PRIVACY POLICY

The CBFIT LLC

Last updated: October 29, 2026

This Privacy Policy explains how The CBFIT LLC, doing business as “CBFIT” (“Company,” “we,” “us,” or “our”), collects, uses, shares, and protects information when you visit cruzbrooks.com and related pages, apply for or purchase our programs, or otherwise interact with us (collectively, the “Services”). By using the Services, you agree to this Policy. For privacy requests, contact support@cbfitcoach.com.

1. Information We Collect

Identifying and contact information: legal name, email address, phone number, date of birth, age, mailing or billing address, and the IP address captured at opt-in.

Application and intake data: occupation, fitness goals, health challenges, training history, lifestyle baseline, and program-suitability responses.

Health-related information you provide to us: self-reported health history, current medications, medical conditions, and self-reported body-composition data.

Financial and payment information: billing address, card brand and last four digits, payment-method type, and transaction history. Full card numbers, security codes, and bank-account details are never stored by us; they are tokenized and held by our payment providers.

Coaching and progress data: check-in responses, weights, measurements, progress photos, food logs, and training logs.

Marketing and device data: UTM parameters, ad source, click history, page views, opt-in events, video-watch behavior, form submissions, cookies, and similar identifiers.

Testimonial release data: voice, photo, video, likeness, and transformation story, captured under the testimonial release in your program agreement.

2. How We Use Information

We use information to deliver and administer the Services; process payments; communicate with you; provide coaching; personalize, measure, and improve our Services and marketing; enforce our agreements and defend disputes; and comply with legal obligations. We do not use artificial-intelligence tools to make medical or individualized coaching decisions about you; such tools are used internally for content drafting, data analysis, and operational support only.

3. Service Providers and Sub-Processors

We share information with the following categories of service providers and sub-processors, each of which processes data on our behalf under its own data-processing terms:

• Payments: Stripe (card, Apple Pay, and Google Pay processing).

• Scheduling and intake: Typeform (application and qualification forms) and our calendar scheduling provider (booking).

• Video hosting: Vidalytics (video hosting and watch-behavior analytics).

• CRM, automation, and communications: our email and SMS messaging providers.

• Attribution and analytics: Meta Pixel and related advertising-platform tags.

4. Advertising, Analytics, and Cookies

We use cookies and similar technologies for analytics, advertising, and site functionality. We run prospecting and remarketing campaigns through Meta Ads (Facebook and Instagram) and install tracking pixels and tags including the Meta Pixel. We may share hashed email addresses, hashed phone numbers, and event data (page views, opt-ins, purchases) with these advertising platforms for measurement and audience building, consistent with each platform's terms. You can control cookies through your browser settings and opt out of certain advertising as described in Section 7.

5. Call and Session Recording

Strategy calls, sales calls, and coaching sessions may be recorded with consent for quality assurance, training, and dispute defense. Recordings are retained and may be referenced as evidence in any billing dispute or chargeback.

6. How We Share Information

We do not sell your personal information for money. We share information with the service providers listed above, with professional advisors, and as required to comply with law, enforce our agreements, or protect our rights. Sharing certain identifiers with advertising platforms for cross-context behavioral advertising may be considered a “sale” or “sharing” under some state laws; you may opt out as described below.

7. Your Privacy Rights

Depending on your state of residence (including California, Colorado, Virginia, and Texas), you may have the right to access, correct, or delete your personal information; to obtain a copy of it; to opt out of targeted advertising and of any “sale” or “sharing” of your personal information; and to not be discriminated against for exercising these rights. To exercise these rights, email support@cbfitcoach.com. We will verify your request and respond within the time required by applicable law. You may also opt out of marketing emails using the unsubscribe link and of certain advertising through each platform's controls and the browser-level Global Privacy Control where supported.

8. Data Retention and Security

We retain personal information for as long as needed to provide the Services, comply with legal and tax obligations, resolve disputes, and enforce our agreements; enrollment and dispute-defense records (including signed agreements, payment authorizations, access logs, and call recordings) are retained for the period necessary for those purposes. We maintain reasonable administrative, technical, and physical safeguards, but no method of transmission or storage is completely secure.

9. Children

The Services are intended for adults and are not directed to anyone under 18. We do not knowingly collect personal information from children under 13.

10. Changes to This Policy

We may update this Policy by posting a revised version with a new “Last updated” date. Material changes will be communicated as required by law.

11. Contact

The CBFIT LLC, support@cbfitcoach.com.