Last updated: May 1, 2026. This notice describes how Engage Health Labs LLC (d/b/a Engage Performance) collects, uses, and shares personal information. Have this policy reviewed by counsel—especially if you serve EU/UK users or California residents.
We respect your privacy. This Privacy Policy applies to personal information collected through engageperformance.com, related subdomains, email, messaging, and offline intake tied to our coaching Services. By using the Site or purchasing Services, you agree to this Policy together with our Cookie Policy and Terms of Service.
1. Who we are
Controller / business: Engage Health Labs LLC, doing business as Engage Performance, with principal place of business at 3219 E Camelback Rd #400, Phoenix, AZ 85018. Privacy contact: engagebiosupplements@gmail.com · (720) 370-0181.
2. Scope
This Policy does not apply to third-party websites, embeds, or tools we link to (for example, payment processors’ hosted checkout pages, scheduling widgets, or social networks). Those providers publish their own notices.
3. Information we collect
We collect information you provide, information collected automatically, and information from partners as follows.
A. Information you provide
- Identifiers and contact data: name, email, phone, billing and mailing address, account credentials.
- Payment-related data: payment method type and last four digits; full bank card numbers are processed by our payment processors and not stored on our servers.
- Coaching and health-adjacent information you choose to share: goals, training logs, readiness, nutrition notes, injury history, equipment available, and similar inputs needed to deliver Services.
- Communications: emails, form submissions, call notes when relevant to Services.
- Commercial information: purchase history, plans selected, subscription status.
B. Automatically collected data
- Device and log data: IP address, browser type, operating system, referring URLs, pages viewed, and timestamps.
- Cookies and similar technologies: described in our Cookie Policy.
- Approximate location derived from IP for fraud prevention and analytics.
C. Information from third parties
We may receive limited data from payment processors (transaction status), scheduling providers (appointment metadata), email delivery vendors (bounce/delivery events), and fraud-prevention services.
4. How we use information
- Providing, scheduling, and personalizing coaching Services.
- Processing payments, fulfilling orders, detecting fraud, and accounting.
- Communicating about your account, security, and policy changes.
- Improving the Site, measuring aggregate usage, and debugging.
- Complying with law, responding to lawful requests, and enforcing our Terms.
- With your consent where consent is required (for example, certain marketing messages or non-essential cookies where mandated).
5. Legal bases (EEA, UK, Switzerland)
Where GDPR or UK GDPR applies, we rely on: contract (providing Services you request); legitimate interests (security, analytics, product improvement) balanced against your rights; legal obligation; and consent where required for marketing or non-essential cookies.
6. Payments and PCI DSS
Card payments are handled by PCI DSS–validated providers (for example, Stripe, PayPal, or others enabled in WooCommerce). We do not store full payment card numbers on our WordPress server. Processors’ use of data is governed by their terms and privacy notices presented at checkout.
7. Sharing of information
We do not sell personal information for money. We share data with:
- Service providers under contracts: hosting, email, analytics, scheduling, customer support tools, and security.
- Payment processors to complete transactions.
- Professional advisers (lawyers, accountants) under confidentiality.
- Authorities when required by law or to protect rights, safety, and integrity of clients and the public.
- Business transfers in a merger, acquisition, or asset sale, subject to appropriate safeguards.
8. International transfers
We are based in the United States. If you access the Site from other countries, your information may be processed in the U.S. and other jurisdictions. Where required, we use appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms for transfers from the EEA, UK, or Switzerland.
9. Retention
We retain personal information only as long as needed for the purposes above, including satisfying legal, tax, and accounting requirements. Billing records are typically retained at least seven (7) years. Coaching notes may be retained for continuity of service and professional standards unless you request deletion where compatible with law.
10. Security
We implement administrative, technical, and organizational measures appropriate to the risk (access controls, TLS where applicable, vendor diligence). No method of transmission over the Internet is completely secure.
11. Your privacy rights
Depending on your location, you may have rights to access, correct, delete, port, or restrict processing of your personal information, and to object to certain processing or withdraw consent. To exercise rights, email engagebiosupplements@gmail.com. We may verify identity before fulfilling sensitive requests.
California residents (CCPA / CPRA)
California residents may request to know categories and specific pieces of personal information collected, delete personal information subject to exceptions, correct inaccuracies, and opt out of “selling” or “sharing” for cross-context behavioral advertising. We do not sell personal information as defined by the CCPA. You may designate an authorized agent with written permission. We will not discriminate against you for exercising rights. Financial incentives, if any, will include material terms.
Other U.S. states
Residents of Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws may have similar rights subject to exceptions. Submit requests to the email above.
EEA / UK / Switzerland
You may lodge a complaint with your local supervisory authority. Contact us first so we can resolve concerns promptly.
12. Children
Services are directed to adults. We do not knowingly collect personal information from children under thirteen (13) without verifiable parental consent as required by law (including COPPA where applicable).
13. Automated decision-making
We do not use automated decision-making or profiling that produces legal or similarly significant effects without human review.
14. Changes to this Policy
We may update this Policy from time to time. Material changes will be posted here with a new “Last updated” date and, where appropriate, additional notice.