Privacy Policy

Effective date: August 15, 2026. Last updated: August 16, 2026

1. In short

We are a small movement and strength training business in Hallandale Beach, Florida. We collect the information we need to sell and deliver our online programs, to schedule and run in-person and virtual training sessions booked through this website, to take payment, and to let people know about our work.

We do not sell your personal information for money.
We do use advertising and analytics tools (Google, Meta) that may share limited information with those companies. Under some state laws, that counts as a “sale” or “sharing,” and you can opt out – see Section 9.
We do not ask you for medical records or health history through this website.
We are not a healthcare provider and are not subject to HIPAA. Svetlana Tsarukaeva is a certified kinesiologist, not a licensed physician.
You can reach a real person about any of this at Tsarukaeva.Svetlana@gmail.com.

This summary is for convenience only. The full policy below governs.

2. Who we are and what this policy covers

This Privacy Policy explains how Tsarukaeva Healthy Life LLC (“we,” “us,” “our“) collects, uses, discloses and protects personal information when you:

visit tsarukaeva.com (the “Site”);
purchase, access or use one of our online programs (including the Online Movement Assessment, Eliminate Pain & Restore Movement, Improve Mobility Movement, and Full Body & Strength) and the associated Student Dashboard account;
book an in-person training session, movement assessment or other appointment through the Site’s booking system, or attend a session you booked online;
book or attend a virtual session conducted by video call;
contact us through the Site’s contact form, by email, by telephone, by WhatsApp, or on social media; or
subscribe to our emails.

Controller / responsible business: Tsarukaeva Healthy Life LLC, 730 W Hallandale Beach Blvd #106, Hallandale Beach, FL 33009, USA Email: Tsarukaeva.Svetlana@gmail.com. Telephone: +1 (954) 670-4437

Privacy contact / Privacy Officer: “Svetlana Tsarukaeva”, reachable at the email address above. (Canadian and Québec law require us to name a person accountable for personal information; this is that person.)

This policy does not cover the practices of third-party websites or services we link to, including social media platforms, WhatsApp, and Google Maps.

3. Information we collect

3.1 Information you give us

What	When we collect it	Examples
Identity and contact information	Booking, purchase, account registration, contact form, email, phone, WhatsApp	Name, email address, telephone number, and – where relevant to an in-person session – city or address
Account information	When you register for the Student Dashboard	Username, password (stored in encrypted/hashed form), purchase and access history
Booking information	When you book a session or assessment online	Service selected, date and time, location, coach, any note you add to the booking, cancellation and rescheduling history, attendance
Order and payment information	When you buy a program or pay for a session	Items purchased, amount, currency, date, billing name and email, discount or coupon codes, refund and dispute records. Card numbers are entered directly with our payment processor and are never received or stored by us
Program activity	While you use an online program	Lessons or videos accessed, progress, downloads, and anything you submit to us such as questions or feedback
Communications	Any time you contact us	The content of your emails, form submissions, WhatsApp and text messages, call notes, and your contact preferences
Reviews and testimonials	When you choose to provide one	Your name (or first name and initial), photo or video, and the content of your review — published only with your permission
Marketing preferences	When you subscribe or unsubscribe	Consent status, date and source of consent, opens and clicks on our emails

Information you volunteer about your body or health. We do not require or request medical records, diagnoses, or health history through this Site, and our booking and contact forms do not ask for them. You may nevertheless choose to describe a pain problem, an injury or a physical limitation — for example in a booking note, an email, or a WhatsApp message — so that we can tailor a session. If you do, we treat that information as confidential, use it only to deliver the service you asked for, and do not use it for advertising. Please do not send us medical records, imaging, insurance information, or government identification numbers through the Site. We are not a HIPAA covered entity or business associate, and information you send us is not protected health information under HIPAA.

3.2 Information we collect automatically

When you visit the Site we and our analytics and advertising providers may collect:

IP address and approximate location derived from it (city/region level);
device and browser type, operating system, screen size, and language;
pages viewed, referring page or search term, links clicked, time on page, and scroll depth;
dates and times of visits, and whether you are a returning visitor;
cookie and similar identifiers, and advertising identifiers.

See Section 8 for the technologies we use and how to control them.

3.3 Information we receive from others

Our payment processor tells us whether a payment succeeded, the last four digits and brand of the card, and billing country — not the full card number.
Our email platform tells us delivery, open, click, bounce and unsubscribe events.
Analytics and advertising platforms give us aggregated and pseudonymous reports on how our ads and pages perform.
Referrals. If someone gives us your contact details so that we can get in touch, we will tell you where we got them the first time we contact you.
Public sources, such as a social media profile you use to contact us.

