Privacy Policy

1.Who We Are / Data Controller Identity

Talk2Sam is a registered trade name (DBA) operated by a sole proprietor based in the State of Arizona, USA. We are the data controller responsible for personal information collected through our website at www.talk2sam.live, the Talk2Sam exercise and nutrition application (the "App"), and all related programs and services — including the Unhinged Motivational Madness™ program.

Our registered business address is available upon request. To submit a data rights request or privacy-related inquiry, please use talk2sam.live/contact-us. We respond to all privacy requests within 30 days.

2.Information We Collect

Information You Provide Directly:

• Account & Registration Data: Name, email address, password, and profile information submitted when creating an account.
• Health & Fitness Data: Information you voluntarily enter into the App, including body weight, height, age, gender, caloric goals, macro targets, exercise logs, fasting records, and progress measurements. This data is used to calculate your BMR and TDEE and personalize your program experience.
• Coaching & Session Data: Information shared during 1-on-1 or group coaching sessions via Zoom, including fitness goals, health history, and progress updates you choose to disclose.
• Purchase & Payment Data: Billing name, address, and payment method details. Full card numbers, CVV codes, and bank account details are never stored by Talk2Sam — these are handled exclusively by Stripe, Inc. See Section 7.
• Contact & Support Data: Messages, support tickets, and feedback you submit through our contact page.
• Free Download Data: If you download the free Unhinged Motivational Madness™ e-guide, we may collect your name and email address to deliver the file and for follow-up communications (with your consent).

Information Collected Automatically:

• Usage Data: Pages visited, features used, time spent in the App, and interaction patterns.
• Device & Technical Data: IP address, browser type, operating system, device identifiers, and referring URLs.
• Tracking & Attribution Data: UTM parameters (utm_source, utm_medium, etc.), Google Click IDs (GCLID), and Facebook Click IDs (FBCLID) captured to attribute leads to specific campaigns.
• Session Stitching / Fingerprinting: Our platform (Go High Level) may use IP address and browser data to associate visits across multiple sessions, even if cookies are cleared, to provide a continuous user journey.
• Cookies: See Section 9 for a full cookie disclosure.

3.How We Use Your Information

We will never use your health and fitness data for purposes beyond delivering and improving our Services without your explicit consent, and we will never sell it.

4.Health & Fitness Data — Sensitive Data Notice

Information related to your physical health, body composition, dietary habits, and fitness activities may constitute sensitive personal data under applicable privacy laws. We treat this data with heightened care.

We collect and process your health and fitness data solely to operate the Talk2Sam App, deliver personalized coaching services, and measure your progress over time. This data is never sold and is never shared with third parties for advertising purposes. If you choose to share progress photos or body measurements, you may request their deletion at any time via our contact page.

5.How We Share Your Information

We do not sell your personal information. We share data only in these limited circumstances:

• Payment Processor (Stripe): Billing name, address, and transaction data are shared with Stripe, Inc. to process payments. See Section 7 for full details.
• CRM & Marketing Platform (Go High Level): Contact data, funnel interactions, and communication history are processed through GHL. See Section 8.
• Video Conferencing (Zoom): Coaching sessions are conducted via Zoom. Session data is subject to Zoom's privacy policy.
• Analytics Providers: Aggregated and anonymized usage data may be shared with analytics tools (Google Analytics) to improve our Services.
• Legal Requirements: We may disclose information if required by law, regulation, or legal process, or to protect the rights, property, or safety of Talk2Sam, our users, or the public.
• Business Transfers: In a merger, acquisition, or asset sale, your information may transfer as part of the transaction. We will notify you via email and/or site notice of any such change.

6.Advertising Networks & Meta / Google Pixels

Our website and funnels may use the Meta Pixel (Facebook Pixel) and Google Analytics / Google Ads tracking codes to measure the effectiveness of our advertising campaigns and to build advertising audiences. These tools may collect data about your activity on our site and share it with Meta Platforms, Inc. and Google LLC respectively.

This sharing may constitute a "sale" or "sharing" of personal information under California law (CCPA). California residents have the right to opt out — see Section 11 for how to exercise this right.

EU/UK residents: these advertising pixels only fire after you have provided cookie consent via our Cookie Consent Banner. See Section 9.

7.Stripe — Payment Data Processing

All payment transactions on Talk2Sam are processed by Stripe, Inc., a PCI-DSS Level 1 certified payment service provider. When you enter payment information on our checkout page, that data is transmitted directly and securely to Stripe. Talk2Sam does not receive, store, process, or have access to your full credit card number, CVV, expiration date, or bank account details at any point.

Stripe acts as an independent data controller for the payment data it collects and processes. The information Stripe collects about you when you make a payment — including your card details, billing address, and transaction history — is governed by Stripe's Privacy Policy.

Talk2Sam receives from Stripe only the information necessary to confirm a transaction was completed (e.g., a transaction ID, last 4 digits of card, billing name, and amount charged). This limited data is retained for accounting and dispute resolution purposes.

8.Go High Level (GHL) — CRM & Platform Data

Talk2Sam's customer communications, marketing funnels, email campaigns, SMS workflows, and CRM infrastructure are powered by Go High Level (GHL), a white-label SaaS platform. When you interact with our emails, landing pages, contact forms, or automated workflows, data about those interactions is processed through GHL's systems.

