Privacy Policy

Information you give us directly

Account and contact information. When you sign up for our newsletter, purchase a product, or join our membership community, we collect your name and email address. Phone number is optional and collected only if you provide it. We use this to deliver the services you signed up for, communicate with you about your membership, and send you content you've opted into.

Payment information. We do not store your credit card number, bank account details, or other payment credentials on our servers. All payment processing is handled by Stripe (via our membership platform, Circle). Stripe is a PCI-DSS Level 1 certified payment processor. Their privacy policy is available at stripe.com/privacy.

Diagnostic and lead-magnet responses. If you complete the Resilience Diagnostic or similar assessments on our website, we collect your responses and the resulting score. These are used to provide you with personalized results and, with your consent, to follow up via email.

Membership intake and self-reported wellness information. If you join our coaching community, we ask you to complete intake questionnaires covering three areas: Body (physical health and fitness habits), Business (professional goals and challenges), and Being (life satisfaction, values, and emotional well-being). This information is entirely self-reported; we ask about your own perceptions and goals, not clinical measurements.

Specifically regarding health-related information:

• We are coaches, not clinicians. We do not order lab work, interpret lab results, diagnose conditions, or prescribe treatments. We encourage you to work with your physician for all medical decisions.
• Body-composition data (such as weight or body-fat percentage) is voluntary and used solely to track your self-reported progress over time.
• Bloodwork files. If you choose to share bloodwork results, we store only the file itself and the date it was drawn. We do not extract, store, or interpret individual lab values. Your physician interprets your results; we use the general patterns to inform coaching conversations.
• Wellness self-checks (such as well-being scores or self-reported energy and engagement levels) are self-reported instruments; they are not clinical screens and are not used for diagnosis.

Conversation data from AI coaching tools. Our platform includes AI-powered tools (such as the Intake agent and Ask Bill agent) that interact with you in conversation. These tools are self-hosted by us; they do not run on the membership platform's AI infrastructure. Conversation inputs are processed to generate responses and may be retained to improve the quality of coaching. We do not sell, share, or use your AI conversation data for advertising, third-party model training, or any purpose unrelated to delivering your coaching experience.

Information collected automatically

Website analytics. We use Google Analytics 4 to understand how visitors use our website (pages visited, time on site, referral source). Google Analytics collects anonymized usage data, including cookies and device identifiers, and processes it on Google's servers. Google may transfer this data to servers outside your country of residence. Google's use of this data is governed by their privacy policy at policies.google.com/privacy. You can opt out of Google Analytics by installing Google's browser add-on at tools.google.com/dlpage/gaoptout.

Cookies. Our marketing site uses essential cookies required for the site to function, plus Google Analytics cookies for anonymized usage measurement. Our membership platform (Circle) sets its own cookies for authentication and session management. We do not use advertising cookies or sell cookie data to third parties. You can control or disable cookies through your browser settings or by using Google's opt-out add-on linked above.

Server logs. Our hosting provider (Render) may collect standard server logs (IP address, browser type, access times). These are used for security monitoring and are not shared with third parties .

We use a small number of trusted third-party services to operate the platform. Each acts as a data processor on our behalf; they process your data only as needed to provide their service to us, not for their own purposes.

We do not sell your personal information to any third party. We do not share your information with third parties for their own marketing purposes.

We take the security of your information seriously, especially the self-reported health and wellness data you trust us with.

• All data is transmitted over encrypted connections (HTTPS/TLS).
• Payment data is handled by Stripe's PCI-DSS Level 1 certified infrastructure and never touches our servers.
• Access to member data is restricted to authorized personnel (currently, Bill Douglas and designated administrative support only).
• Our AI agents are self-hosted and do not route your data through third-party AI platforms for processing.
• We do not store passwords; authentication is handled by Circle's secure login system.

No system is perfectly secure. If we become aware of a data breach affecting your personal information, we will notify you promptly as required by applicable law.

• Active members: We retain your information for as long as your membership or account is active.
• After cancellation: We retain your contact information and enrollment history for up to 24 months after cancellation for operational purposes (e.g., if you return, your history is intact). Self-reported wellness data is deleted or anonymized within 90 days of a deletion request.
• Newsletter subscribers: We retain your email until you unsubscribe.
• Payment records: Retained as required by tax and financial regulations (typically 7 years), held by Stripe.
• You can request deletion at any time (see "Your rights" below).

Depending on where you live, you may have specific legal rights regarding your personal data. We honor these rights regardless of your location; you do not need to prove residency.

All users may:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your personal information (subject to legal retention requirements for payment records).
• Export your data in a portable format.
• Opt out of marketing emails at any time (every email includes an unsubscribe link).
• Withdraw consent for any optional data processing.

Colorado residents (Colorado Privacy Act): You have the right to access, correct, delete, and obtain a copy of your personal data. You may opt out of the processing of personal data for targeted advertising (we do not do targeted advertising), the sale of personal data (we do not sell personal data), or profiling that produces legal or similarly significant effects (we do not engage in such profiling). To exercise these rights or to appeal a decision regarding your request, contact us at the email above.

California residents (CCPA/CPRA): You have the right to know what personal information we collect, to request its deletion, to opt out of the sale of personal information (we do not sell it), and to not be discriminated against for exercising your rights. We do not use or disclose sensitive personal information for purposes beyond what is needed to provide the services you requested.

EU/UK residents (GDPR): If you access our services from the European Economic Area or the United Kingdom, our lawful basis for processing your data is (a) your consent (for newsletter signups and optional self-reports), (b) performance of a contract (for paid memberships and services), and (c) our legitimate interests (for website analytics and security). You have the right to access, rectify, erase, restrict processing, object to processing, and data portability. You may lodge a complaint with your local supervisory authority.

To exercise any right: Email privacy@resilienceguy.com. We will respond within 30 days (45 days for complex requests, with notice). We will verify your identity before processing any request. We will never charge a fee for a good-faith rights request.

Our services are designed for adults. We do not knowingly collect personal information from anyone under the age of 18. If we learn that we have collected information from a minor, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us.

If we make material changes to this policy, we will notify you by email (if you are a member or subscriber) and update the "Last updated" date above. We encourage you to review this policy periodically.

Emprise IPA, LLC

8221 Upham Court, Arvada, Colorado 80003

privacy@resilienceguy.com