3.4 Information about children

Our programs and sessions are intended for adults. We do not knowingly collect personal information from children under 13. We do not knowingly sell or share the personal information of anyone under 16 for targeted advertising, and we do not use the personal information of anyone under 18 for targeted advertising, sale or profiling without opt-in consent from them or their parent. If you are a parent or guardian and believe a child has given us personal information, contact us and we will delete it promptly. If a minor trains with us, we deal with the parent or guardian and collect only what is needed to run the session safely.

4. How we use personal information

We use personal information for the following purposes:

To provide what you bought or booked — creating and maintaining your Student Dashboard account, giving you access to program content, confirming and running sessions, sending reminders and rescheduling notices, and following up afterwards.
To take and manage payment — processing charges, issuing receipts, applying discounts, handling refunds under our Refund Policy, and dealing with chargebacks.
To communicate with you — answering questions submitted through the contact form, by email, telephone or WhatsApp, and sending service messages such as booking confirmations, changes to a session, and account or policy updates.
To market our programs and sessions — sending newsletters, offers and program announcements to people who have asked to receive them or who bought from us, and running advertising campaigns. You can stop this at any time (see Sections 9 and 10).
To operate, secure and improve the Site — hosting, backups, fraud and abuse prevention, login security, troubleshooting, measuring which pages and programs are useful, and testing improvements.
To tailor training safely — using any physical or pain-related information you voluntarily share with us to adapt exercises to you.
To keep required records and protect our rights — tax and accounting records, proof of consent, defending or bringing legal claims, and complying with law.

Our legal grounds (for those who ask, including Canadian residents). We rely on your consent for marketing emails and for non-essential cookies and tracking; on the performance of our contract with you to deliver programs and sessions and take payment; on our legitimate business interests to secure the Site, prevent fraud, and understand how our content performs; and on legal obligations for tax, accounting and record-keeping. Where we rely on consent, you may withdraw it at any time, subject to legal or contractual restrictions and reasonable notice — but withdrawing consent to information we need in order to deliver a program or session may mean we can no longer provide it.

We do not use your personal information to train large language models or other artificial intelligence models, and we do not sell it to anyone who does. We do not make decisions about you that produce legal or similarly significant effects using automated processing alone.

5. What we do not do

We do not sell your personal information for money.
We do not disclose your personal information to data brokers.
We do not use information you volunteer about pain, injuries or physical condition for advertising or targeting.
We do not store your full payment card number.
We do not publish your name, photograph, review or results without your permission.

6. When we disclose personal information

We share personal information only in the situations below, and only with what is needed for the purpose.

Who	Why	What they receive
Website host and technical providers	Running and backing up the Site and Student Dashboard	Anything stored on the Site, including account and booking records
Booking system provider (Amelia)	Scheduling, reminders, calendar sync	Name, email, phone, service, appointment details, booking notes
Payment processor (Stripe)	Taking payment, refunds, fraud screening, chargebacks	Name, email, billing details, amount, card data entered directly by you
Email marketing platform (GHL, Mailchimp)	Sending newsletters and program emails	Name, email, subscription status, engagement history
Analytics provider (Google Analytics)	Understanding Site traffic and performance	Online identifiers, device and usage data
Advertising platforms (Meta/Facebook, Google Ads)	Showing and measuring our ads	Online identifiers, pages viewed, conversion events, and in some cases a hashed (scrambled) version of your email address
Video conferencing provider (Zoom or Google Meet)	Running virtual sessions	Name, email, and the session itself
Accountant, bookkeeper and professional advisers	Tax, accounting, legal advice	Transaction records; personal information only as needed
Government authorities, courts, or others	Where we are legally required, or to establish or defend legal claims, or to protect someone’s safety	Only what is required
A buyer or successor	If the business is sold, merged or reorganized	Customer records, subject to this policy

Everyone above acts as our service provider or processor under contract, is permitted to use the information only to perform services for us, and may not use it for their own purposes — except the advertising platforms (Meta and Google Ads), which also use the data for their own purposes under their own privacy policies. That is why we treat those particular disclosures as a “sale” or “sharing” under US state law and give you an opt-out.

7. Where information is stored and processed

We are based in the United States and our providers store and process information in the United States. If you are in Canada or elsewhere outside the United States, your personal information will be transferred to, stored in, and processed in the United States, where privacy laws differ from those of your country and where courts, law enforcement and national security authorities may be able to access it under US law. We use providers that commit contractually to protect the information at a comparable level. By purchasing a program or booking a session, you understand that your information will be handled in the United States.

