Privacy Policy

Effective Date: April 25, 2026  |  Last Updated: April 25, 2026

It’s Social Gi (“we,” “us,” “our”), operated by GMC Health & Fitness LLC, respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what we collect, why we collect it, how we use and share it, and the rights and choices available to you. It applies to itssocialgi.com, our Kajabi-hosted courses, community, checkout flows, email communications, advertisements, and any service that links to this Policy (collectively, the “Services”).

By using the Services you acknowledge that you have read this Policy. If you do not agree with it, please do not use the Services.

1.

Information We Collect

1.1 Information You Provide Directly

• Account information: name, email address, password (hashed), profile photo if uploaded.
• Billing information: Payments are processed by Stripe via Kajabi. We do not store complete card numbers; we receive a token and minimal metadata (last four digits, expiration, cardholder name) to administer purchases and refunds.
• Course and community data: course progress, lesson completion, comments, posts, replies, support requests.
• Communications: emails you send to [email protected], replies to our broadcast emails, survey or quiz responses, testimonial submissions.
• Marketing signals: opt-ins to our newsletter, lead-magnet downloads, webinar registrations.

1.2 Information Collected Automatically

• IP address, approximate location (city/region) derived from IP.
• Device and browser data (type, version, operating system, screen size).
• Usage data: pages viewed, time on page, links clicked, referring URL, navigation paths.
• Cookies and similar technologies (see Section 6).

1.3 Information from Third Parties

• Stripe and Kajabi (payment confirmations, dispute notices).
• Meta and Google (advertising attribution and conversion metrics, where you authorized them to share).
• Analytics providers (aggregated usage signals).

We do not knowingly collect “sensitive personal information” (Social Security numbers, government IDs, biometric data, precise geolocation, account passwords for other services, health data, religious beliefs, or sexual orientation). If such data is volunteered, we delete it promptly.

2.

Legal Basis for Processing (GDPR / UK GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, our processing relies on at least one of the following bases under Article 6 of the GDPR:

• Performance of a contract — to provide courses, products, and account services you have purchased.
• Legitimate interests — to improve our Services, secure our infrastructure, prevent fraud, measure marketing effectiveness, and operate our business.
• Consent — for optional marketing communications, non-essential cookies, and analytics that require explicit opt-in in your jurisdiction.
• Legal obligation — to comply with tax, accounting, anti-fraud, and other laws.

You may withdraw consent at any time without affecting prior lawful processing.

3.

How We Use Your Information

• Deliver, maintain, and improve the Services.
• Process purchases, refunds, payment plan installments, and chargebacks.
• Send transactional communications (receipts, course access, password resets, refund confirmations).
• Send marketing communications you have opted into, including educational sequences, launch emails, and offers. You may unsubscribe from marketing at any time.
• Personalize the experience: recommend modules, segment audiences, surface relevant offers based on tier.
• Detect, investigate, and prevent fraud, abuse, harassment, and policy violations.
• Comply with legal, tax, regulatory, and accounting obligations.
• Aggregate and de-identify data for analytics, public statistics, and case studies (no individual is identifiable in this output).

4.

How We Share Your Information

We do not sell your personal information for monetary or other valuable consideration. We share information only as described below.

4.1 Service Providers (Data Processors)

• Kajabi — learning management, hosting, checkout, email broadcasting, community.
• Stripe — payment processing.
• Email service providers — transactional and marketing email delivery.
• Analytics providers — Google Analytics, Meta Pixel, GTM, and similar tools that help us understand product performance.
• Customer support tools — email and helpdesk software used to respond to your requests.
• Advertising platforms — Meta Ads, TikTok Ads, Google Ads (limited to conversion measurement and audience matching, never raw email lists for resale).

Each processor is bound by contract to use your information solely for the purposes we authorize and to protect it consistent with applicable law.

4.2 Legal and Safety Disclosures

We may disclose information when we believe in good faith it is necessary to: (a) comply with a subpoena, court order, or other legal process; (b) protect the rights, property, or safety of It’s Social Gi, our customers, or the public; (c) detect, investigate, or prevent fraud, security, or technical issues; or (d) enforce our Terms of Service.

4.3 Business Transfers

If we are involved in a merger, acquisition, financing, restructuring, or sale of assets, your information may be transferred as part of that transaction. We will notify you and update this Policy if material terms change.

4.4 With Your Direction

If you publicly post content (community posts, comments, testimonials, video reviews), that content is visible to other users and we are not responsible for further dissemination.

4.A

A. Course Progress and Refund Eligibility

For paid courses (UGC Creator Starter Course and Pro Creator Accelerator), we track your lesson progress, assignment submissions, community participation, and brand-application proof submitted as part of refund-eligibility verification. The legal basis for this processing is performance of contract (GDPR Article 6(1)(b)) — you must complete defined criteria for a conditional refund per our Refund Policy. You can view your own completion status at any time on your Kajabi dashboard. We retain this completion data for as long as your account is active plus seven (7) years for tax and dispute records.

5.

