Privacy Policy

Effective October 14, 2026 · Boulder Brick Squad Club LLC

Boulder Brick Squad Club LLC ("we") respects your privacy. This policy explains what we collect, why, how we protect it, and your rights — including rights for California residents under the CCPA as amended by the CPRA. We do not sell or share personal information for behavioral advertising, and we do not target anyone under 18.

1. Information we collect

When you inquire or book, we collect your name, phone number, email, and message content. Depending on the service we may also collect:

Training load data, heart-rate zones, injuries, and physician restrictions are sensitive personal information under the CCPA/CPRA. Collected only with consent, encrypted at rest, visible only to your coach, and deleted 12 months after membership ends. We are not medical providers; cardiac screening questions follow current endurance-sport guidance, and we refer to physicians whenever indicated. Consult your physician before beginning an endurance-training program.

Cookies for anonymous analytics and maps are described in the Cookie Policy.

2. How we use information

• Responding to inquiries and providing the service you booked
• Service communications: confirmations, schedules, race-day logistics
• Improving the site using aggregate, de-identified statistics
• Legal, tax, and insurance obligations

3. Sensitive and health-related information

Health, injury, and cardiac-screening data are treated as sensitive personal information: collected only with explicit consent, encrypted in storage, restricted to your coach, and deleted on the schedule stated in Section 1. California residents may limit use of sensitive personal information to the purposes stated above — we already do so by default.

4. Sharing

We share personal information only with service providers necessary to run our business (payment processing, website hosting), each bound by contract. We disclose information when required by law. No other recipients; no behavioral advertising.

5. Storage and security

Paper in locked cabinets; electronic records on encrypted, password-protected U.S. systems; TLS on this site. Access limited to the owner and your coach. Breach notifications are sent without undue delay as required by law.

6. Retention

Contact and booking records: 3 years after service completion. Inquiry correspondence: 12 months. Sensitive planning details follow the shorter schedules in Section 1.

7. Your rights

You may request access, correction, deletion, or a portable copy of your information. To exercise any right, contact Section 9 — no forms, no fees. We respond within 30 days.

8. Updates

Changes are posted with a new effective date; material changes are announced on this page for 30 days.

9. Contact