This Privacy Policy describes how RMS Fitness ("we", "us", "our") collects, uses, discloses, and protects information when you visit our website (the "Site") or contact us.

1) Types of Data We Collect

Depending on how you interact with the Site, we may collect the following categories of information:

• Information you provide via forms: name, email address, phone number, occupation, inquiry reason, and any message content you submit.
• Contact communications: if you email or call us, we may receive the information you choose to share (and metadata such as time/date).
• Device and usage data: IP address, approximate location (derived from IP), browser type, device identifiers, pages viewed, referrer URLs, and timestamps.
• Cookies and similar technologies: small files stored on your device used for essential functionality and, if enabled, analytics/advertising.
• Third-party interactions: when embedded tools load (e.g., chat widgets or sign-up forms), those providers may collect information directly (see "Third-Party Processors" below).

2) How We Use Your Data

We may use information for purposes such as:

• Providing requested quotes and responding to inquiries
• Operating, maintaining, and securing the Site
• Improving the Site and user experience
• Preventing fraud, abuse, and security incidents
• Complying with legal obligations and enforcing our terms

3) Legal Bases for Processing (GDPR/EEA/UK)

If you are located in the EEA/UK (or where similar laws apply), we process personal data only when we have a valid legal basis. Depending on the context, this may include:

• Consent (e.g., where required for non-essential cookies or marketing communications)
• Contract (e.g., taking steps at your request prior to entering a service relationship)
• Legitimate interests (e.g., operating and securing the Site, preventing fraud, improving services)
• Legal obligation (e.g., recordkeeping or responding to lawful requests)

Note: the specific legal bases and disclosures must be confirmed by counsel based on RMS Fitness's actual data flows.

4) CCPA/CPRA Notice (California Residents)

If you are a California resident, you may have rights regarding your personal information under the California Consumer Privacy Act as amended by the CPRA ("CCPA/CPRA"). Subject to applicable exceptions, these may include:

• Right to know/access the categories and specific pieces of personal information collected
• Right to delete personal information
• Right to correct inaccurate personal information
• Right to opt-out of the sale/sharing of personal information (if applicable)
• Right to limit use/disclosure of sensitive personal information (if applicable)
• Right to non-discrimination for exercising your rights

Sale/Sharing: RMS Fitness does not intend to sell personal information. If RMS Fitness uses cross-context behavioral advertising or similar technologies, this section and opt-out mechanism must be updated before launch.

5) Cookies, Trackers, and Consent

The Site may use cookies and similar technologies. Cookies can be:

• Essential: required for basic site functionality and security
• Analytics: help understand site usage and improve performance (only if enabled)
• Marketing/Advertising: used to measure campaigns or personalize ads (only if enabled)

Consent mechanism: if RMS Fitness deploys non-essential cookies (analytics/marketing), a compliant cookie consent mechanism (banner/preferences) may be required in certain jurisdictions. If such cookies are added, this policy must be updated to identify the cookies/partners used and to describe how users can change preferences.

6) Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described above, including to comply with legal obligations, resolve disputes, and enforce agreements. Typical retention periods may include:

• Inquiry/quote submissions: up to 24 months, unless a longer period is required for business or legal needs
• Support communications: up to 24 months
• Security logs: typically 30–180 days, unless investigation requires longer retention

These timeframes are placeholders and must be finalized based on RMS Fitness's recordkeeping requirements and vendor configurations.

7) Third-Party Processors and Services

We use third-party vendors to help operate the Site and provide services. Depending on configuration, these vendors may process personal information on our behalf.

• Web3Forms (form submissions): used to process contact/quote form submissions. Policy: https://web3forms.com/privacy
• Constant Contact (newsletter/sign-up widget): used for email sign-up forms. Policy: https://www.constantcontact.com/legal/privacy-notice
• LiveChat (chat widget): used to provide live chat support. Policy: https://www.livechat.com/legal/privacy-policy/
• Hosting/CDN: the Site may be hosted with a provider that processes IP addresses and request logs for delivery and security. (Provider and policy link must be confirmed before launch.)

8) Sharing and Disclosure

We may share personal information with service providers that help us operate the Site and deliver services. We may also disclose information if required to comply with law, to protect our rights, or to investigate fraud or security issues.

9) Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. Examples may include access controls, encryption in transit (HTTPS), least-privilege access to systems, and monitoring. No method of transmission or storage is 100% secure.

10) Your Privacy Rights

Depending on your location, you may have rights to:

• Access your personal information
• Correct/rectify inaccurate personal information
• Delete your personal information
• Object to or restrict certain processing
• Portability (receive a copy in a commonly used format, where applicable)
• Withdraw consent where processing is based on consent

To exercise rights, contact us using the details below. We may need to verify your identity before responding.

11) Children’s Privacy

The Site is not intended for children under 13 (or under 16 in certain jurisdictions), and we do not knowingly collect personal information from children. If you believe a child has provided personal information, please contact us.

12) International Data Transfers

If you access the Site from outside the United States, your information may be processed in the United States or other jurisdictions where our service providers operate. Where required, RMS Fitness will implement appropriate safeguards for cross-border transfers (e.g., contractual protections). The specific transfer mechanism must be confirmed based on vendors used.

13) Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page with an updated effective date.

14) Contact Us

If you have questions or want to exercise privacy rights, contact us at: