
2934 Russell St, Detroit, MI 48207, USA
Email: assist@beamghflushingux.world
Phone: +1 313-833-9300