8. Cookies and similar technologies

We use cookies, pixels, tags, and local storage. Broadly:

Strictly necessary — keeping you logged in to the Student Dashboard, holding your booking through checkout, security and load balancing, and remembering your cookie choices. These cannot be switched off through our banner because the Site will not work without them.
Functional — remembering preferences such as language or a dismissed notice.
Analytics — Google Analytics, to count visitors and see which pages and programs get used. [If applicable: we have enabled IP anonymization and disabled data sharing with Google’s other products.]
Advertising — the Meta (Facebook) pixel and Google Ads tags, used to measure our ads and to show our programs to people who have visited the Site.

How to control cookies. Use the cookie banner or the “Cookie settings” link in the Site footer to accept or refuse non-essential cookies and to change your choice later. You can also block or delete cookies in your browser settings, and use your browser’s or device’s advertising controls. Blocking strictly necessary cookies will break login and checkout.

Opt-out preference signals. We honor the Global Privacy Control (GPC) and similar browser-level opt-out signals. If your browser or extension sends one, we treat it as a request to opt out of the sale and sharing of personal information and of targeted advertising. GPC is a setting in the browser itself, so it applies to the browser or device you set it on and will not automatically carry over to another one. If you are signed in to your Student Dashboard when we receive the signal, we will apply the opt-out to your account as well.

Do Not Track. There is still no common standard for “Do Not Track” browser headers, so we do not respond to them. We do respond to GPC as described above.

9. Advertising, analytics, and your opt-out choices

We advertise our programs and sessions on Google and Meta platforms, and we use tags on the Site to measure which ads lead to purchases and bookings, and to show our programs again to people who have visited us. To do this, limited information — such as cookie identifiers, the pages you viewed, whether you completed a purchase, and sometimes a hashed version of an email address — is disclosed to those platforms, which also use it for their own purposes.

We do not receive money for this. But under the California Consumer Privacy Act and several other state laws, this kind of disclosure is defined as a “sale” or “sharing” of personal information for cross-context behavioral advertising. So, to be plain about it: we sell/share personal information in that technical sense, and you may opt out at any time.

You can opt out by any of these routes:

Set your cookie preferences to refuse advertising cookies using the “Cookie settings” link in the footer, or the “Do Not Sell or Share My Personal Information” link there; [PUBLISHER NOTE: both links must actually work before this page goes live — see the handover notes]
Turn on Global Privacy Control in a supporting browser or extension;
Email Tsarukaeva.Svetlana@gmail.com with the subject line “Opt out”;
Use the platforms’ own controls – Google Ads Settings, Meta Ad Preferences, and the industry tools at optout.aboutads.info and youradchoices.ca.

We will not treat you differently, charge you more, or give you a lesser service because you opted out.

We have not knowingly sold or shared the personal information of consumers under 16.

10. Email and message marketing

We send marketing email only to people who asked for it or who bought a program or session from us. Every marketing email identifies us, includes our mailing address, and has a working unsubscribe link that stays working for at least 30 days after the message is sent; we act on unsubscribes promptly and in any event within 10 business days. You can also reply to any email, or write to Tsarukaeva.Svetlana@gmail.com, and we will remove you.

If you are in Canada: we send commercial electronic messages only with your express or implied consent as defined in Canada’s Anti-Spam Legislation. We identify ourselves and give contact details that stay valid for at least 60 days in every message, and we honor unsubscribe requests within 10 business days. We keep a record of when and how you gave consent. Where our consent is implied because you bought from us, it lasts two years from the purchase; where it is implied because you enquired, six months – after that we stop, unless you have given us express consent to continue.

Unsubscribing from marketing does not stop transactional messages you need — booking confirmations and reminders, receipts, account and security notices, and changes to our policies.

If you message us on WhatsApp or by SMS, those messages are also subject to the privacy policy and terms of the platform or carrier that carries them.

11. How long we keep information

Type	How long
Participant Dashboard account and program access records	For as long as your access lasts (our online programs include lifetime access), and then 2 years, unless you ask us to delete sooner
Booking and appointment records	3 years after the last session
Payment, invoice and tax records	7 years. The IRS generally requires three years, and longer in certain cases (six years where income is understated, four years for employment tax records); we keep one 7-year period for simplicity. This overrides a deletion request
Contact form messages, emails, WhatsApp threads	1 year after the conversation ends
Marketing list membership and consent records	Until you unsubscribe, plus 3 years of the consent and unsubscribe record to prove we handled it correctly
Analytics data	Per the provider’s retention setting, currently 12 months
Reviews and testimonials you permitted to publish	Until you withdraw permission

When a retention period ends, we delete the information or irreversibly anonymize it.

