What we collect
Club Concordia Fitness keeps the smallest amount of information that lets the site work. There are three sources.
1. Things you type into a form
When you join the Club, ask a question or sign in, we receive what you enter — typically your name, email address, your training goal and where you train, plus anything you write in a message field. We also record the time the form was submitted, so we can answer you in order.
2. Analytics
We use a self-hosted, cookieless analytics tool. It records aggregate page views, referring sites, approximate country, browser and screen size. It does not set cookies, does not follow you across other websites and does not build an advertising profile of you. Because it is cookieless, this site does not need a cookie-consent banner.
3. Server logs
Our web server keeps standard access logs — IP address, timestamp, requested page, browser string — for security, abuse prevention and debugging. These rotate automatically and are not used to profile visitors.
What we deliberately do not collect
- We do not collect health records, medical history, diagnoses or clinical measurements.
- We do not ask for, store or process payment card numbers. Payments, when you make one, run through Stripe — your card details go to Stripe, never to us.
- We do not buy, sell, rent or trade personal information. Ever, for any price.
How we use it
We use what we collect to reply to you, deliver what you bought, run your Club account, send the emails you asked for, keep the site secure, and understand in aggregate which pages are useful.
We do not use your information to train advertising models, and we do not send marketing email to people who did not ask for it. Every email we send that is not a direct reply or an order confirmation has an unsubscribe link that works on the first click.
Training data inside the Club
If you use the Blue Green Game, the Club stores what you log — sessions completed, hard sets, movement, streaks and catch-ups — so it can show you your own progress.
This is fitness data, not medical data, and we treat it as private to you. It is never sold, never shared with advertisers, and never published with your name attached. Aggregate, fully anonymised statistics (for example, "members average 2.1 sessions per week") may be used to describe the model — never in a form that identifies an individual.
You can export or delete everything the Club holds about you at any time by asking. See Your rights.
Who else touches your data
We keep this list short on purpose, and it is complete.
- Hosting — our web server and database, operated by Mentes Inc on infrastructure in the United States.
- Email delivery — a transactional email provider that sends sign-in links, order confirmations and replies.
- Payments — Stripe, if and when you purchase. Stripe holds the payment details; we see only that a payment succeeded, the amount, and what it was for.
- Fonts — typefaces load from Google Fonts, which means Google's font servers see the IP address making the request. No cookie is set by this.
We may also disclose information where we are legally required to, or where it is necessary to protect the rights or safety of a person.
How long we keep it
- Form enquiries — kept while the conversation is useful, then deleted. Typically no longer than 24 months.
- Club accounts and training logs — kept while your account is active, and deleted within 30 days of you closing it or asking us to.
- Purchase records — kept as long as tax and accounting law requires, usually seven years.
- Server logs — rotated automatically, typically within 30 days.
- Analytics — aggregate only; there is nothing individual to delete.
Your rights
Wherever you live, you may ask us to show you what we hold about you, correct it, delete it, send you a copy in a portable format, or stop using it for a particular purpose. We do not charge for this and we do not require an account to ask.
If you are in the European Economic Area or the United Kingdom, these rights come from the GDPR; our lawful bases are your consent (for marketing email), the performance of a contract (for purchases and Club membership) and our legitimate interests (for security and aggregate analytics). If you are in California, the CCPA/CPRA gives you the right to know, delete, correct and opt out of sale — and as stated above, we do not sell personal information, so there is nothing to opt out of.
To exercise any of this, email info@mentesinc.com with the subject line Privacy request. We reply within 5 business days and complete valid requests within 30 days.
Children
This site is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, contact us and we will delete it.
Changes to this policy
If this policy changes materially, we update the date at the top and, for anyone with a Club account, tell you by email before the change takes effect. We do not make quiet retroactive changes.
Questions about any of this go to info@mentesinc.com.