Cookies and Tracking Technologies

We use cookies, pixels, local storage, and similar technologies for the following purposes:

• Strictly necessary — login sessions, checkout, security. These cannot be disabled.
• Functional — remember preferences, language, course progress.
• Analytics — aggregate usage, page performance (Google Analytics, internal tools).
• Marketing — conversion measurement, audience matching, retargeting (Meta Pixel, GTM, TikTok Pixel where deployed).

You can manage cookies through your browser settings, our cookie banner where available, or by visiting opt-out resources such as the Network Advertising Initiative and the Digital Advertising Alliance. Disabling certain cookies may impact site functionality, including the ability to remain logged in or complete a checkout.

6.

International Data Transfers

We are based in the United States and our service providers (including Kajabi and Stripe) may store and process information in the U.S. or other jurisdictions. When we transfer personal information from the EEA, the United Kingdom, or Switzerland to the U.S., we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, the UK International Data Transfer Addendum, and the Data Privacy Framework where our processors are certified.

7.

Data Retention

• Active account information — retained while your account is active.
• Closed accounts — deleted or anonymized within 90 days of request, except records we are legally required to retain.
• Tax, accounting, and dispute records — retained for at least seven (7) years to comply with U.S. and state tax law.
• Marketing list — retained until you unsubscribe; suppression list retained indefinitely to honor opt-outs.
• Backups — standard provider rotation, typically thirty (30) to ninety (90) days.

8.

Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including TLS encryption in transit, encryption at rest provided by Kajabi and Stripe, role-based access controls, and periodic review of administrative access. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your information, we will notify you and the appropriate regulators consistent with applicable law.

9.

Your Rights Under the GDPR / UK GDPR

If you are in the EEA, the United Kingdom, or Switzerland, you have the following rights, subject to limited legal exceptions:

• Right of access — obtain a copy of personal information we hold about you.
• Right to rectification — correct inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”) — request deletion in certain circumstances.
• Right to restrict processing — pause processing while a dispute is resolved.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests or direct marketing.
• Right to withdraw consent — for any processing based on consent.
• Right to lodge a complaint — with your local supervisory authority.

10.

Your Rights Under the CCPA / CPRA (California Residents)

California residents have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

• Right to know what categories and specific pieces of personal information we collect, use, disclose, and the sources, purposes, and recipients.
• Right to know what personal information is sold or shared (we do not sell or share personal information for cross-context behavioral advertising in the meaning of the CCPA).
• Right to delete personal information we have collected, subject to legal exceptions.
• Right to correct inaccurate personal information.
• Right to limit use and disclosure of sensitive personal information.
• Right to non-discrimination for exercising these rights.

To exercise these rights, email [email protected] with the subject line “Privacy Request — California.” We may need to verify your identity by confirming information already on file. Authorized agents may submit requests on your behalf with a signed permission and proof of identity.

11.

Other U.S. State Privacy Rights

Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Oregon (OCPA), Texas (TDPSA), Tennessee (TIPA), Indiana (INCDPA), Iowa (ICDPA), Delaware (DPDPA), Montana (MCDPA), Nebraska (NDPA), New Hampshire (NHDPA), New Jersey (NJDPA), Minnesota (MCDPA), Maryland (MODPA), Rhode Island, Kentucky, Washington (My Health My Data Act), and other states with applicable privacy laws have similar rights including the right to access, delete, correct, and opt out of targeted advertising or sale where applicable. Contact us at [email protected] to exercise these rights.

12.

Children’s Privacy

Our Services are intended for users 18 years of age and older. We do not knowingly collect personal information from children under 13 in compliance with the Children’s Online Privacy Protection Act (COPPA). If you believe a child under 13 has provided personal information, contact us immediately and we will promptly delete it.

13.

Do Not Track

Some browsers transmit “Do Not Track” signals. There is no industry-wide standard for how to respond, and we do not currently respond to these signals. You can manage tracking preferences through cookie controls described in Section 5.

14.

California Shine the Light

California Civil Code Section 1798.83 permits California residents to request a notice describing categories of personal information shared with third parties for those parties’ direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.

15.

Notice of Financial Incentive

From time to time we may offer benefits such as discounts, lead magnets, or extended trials in exchange for an email address or other personal information. The value of the information is reasonably related to the cost of the incentive (typically less than $50). You may withdraw from any incentive program at any time by unsubscribing or contacting us, and you will not be discriminated against for doing so.

16.

Third-Party Links

The Services may link to third-party websites, including affiliate offers, social media platforms, and partner products. We are not responsible for the privacy practices of those sites. We encourage you to read the privacy policies of any third party before providing information.

17.

Changes to This Privacy Policy

We may update this Policy to reflect changes to our practices or for legal, operational, or regulatory reasons. The “Last Updated” date at the top will reflect the most recent version. Material changes will be announced through the Services or by email where required by law. Continued use after the effective date of an update constitutes acceptance.

18.

How to Exercise Your Rights / Contact

To submit a privacy request, ask a question, or report a concern, email us at [email protected] with the subject line “Privacy Request.” We will respond within thirty (30) to forty-five (45) days depending on jurisdiction and may extend with notice if reasonably necessary. Please include enough information to identify your account and the right you wish to exercise.

It’s Social Gi is operated by GMC Health & Fitness LLC. By using the Services you acknowledge that you have read and understood this Privacy Policy.