Privacy Policy

Information you choose to share

When you submit a contact or tour request, we collect your full name, email address and phone number, the contact method you choose, your area of interest, preferred day and time when applicable, your contact permission and adult acknowledgment, the consent wording version, and a record of when the request was submitted. We use this information to handle your request and contact you by your selected method. Submitting a request does not confirm a tour.

When you unlock a full Fitness Plan, we save your full name, email address, phone number, your consent choices, the consent wording version, and submission or update times. Optional one-time acknowledgement, visit-contact and marketing choices are separate from the contact-sharing choice needed to unlock the full plan. The plan itself is not emailed. Choosing marketing does not start an automated marketing sequence. A saved address does not establish that its ownership has been verified.

Fitness Plan details

The calculator processes the measurements, age, equation selection, activity preferences, goals, and eligibility answers you enter in your browser tab. The website does not send those calculator inputs or the generated plan to its lead database or AI chat. The separate full name, email, phone and consent submission is sent when you unlock the full plan. If you explicitly choose optional AI-selected guidance, only your selected goal, training experience, chosen workout days and walking category are sent through the website to OpenAI. Your age, body measurements, equation, calorie/macro results, eligibility answers, warnings and contact details are excluded from that request.

Optional AI guidance selects educational topics from a fixed reviewed reference; it does not change your calculated plan. We do not save the selected preferences or guidance in the website database or send them to staff. Content-free request counters and daily connection hashes limit abuse and cost. OpenAI and hosting providers may process request and security information under their own retention practices; OpenAI API data controls describe provider handling. Clearing the tab cannot recall information already sent.

Use Clear My Details to clear the calculator details from the current tab. This does not delete contact details you already submitted. If you save a plan to your device, that downloaded copy remains under your control; browser features may also retain form information according to your settings.

Guided appointment steps and previously saved details

The tour flow starts with a day and time, then asks for your contact details. Choosing a time does not reserve it or confirm a booking. Contact answers stay in the page and are not sent to OpenAI or included in AI chat.

Current appointment forms keep your contact details in the page until you submit the final booking confirmation. They do not offer an early save. Older versions offered an optional saved unfinished request containing only your name, email, adult acknowledgment, permission for staff to email about the unfinished request, consent wording version, and submission and status records. Those previously saved requests do not store your phone number or selected time, reserve an appointment, send an automatic message, or grant marketing, text or phone-call permission. They remain in a private owner queue, separate from confirmed appointments, until deleted, expired or linked to a confirmed booking.

Incomplete details expire after 30 days and are removed during the next cleanup. Expired details are not shown in the owner queue or available for further contact through this feature. While the request is incomplete, Delete saved details withdraws its email follow-up permission and removes its name and email from the active unfinished-request record. Closing the page or clearing local fields does not delete an unfinished request you explicitly saved. If you lose the saved-details control, contact the gym using the privacy-request address below. Minimal non-contact receipts may remain to prevent a delayed retry from recreating a deleted request.

Only final booking confirmation sends your full name, email, phone and selected time to the booking service, private booking records and Bob’s Google Calendar for that tour. The final confirmation checkbox permits a confirmation email, tour-related emails and human staff phone calls about your appointment. It does not authorize texts, marketing, automated, prerecorded or AI-voice calls. Earlier bookings without the new staff-call consent retain their original permission. An unfinished request is linked only when the booking service confirms the matching appointment. Deleting unfinished details does not cancel a submitted or confirmed booking or erase its separate booking records. Use Check booking status and the booking cancellation controls for those actions.

This browser tab keeps random receipts and access tokens for saved unfinished requests and pending or uncertain bookings, not your contact details. When Google Analytics is accepted, the confirmed-booking receipt also keeps a content-free confirmation-observed flag to avoid counting the same booking again. After reopening the page, you can check or delete an older unfinished request using its saved-details controls. A final booking is still rechecked for availability, and an uncertain result must be checked before creating another booking.

AI chat

Chat messages and recent conversation context are sent through our website server to OpenAI to generate replies. This is an AI assistant, not a staff member. Please do not enter medical details, passwords, payment information, or other sensitive information in chat. The assistant does not receive your Fitness Plan inputs or access our visitor-request records.

