Privacy Policy

Bad Ass By Choice ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your data when you visit badassbychoice.com (the "Site") or otherwise interact with us.

By using the Site, you agree to the practices described in this Policy. If you do not agree, please do not use the Site.

We collect information in three ways: information you give us, information we collect automatically, and information from third parties.

a. Information You Provide

• Contact details: name, email address, phone number, and shipping address when you create an account, place an order, or contact us.
• Account credentials: username and password if you register on the Site.
• Payment information: processed by our payment processors; we do not store full card numbers on our servers.
• Communications: messages you send through contact forms, email, or social media.
• Program participation: responses, progress, and content you submit when joining a challenge or program.

b. Information Collected Automatically

• Device and usage data: IP address, browser type, operating system, referring URLs, pages viewed, and time spent on the Site.
• Cookies and similar technologies: see Section 7 below.
• Location data: approximate location derived from your IP address.

c. Information From Third Parties

We may receive information from analytics providers, advertising partners, payment processors, and social media platforms when you interact with our content or sign in via a third-party service.

We use the information we collect to:

• Operate, maintain, and improve the Site and our services;
• Process and fulfill orders, including payments, shipping, and customer support;
• Communicate with you about your account, purchases, programs, and updates;
• Send marketing emails and promotional content (you can opt out at any time);
• Personalize your experience and recommend relevant content or products;
• Analyze usage patterns and measure the effectiveness of our content and campaigns;
• Detect, prevent, and respond to fraud, abuse, and security incidents;
• Comply with legal obligations and enforce our Terms & Conditions.

If you are located in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases: performance of a contract, your consent, our legitimate interests (such as improving our services and preventing fraud), and compliance with legal obligations.

We do not sell your personal information. We share information only with:

• Service providers that help us operate the Site (hosting, analytics, email, payments, shipping, customer support);
• Business partners when you knowingly engage with a co-branded offering;
• Legal and safety: to comply with the law, respond to lawful requests, protect our rights, or prevent harm;
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets.

We keep your personal information only as long as necessary to fulfill the purposes described in this Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we delete or anonymize it.

We use cookies, pixels, and similar technologies to keep you signed in, remember your preferences, analyze how the Site is used, and deliver relevant marketing. You can control cookies through your browser settings, but disabling some cookies may affect Site functionality.

Depending on where you live, you may have the right to:

• Access, correct, or delete the personal information we hold about you;
• Object to or restrict certain processing;
• Withdraw consent at any time;
• Request a portable copy of your data;
• Opt out of marketing communications;
• Lodge a complaint with your local data protection authority.

To exercise these rights, contact us using the details in Section 12.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation ("GDPR") and equivalent UK/Swiss laws give you the following rights with respect to your personal data:

• Right of access: obtain confirmation of whether we process your data and request a copy of it;
• Right to rectification: ask us to correct inaccurate or incomplete data;
• Right to erasure ("right to be forgotten"): request deletion of your data in certain circumstances;
• Right to restrict processing: ask us to limit how we use your data;
• Right to data portability: receive your data in a structured, commonly used, machine-readable format;
• Right to object: object to processing based on our legitimate interests or for direct marketing;
• Rights related to automated decision-making: we do not use your data for decisions made solely by automated means that produce legal or similarly significant effects on you;
• Right to withdraw consent: where we rely on consent, you may withdraw it at any time without affecting prior lawful processing;
• Right to lodge a complaint: with your local supervisory authority (in the UK, the Information Commissioner's Office).

We are the "data controller" of your personal data for purposes of the GDPR. When we transfer personal data outside the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable). To exercise any of these rights, contact us using the details in Section 14. We will respond within one month, as required by law.

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), gives you the following rights:

• Right to know: request the categories and specific pieces of personal information we have collected about you, the sources, the business or commercial purpose, and the categories of third parties with whom we shared it;
• Right to delete: request deletion of personal information we have collected from you, subject to certain exceptions;
• Right to correct: request correction of inaccurate personal information;
• Right to opt out of sale or sharing: we do not sell your personal information for money. To the extent any cookie-based advertising activity is considered "sharing" or a "sale" under California law, you may opt out by adjusting your cookie preferences or sending us a request;
• Right to limit use of sensitive personal information: we do not use or disclose sensitive personal information for purposes beyond those permitted by the CCPA without offering you the right to limit such use;
• Right to non-discrimination: we will not discriminate against you for exercising any of your CCPA rights.

Categories collected in the last 12 months: identifiers (e.g., name, email, IP address); customer records (e.g., shipping address, payment information processed by our processors); commercial information (e.g., purchases); internet or other electronic network activity (e.g., browsing data, interactions with the Site); geolocation data (approximate, from IP); and inferences drawn from the above.

Sources, purposes, and disclosures: see Sections 2, 3, and 5 above.

How to exercise your rights: submit a request by emailing privacy@badassbychoice.com with the subject line "California Privacy Request." We will verify your identity before responding and will not charge a fee unless your request is excessive. You may use an authorized agent to submit a request on your behalf with written permission and verification of identity.

"Shine the Light" (Cal. Civ. Code § 1798.83): California residents may request information about disclosures of personal information to third parties for their direct marketing purposes. We do not share personal information with third parties for their own direct marketing.

We use commercially reasonable administrative, technical, and physical safeguards to protect your information. No system is perfectly secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

The Site is not directed to children under 13 (or under 16 in the EEA/UK). We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us so we can delete it.

We may process and store information in countries other than the one where you reside. When we transfer personal data outside your country, we use appropriate safeguards as required by applicable law, including the European Commission's Standard Contractual Clauses for transfers from the EEA, the UK International Data Transfer Addendum, and equivalent mechanisms.

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" above and, when appropriate, notify you through the Site or by email. Your continued use of the Site after changes become effective constitutes acceptance of the updated Policy.

If you have questions about this Privacy Policy or how we handle your information, contact us at:

Bad Ass By Choice
Email: privacy@badassbychoice.com