Privacy Policy

We collect the following categories of personal information:

• Account information: your name and email address when you register or purchase.
• Payment information: billing details processed securely by Stripe. We never store full card numbers.
• Course activity: modules accessed, completion status, and progress timestamps to deliver your drip schedule.
• Lead data: name and email if you opt in to our free back pain relief guide before purchasing.
• Usage data: browser type, IP address, and page views collected automatically for security and analytics.

We use your information to:

• Create and manage your student account.
• Deliver course content and unlock modules on schedule.
• Process payments and issue receipts.
• Send transactional emails (login credentials, module updates) and, with your consent, educational and promotional emails.
• Provide customer support and respond to your inquiries.
• Improve our platform through aggregated, anonymised analytics.

We do not sell, rent, or trade your personal information to third parties.

Your data is stored on servers provided by Supabase (PostgreSQL database) located in the United States. We implement industry-standard security measures including:

• TLS/SSL encryption for all data in transit.
• Row-level security on all database tables.
• Bcrypt-hashed passwords — we never store plaintext passwords.
• Regular security reviews and dependency updates.

Despite these measures, no method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password.

We work with the following trusted third parties who may process your data as part of delivering our service:

• Stripe (stripe.com) — payment processing. Stripe is PCI-DSS Level 1 certified. Their privacy policy is available at stripe.com/privacy.
• Supabase (supabase.com) — database and authentication infrastructure. Privacy policy at supabase.com/privacy.
• Resend (resend.com) — transactional email delivery. Privacy policy at resend.com/legal/privacy-policy.
• Vercel (vercel.com) — hosting and edge network. Privacy policy at vercel.com/legal/privacy-policy.

Each of these providers is contractually obligated to protect your data and use it only to provide their respective services.

We use essential cookies to maintain your authenticated session. These cookies are strictly necessary for the platform to function and cannot be disabled. We do not use tracking or advertising cookies.

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you.
• Correction: ask us to correct inaccurate data.
• Deletion: request deletion of your account and personal data, subject to legal retention requirements.
• Portability: receive your data in a machine-readable format.
• Opt-out: unsubscribe from marketing emails at any time via the unsubscribe link in any email we send.

To exercise any of these rights, contact us at info@elevatehealthtampa.com. We will respond within 30 days.

We retain your account data for as long as your account is active or as needed to provide services. If you request deletion, we will remove your data within 30 days, except where retention is required by law (e.g., financial records are retained for 7 years).

Our services are intended for adults aged 18 and over. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal information, please contact us immediately.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page and, for material changes, notify you by email. Your continued use of our services after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Elevate Health
Email: info@elevatehealthtampa.com