If the assistant cannot answer a supported business question, it can pause this chat and save a review category, random session reference, policy version and status in the private owner queue. By default, question text, conversation history and contact details are not included. Where the separate optional question-sharing control is available, you may review and explicitly agree to save a short business question for the owner. Do not include personal, health, payment or minor information. The question is removed from the live review record when the owner resolves or closes that review; unresolved questions remain available for review. Raw questions are excluded from logical exports and backups, email alerts, dot alerts, and reusable AI knowledge. Hosting-provider backup or security retention is governed separately. A category-only alert may be sent to the owner through Google email services and the owner’s assistant; delivery is tracked separately and can fail. Keep the chat tab open to check for an owner-approved answer. Clearing visible chat messages does not remove a saved review category. Approving a reusable public business answer is a separate owner action; customer questions do not automatically train or update the assistant.

The website application does not save chat transcripts to its lead database. It requests that API responses not be stored as response history. This does not mean that OpenAI or hosting providers retain no data: provider security and abuse-monitoring practices may apply. See OpenAI’s API data controls for current details: https://developers.openai.com/api/docs/guides/your-data.

To limit misuse, the website processes connection information and stores usage counters linked to a random chat session identifier and a daily hash derived from an IP address. These are technical abuse-control records, not chat transcripts. Expired counters are cleaned up during later chat requests; their reset time is not a guaranteed deletion time.

Website providers and external links

Our website uses Sites hosting and a Cloudflare D1 database to process website requests and store submitted contact requests and Fitness Plan contact submissions. The website provides an access-restricted owner dashboard for those records. The owner can export records for handling requests. Hosting providers may separately process technical access, security, and operational information.

The website hosts its font files directly, so loading those fonts does not connect your browser to Google Fonts. Maps and directions open Google Maps or Apple Maps when you choose a link. Phone, text, and email links use your selected device apps or communication services.

Join and pass links open https://www.joinmyhealthclub.com/510695/2. Payment details entered there are handled on that external checkout rather than collected by this website’s forms. Review that provider’s privacy notice and the checkout terms before submitting information.

YouTube video

The homepage offers a YouTube video. The video thumbnail is hosted on this website. The embedded player is loaded only when you choose Play. The player then connects to Google/YouTube using YouTube’s privacy-enhanced mode, which does not mean that no data is processed. Your device, connection and playback information may be processed by that service under its own privacy practices. Opening “Watch on YouTube” takes you directly to YouTube. See Google’s Privacy Policy.

Email alerts and acknowledgements

When automatic email delivery is enabled, new submissions are sent through Google Apps Script and Google email services to Bob@gymoffoley.com for the gym to review. Contact alerts include the submitted full name, email, phone, selected contact method, inquiry type, visit preferences and consent record. Fitness Plan alerts contain the submitted full name, email, phone and email choices. Calculator inputs, generated plans and chat transcripts are never included.

If you choose email for a contact request and agree to the form’s wording, we may send one acknowledgement to that address. Fitness Plan acknowledgements require the separate optional checkbox. Phone-call and text-message preferences do not receive email acknowledgements. Acknowledgements are not appointment confirmations or ongoing marketing permission. Addresses are not verified; do not submit another person’s address without permission. Email delivery may fail or be delayed. Older submissions are not automatically replayed when email is enabled.

Delivery event records, including the approved contact details, consent version, timestamps and delivery state, are stored privately with the website. The Google relay keeps event identifiers, payload hashes, delivery states, counters and a hash of an acknowledgement address to prevent duplicates. It removes those relay records after seven days during later requests; this is not a guaranteed deletion time. Sent messages may remain in Google email systems and recipients’ mailboxes under their separate retention practices. See Google’s Privacy Policy.

Confirmed tour bookings

When booking is enabled, its guided appointment steps or all-fields form ask for your full name, email, phone, selected tour time, adult confirmation and booking-specific consent. Those details are stored in Bob’s Google Calendar and the gym’s private booking records to arrange your tour. The final booking consent authorizes a confirmation email and tour-related email contact. Gym of Foley staff may call you about your appointment. We save the exact staff-call consent wording, its version, submission time, phone number and booking reference in the gym’s private website database. This local permission is limited to human staff calls about that appointment and is not sent to Google Calendar, emails, analytics, advertising services or AI providers. It does not authorize texts, marketing, automated, prerecorded or AI-voice calls. Earlier bookings without this explicit staff-call consent do not gain phone-call permission. The phone is kept in the private booking record, Bob’s event description and staff alert; it is not included in the customer confirmation email. Customers are not added as Calendar event attendees and cannot view other customers’ details through this website. No automatic tour reminders are scheduled.