Go High Level acts as a data processor on our behalf and is bound by a data processing agreement with us. GHL does not independently use your data for their own marketing. However, please note:

• Even in our white-labeled environment, certain cookies and scripts may originate from GHL's backend domains: msgsndr.com and leadconnector.com. These are GHL's unbranded infrastructure domains and are not third-party advertisers.
• GHL uses session cookies and fingerprinting technology to track user journeys across funnel pages and attribute leads to specific campaigns.

9.Cookies & Tracking Technologies — Full Disclosure

Our website uses cookies and similar tracking technologies. The following is a complete disclosure of the categories and specific cookies in use:

Category 1: Essential / Functional Cookies — Required for the site to operate. Cannot be disabled.

Category 2: Analytics Cookies — Help us understand how visitors use our site. Only set after consent where required.

Category 3: Marketing & Attribution Cookies — Used to measure advertising effectiveness and build audiences. Only set after consent where required.

Cookie Consent: If you are visiting from the EU, UK, or California, a Cookie Consent Banner will appear before any non-essential cookies are set. You may accept all cookies, accept essential cookies only, or decline non-essential cookies. You can update your preferences at any time by clearing your browser cookies and revisiting the site.

To opt out of Google Analytics tracking, you may install the Google Analytics Opt-Out Browser Add-on. To opt out of Meta advertising, visit your Meta Ad Preferences.

10.Data Retention

• Account & Profile Data: Retained for the duration of your active account. Upon account deletion, personal data is purged within 30 days unless a longer retention period is required by law.
• Health & Fitness Data: Retained as long as you maintain an active account. You may delete this data at any time through your App settings.
• Transaction & Billing Records: Retained for a minimum of 7 years for financial compliance and tax purposes.
• Marketing & Communication Data: Retained until you unsubscribe or withdraw consent, whichever comes first.
• Support & Dispute Records: Retained for up to 3 years following the resolution of the matter.

11.Your Rights — California Residents (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you, the sources of that information, the purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of personal information we hold about you, subject to certain exceptions (e.g., information needed to complete a transaction or comply with a legal obligation).
• Right to Correct: You may request that we correct inaccurate personal information we hold about you.
• Right to Opt Out of Sale or Sharing: Talk2Sam does not sell personal information for money. However, the use of Meta Pixel and Google Analytics may constitute "sharing" under the CCPA. You have the right to opt out of this sharing. To opt out, please submit a request via talk2sam.live/contact-us and we will disable applicable tracking for your contact record. You may also use browser-level opt-out tools referenced in Section 9.
• Right to Limit Use of Sensitive Personal Information: You may request that we limit the use of sensitive personal information (including health and fitness data) to purposes necessary to provide the Services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To submit a CCPA request, contact us at talk2sam.live/contact-us. We will respond within 45 days, with a possible extension of an additional 45 days where necessary.

12.Your Rights — EU & UK Residents (GDPR / UK GDPR)

If you are located in the European Union or United Kingdom, you have the following rights under the GDPR and UK GDPR:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data, subject to our legal retention obligations.
• Right to Restrict Processing: Request that we limit how we use your data while a dispute or correction request is being resolved.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format and transfer it to another controller.
• Right to Object: Object to processing of your personal data for direct marketing purposes at any time. We will cease such processing immediately upon receipt of your objection.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local supervisory authority (e.g., the ICO in the UK, or the relevant EU data protection authority in your country).

International Data Transfers: Talk2Sam is based in the United States. If you are located in the EU or UK, your personal data will be transferred to and processed in the US. We rely on Standard Contractual Clauses (SCCs) and Stripe's EU-US Data Privacy Framework certification to lawfully transfer payment data. For other data processed through GHL, appropriate safeguards are in place under our data processing agreement.

To exercise any GDPR right, contact us at talk2sam.live/contact-us. We will respond within 30 days.

13.Data Security & Breach Notification

We implement appropriate technical and organizational security measures including HTTPS/TLS encryption, access controls, secure data storage, and regular security reviews. Our payment pages are Stripe-hosted, meaning no cardholder data ever passes through or is stored on our own servers.

While we take data security seriously, no method of electronic transmission or storage is 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users within 30 days of becoming aware of the incident — covering our obligations under Arizona's data breach notification law, CCPA, and GDPR requirements. Notification will be made via email to the address on your account and/or via a prominent notice on our website.

14.Children's Privacy

Our Services are intended for individuals 18 years of age or older. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected data from someone under 18, we will delete it immediately. Please contact us via talk2sam.live/contact-us if you believe this has occurred.

15.Governing Law

This Privacy Policy and any disputes arising from it are governed by the laws of the State of Arizona, United States of America. By using our Services, you consent to the jurisdiction of Arizona courts for privacy-related disputes. Nothing in this section limits the rights of EU/UK residents under GDPR or California residents under CCPA.

16.Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email. Your continued use of our Services following the posting of changes constitutes your acceptance of the updated Policy.

17.Contact Us & Data Rights Requests

All privacy inquiries, data rights requests (access, deletion, correction, opt-out), and support issues are handled through our official contact page. We respond to all requests within 30 days.

This page handles: data access & deletion requests, CCPA opt-out requests, GDPR rights requests, cookie consent questions, billing inquiries, account access, and general support. Our registered business address is available upon request through this page.