Gym Membership Privacy Policy
PRIVACY POLICY
Last Updated: September 8, 2026
Nerdstrong Fitness, LLC ("we," "us," or "our") operates a specialized group fitness facility in Portland, Oregon. This Privacy Policy describes how we collect, utilize, disclose, and protect your personal information when you visit our studio, access our website, or utilize our integrated third-party scheduling and booking mobile platforms.
CATEGORIES OF INFORMATION WE COLLECT
We collect personal information that you directly and voluntarily provide to us when you establish a membership account, book class blocks, sign operational waivers, or engage in direct communications with our team. This data includes:
(a) Identifiers: First and last name, email address, physical mailing address, primary telephone number, and date of birth.
(b) Credentials and Account Details: Usernames, account passwords, and secure unique profile identifiers utilized to access online class scheduling features.
(c) Financial Information: Payment card numbers, expiration dates, card security codes, and billing addresses. Please note that our gym does not store raw credit card numbers locally; all payment transactions are handled through secure, encrypted third-party point-of-sale (POS) systems.
(d) Health, Wellness, and Exercise Data: Physical fitness assessments, goals, physical limitations, or vital signs and health conditions disclosed voluntarily in your liability waiver to ensure safer coaching adjustments during high-intensity intervals.
(e) Technical and Network Activity: IP addresses, browser types, device information, and online navigation logs captured automatically via cookies when you use our digital reservation portals. [1, 2, 3, 4, 5]HOW WE USE YOUR COLLECTED DATA
We process your personal information strictly for legitimate business operations and safety management, including:
(a) Provision of Services: Setting up, verifying, and administrating your gym membership profile and attendance records.
(b) Billing and Scheduling: Managing your digital class reservations, tracking completed HIIT blocks, and processing payment transactions.
(c) Studio Safety: Communicating with your designated emergency contacts and tailoring coaching cues to respect stated physical or medical conditions.
(d) Communications: Dispatching urgent facility closure announcements, class waitlist alerts, or requested promotional updates. [1, 2, 6]DISCLOSURE AND LIMITATIONS ON DATA SHARING
We do not sell, rent, or trade your personal information to third-party data brokers or marketing firms. Data is disclosed only to select entities under the following clear constraints:
(a) Integrated Data Processors: We share data with our core gym management software provider, billing software, and communication tools solely to perform internal operational services on our behalf.
(b) Geolocation Tracking Protection: In compliance with modern Oregon consumer data restrictions, we do not track or sell your precise geolocation data (defined as tracking physical positioning data down to a radius of 1,750 feet or less).
(c) Legal Compliance: We may disclose personal information if required by local, state, or federal law, or when necessary to protect the immediate safety and rights of our staff, members, or the local Portland community. [3, 6, 7, 8]DATA SECURITY AND PROTECTION PROTOCOLS
We maintain comprehensive security infrastructure designed to safeguard member information against unauthorized loss, alteration, or disclosure:
(a) Electronic Encryption: All electronic datasets containing personally identifiable data or health-related notes are encrypted using industry-approved methods during digital transmission and storage.
(b) Physical Document Management: Hard-copy documents, including physical or signed paper intake forms, are filed in locked storage spaces with access restricted solely to authorized management personnel. [9]YOUR RIGHTS AND DATA ACCOUNTABILITY
We prioritize transparency and grant our members full control over their records. You may exercise the following rights directly by contacting studio management:
(a) Right to Access and Copy: You may request a complete copy of the personal information we maintain regarding your account profile.
(b) Right to Correct: You have the right to modify, adjust, or correct any outdated or inaccurate personal details or billing details.
(c) Right to Request Deletion: You may request that we erase your personal data files, subject to the complete resolution of outstanding membership balances or mandatory record-retention requirements under Oregon commercial and business law. [10, 11]YOUTH PRIVACY AND MINOR PROTECTIONS
Our group fitness programming is structured exclusively for adults and teenagers under supervised guidance. In alignment with updated 2026 Oregon data privacy guidelines:
(a) Children Under 13: We do not knowingly collect or process personal data from children under 13 years of age without express, verified parental or legal guardian consent.
(b) Teen Data Restrictions: We strictly prohibit the profiling, targeted advertising, or data monetization of any member or participant known to be under 16 years of age. [12, 13]CONTACT INFORMATION AND POLICY AMENDMENTS
We may revise this Privacy Policy periodically to reflect shifts in technology, operational software updates, or legislative changes. Any revisions will feature an updated "Last Updated" date at the top of this document.
For inquiries regarding these data protection protocols, please contact:
Nerdstrong Fitness, LLC
[1] https://www.accountablehq.com
[6] https://www.accountablehq.com
[8] https://www.doj.state.or.us
[9] https://climbingbusinessjournal.com
[11] https://www.doj.state.or.us
[12] https://www.doj.state.or.us
[13] https://olis.oregonlegislature.gov