The optional “Are you interested in personal training?” choice is saved with your final booking in the gym’s private website database. If you select it, the owner’s CRM adds a personal training lead label once the booking is confirmed and linked to a lead. The choice and label are not sent to Google Calendar, confirmation or staff emails, analytics, advertising services, or AI providers. This choice does not book a training session or grant marketing, phone-call or text-message permission. It is not saved with an unfinished request. The owner can remove the label, and you can contact the gym to request correction or deletion.

The booking confirmation stores a receipt identifier and an unguessable access token in this browser tab’s sessionStorage so you can check or cancel that specific booking. It does not store your name, email or phone in sessionStorage. The private database stores only a hash of the access token, alongside the booking and consent record. Keep the confirmation private. If you lose it, contact staff for help. Checking or cancelling a booking uses its receipt; a chat message alone cannot create or cancel a booking. Booking records do not currently expire automatically; contact the gym for correction or deletion requests.

Form abuse prevention

Contact forms, Fitness Plan email forms, and tour-booking requests use temporary counters to limit repeated requests. These counters use a daily hash of the connection IP address, the form or request type and a reset time; the website does not keep the raw IP address in these counters. They do not contain form details or chat messages. Expired counters are cleaned up during later requests, so the reset time is not a guaranteed deletion time.

Cookies and browser storage

The calculator and chat do not use cookies, localStorage, or sessionStorage to keep calculator details or chat history. The separate tour-booking tool uses this tab’s sessionStorage only for the receipts and independent confirmation-observed flags described above. Optional Google Analytics cookies are used only after you accept Google Analytics. Google Ads measurement uses the regional defaults and independent opt-out described below. Hosting and sign-in services may use their own technical storage and logs. This description does not cover cookies or tracking on external sites you choose to visit.

Basic statistics, optional Google Analytics and regional Ads measurement

We automatically count public page views and signup-link clicks in first-party daily sitewide totals to understand use of this website. You can object at any time, free of charge, with Turn off basic statistics below. Google Analytics is a separate optional choice. Your previous rejection of website analytics continues to disable basic statistics unless you explicitly turn basic statistics on. We honor browser Global Privacy Control and Do Not Track signals by keeping basic statistics, Google Analytics and Google Ads measurement off.

Basic statistics use no tracking cookies, visitor or session identifiers, device fingerprints, advertising attribution, or cross-site matching. The application does not store IP addresses, referrers, query strings, page paths, plan categories, chat, form or health information in these counters. A clean allowlisted public path is sent only to validate eligibility and is not saved. The retained data is daily totals plus a random single-event receipt, event type and rounded request hour for duplicate prevention and global abuse limits. A receipt is not reused to recognize a visitor. Existing receipts from the earlier opt-in version may contain public paths or plan categories until cleanup. Receipts older than 24 hours by their recorded hour and totals outside the latest 90 UTC calendar days are removed during later eligible analytics requests; these are not guaranteed deletion deadlines. Global caps can omit counts. Hosting providers may separately process IP addresses and retain technical request or security logs under their own practices. We do not claim that infrastructure is completely anonymous.

Counts are not unique people or completed purchases. The dashboard distinguishes the original opt-in collection start from the first automatic basic-count event; earlier visits are not recreated. Statistics are excluded from Fitness Plan, private owner and missing-page routes, and requests recognized by the server as signed-in activity are not counted. We cannot reliably identify an owner browsing signed out.

Only if you accept Google Analytics do we configure Google Analytics and enable its analytics cookies to understand public website visits and signup, contact or tour actions. Google may process technical browser, device and connection information. We send clean page paths and limited action categories, not names, contact details, chat messages, calculator inputs or plans, appointment details, or booking receipt tokens. Advertising personalization and Google signals are disabled. Google Analytics is not installed on Fitness Plan, private owner pages or missing-page responses.

Use the independent controls below to turn basic statistics off or on, and to accept, reject or withdraw Google Analytics. These preferences are stored in this browser only; unreadable or invalid saved preferences keep collection off. Withdrawing Google Analytics stops future Google Analytics collection and clears this website’s Analytics cookies; it does not delete information already processed by Google. Turning off basic statistics stops future counts, but aggregate totals cannot be linked back to you for individual deletion. See Google’s Privacy Policy.

Regional Google Ads booking measurement and opt-out

On our main public landing pages, blog index, privacy and terms pages, and verified tour thank-you page, Google Ads measurement runs automatically under Google’s regional consent rules unless you opt out. The Google tag loads to apply these rules. Advertising storage and advertising measurement data use are permitted by default for visitors Google identifies as being in the United States; both are denied by default elsewhere or when no regional rule applies. Google may still receive limited cookieless signals when storage is denied, including consent state and technical information. This mode is not completely anonymous, does not block international visitors from the website, and does not guarantee legal compliance or complete measurement.

For U.S. visitors under the permitted regional default, Google can use advertising measurement cookies, including first-party _gcl_ cookies, Google’s _gcl_ls browser-local storage, and ad-click identifiers to connect a confirmed tour booking with an earlier Google ad interaction. Google also receives technical browser, device and connection information. We enable restricted data processing for Ads measurement, deny advertising personalization everywhere, disable enhanced conversions, redact ad identifiers when advertising storage is denied, and do not pass identifiers through website links. These settings do not mean that no data is sent to Google.

Google Ads measurement is excluded from blog articles, the Fitness Plan tool, private owner pages, and unknown or missing-page routes. Existing Google Analytics remains a separate optional choice on its eligible public pages; accepting Analytics does not globally grant Ads storage. Ads clicks landing on excluded articles, browser restrictions, denied storage or unavailable identifiers may prevent attribution.

We send a content-free confirmed-tour conversion only after this tab arrives from a successful booking confirmation and the server verifies its saved receipt. A thank-you URL alone, booking start, contact request, uncertain or cancelled booking is not a conversion. We do not include names, email addresses, phone numbers, chat text, health information, Fitness Plan details, appointment times or notes, article history, booking receipt identifiers or access tokens, or arbitrary query strings in advertising event fields. For Google Ads, we do not manually copy or retain ad-click identifiers; Google handles its own attribution under these rules.

You can turn off Google Ads measurement below at any time. An explicit Ads opt-out, a preserved earlier reject-all preference, browser Global Privacy Control or Do Not Track signal, or unreadable, invalid or unsavable privacy storage prevents Ads setup and conversion events rather than merely switching them to cookieless measurement. Privacy signals and failed privacy storage also keep optional Analytics and basic statistics off. Your Ads opt-out is stored locally in this browser; it is not an account-wide preference. The automatic regional policy is not stored as your affirmative consent.

Turning Ads measurement off denies its storage and data use, stops future website Ads events, clears accessible first-party _gcl_ cookies and the _gcl_ls entry, and reloads an already active page to stop its loaded tag. It cannot erase information Google already received or third-party cookies outside this website’s control. You may choose “Turn on regional Ads measurement” to restore the regional defaults; if Google has already loaded, the page reloads rather than granting Ads globally. Google Analytics remains independently controlled.

Independent browser-tab receipt flags prevent repeat GA4 and Ads conversion sends for the same verified transition. Direct visits, reloads and return visits do not create a new conversion opportunity. Delivery, geographic classification and attribution may be incomplete, and the website does not verify Google’s ingestion. A confirmed tour booking is not a paid membership or revenue. Google’s separate policies apply to its processing and retention: Google’s Privacy Policy and restricted data processing information.

Optional ChatGPT Ads booking and link-tap measurement

ChatGPT Ads measurement is off unless you separately allow it using the controls below. This choice covers confirmed new tour bookings and Call / Directions link taps. It is independent of Google Analytics, regional Google Ads measurement, contact permissions and booking confirmation. An earlier booking-only acceptance does not enable this expanded measurement; a fresh opt-in is required. Earlier declines remain effective. Expanded acceptance disables older booking-only page scripts until those pages are reloaded, using a versioned preference marker. Accepting an older booking-only prompt cannot restore the expanded permission. Declining does not affect browsing or booking. An unreadable, invalid or unsavable preference, unavailable tab storage, Global Privacy Control or Do Not Track signal keeps this measurement off.

We use an event-only image request to OpenAI rather than loading OpenAI's website measurement JavaScript. We do not run automatic form matching or supply a user object. With this expanded consent, a deliberate tap on the gym's visible Call or Directions link can also send a custom phone_link_clicked or directions_link_clicked event. These are secondary link actions, not proof that a phone call connected, anyone arrived at the gym, or a membership was purchased. The event does not contain the phone number or destination address; repeated taps within 1.5 seconds are suppressed. For a new booking attempt made after this feature was added, the thank-you page must verify the saved booking receipt with our server before offering one measurement opportunity. With consent already in place, the page attempts to send the event name appointment_scheduled, its customer_action category, our Pixel ID and a random conversion-only deduplication ID to OpenAI. OpenAI also receives the website origin and normal connection information, including IP address and browser information. The request omits the page referrer and third-party cookies. Browser or network restrictions may still block delivery.

If an eligible public page's URL contains a supported OpenAI ad-click identifier (oppref), this website can save that identifier only after you allow this measurement. It is kept in this browser tab's session storage and is eligible for attribution for up to 30 days from capture. The same unexpired identifier does not extend that period. Expired identifiers are ignored and removed when the tab next checks measurement state; closing a tab may clear its storage, although browser session restoration can preserve it. An eligible identifier can accompany the confirmed-booking event and both Call / Directions link-tap events. We do not copy other URL parameters, send page-view events, inspect form contents or retain an article history for this feature. Navigating away before opting in, an unsupported identifier format, another tab, or storage restrictions may prevent ad attribution.

The outgoing event contains no name, email address, phone number, destination address, chat or form text, health information, Fitness Plan inputs or results, appointment time or notes, booking identifier, or booking access token. This integration is installed only on the homepage, memberships, visit, FAQ, privacy, terms and thank-you pages. It is excluded from blog articles, Fitness Plan, personal-training, private owner and unknown pages. External measurement requests are limited to verified new-booking thank-you transitions and these two specific visible link actions on eligible pages.

Content-free flags in the existing tab booking receipt prevent another measurement attempt for the same booking. A direct thank-you visit, refresh, reopened booking status or changed/cancelled/unconfirmed booking does not create a repeat event. If consent was absent when a verified opportunity occurred, allowing it later does not replay that booking. An attempted request is not proof that OpenAI processed or attributed the conversion. A tour is not a paid membership or revenue.

You may withdraw using the ChatGPT Ads control below. Withdrawal stops future booking and link-tap attempts, updates the earlier booking-only preference to stop older open pages too, and clears this tab's saved OpenAI ad-click identifier. The accepted or declined choice is stored in this browser's local storage until changed or cleared; it is not account-wide. Other open eligible tabs react to a successfully saved preference, and a tab rechecks the choice before measuring. If a preference cannot be saved, measurement stops on the page showing the error, but an older open page may still use its prior choice; close older pages and use browser privacy controls. A withdrawal observed from an older booking-only page also invalidates the expanded choice, so accepting only the older prompt does not restore link-tap measurement on the updated page. Withdrawal cannot recall a request already sent or delete information OpenAI already received. OpenAI's separate processing and retention practices apply: OpenAI Privacy Policy.

Your choices and privacy requests

You can browse without submitting a contact form, choose whether to use AI chat, and use the quick Fitness Plan without unlocking the full plan. Optional marketing permission is not required to request a tour or unlock a full plan. To ask about information you submitted, request a correction or deletion, or withdraw optional contact or marketing permission, email Bob@gymoffoley.com. Do not include passwords, payment details, or medical records in a privacy request.

Retention and deletion

Except for optional unfinished tour requests described above, saved contact requests, Fitness Plan contact submissions and website email delivery records do not currently expire automatically. They remain in the website database until the gym removes them. Contact Bob@gymoffoley.com to request correction or deletion of information you submitted or to withdraw optional contact or marketing permission. Clearing the calculator or chat in your browser does not remove a previously submitted lead or contact request.

The owner can export saved records. Removing a record from the website does not automatically remove an exported copy. If you request deletion, identify the contact address or number you used so the gym can review the relevant records. Hosting, backup, and AI-provider retention is governed separately by those services; the website’s clear controls do not erase their records.

Age restrictions

The Fitness Plan and contact-request form are intended for adults aged 18 and older. The contact form asks you to confirm that you are at least 18. Do not submit a child’s personal information through these tools. If you believe a child has submitted personal information, contact Bob@gymoffoley.com. These website-tool restrictions do not establish the gym’s membership age rules; ask staff about those rules.

Policy updates

The effective date appears at the top of this policy. Later versions will carry an updated date. Changes in how information is collected or used will require the notice and any permissions required by applicable law.