12. How we protect information

We use HTTPS/TLS encryption across the Site, keep the platform and its components updated, restrict administrative access to those who need it, require strong passwords, and rely on a payment processor that is PCI-DSS certified so that card details never reach our systems. We keep the amount of personal information we hold to what we actually need.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If there is a breach of security affecting your personal information, we will notify you and the relevant authorities as the law requires. In practice, that means:

Florida and other US residents: notice no later than 30 days after we determine that a breach occurred, unless we determine and document that the breach has not and will not likely result in identity theft or other financial harm, and notice to the Florida Department of Legal Affairs where 500 or more Florida residents are affected.
Canadian residents: a report to the Office of the Privacy Commissioner of Canada, and notice to you, as soon as feasible where the breach creates a real risk of significant harm – and to Québec’s Commission d’accès à l’information where Law 25 applies.

Please protect your own account: use a unique password, don’t share your Student Dashboard login, and tell us immediately if you think someone else has access.

13. Your privacy rights

We extend the core rights below to everyone who deals with us, regardless of where you live, because we think that is the right way to run this business. Some jurisdictions add specific rights, described below.

You have the right to:

Know and access — ask what personal information we hold about you, where we got it, why we have it, and who we have disclosed it to;
Get a copy — receive a copy in a portable, commonly used electronic format;
Correct — have inaccurate or incomplete information fixed;
Delete — have your personal information erased, subject to the records we must keep by law (tax records above all);
Opt out — of marketing messages, and of the sale/sharing of personal information and targeted advertising;
Withdraw consent — at any time, for anything we do on the basis of your consent;
Non-discrimination — exercise any of these rights without being denied service, charged a different price, or given a lower quality of service;
Complain — to us first, and then to a regulator.

How to make a request

Email Tsarukaeva.Svetlana@gmail.com with the subject line “Privacy request,” or write to Tsarukaeva Healthy Life LLC, 730 W Hallandale Beach Blvd #106, Hallandale Beach, FL 33009, or call +1 (954) 670-4437. Tell us what you want and, so we can find your records, the email address or phone number you used with us.

We will acknowledge your request and respond within 45 days, and we will tell you if we need a further 45 days for a complex request. Requests are free unless they are manifestly unfounded or repetitive, in which case we may charge a reasonable fee or decline, and we will tell you why.

To protect you, we will verify your identity before acting – usually by confirming details that match our records and by replying to the email address on file. We cannot honor a deletion or access request we cannot verify. An authorized agent may act for you if they give us written, signed permission from you and we can verify it; for a deletion request, we may still contact you directly to confirm.

If we refuse a request in whole or in part, we will explain why. You may appeal simply by replying to our decision and telling us you disagree — you do not need any particular form of words. We will review the appeal and respond within 45 days, or within 60 days where the law allows us that long. If we deny the appeal we will give you the contact details and, where one exists, the online complaint form of your state Attorney General.

If you are a resident of a US state with a consumer privacy law

Comprehensive consumer privacy laws are now in effect in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, with more to follow.

An honest note about whether they apply to us. Most of these laws only bind businesses far larger than ours — typically those handling the data of 35,000 to 100,000 residents of the state, or earning more than $25 million a year; Florida’s own law reaches only businesses above $1 billion in revenue. We are a small business and these thresholds generally do not reach us. We give you the rights set out in this section anyway, as a matter of our own policy. Where a state law does apply to us, we follow it.

Those rights include confirming whether we process your personal information, accessing it, correcting it, deleting it, obtaining a portable copy, and opting out of sale, sharing, targeted advertising, and profiling that produces legal or similarly significant effects. California residents may also request the specific pieces of personal information collected, the categories of sources, the business purpose for collecting, and the categories of third parties to whom it was disclosed, and may designate an authorized agent. We do not collect or process sensitive personal information for the purpose of inferring characteristics about you.

Categories of personal information we have collected in the past 12 months, using California’s categories: identifiers; customer records (name, contact and payment information); commercial information (purchases and bookings); internet or network activity; approximate geolocation derived from IP address; audio, electronic or visual information (only where you supply a video testimonial or attend a recorded virtual session); and inferences drawn to select which of our programs to show you. Categories disclosed for a business purpose, and categories “sold” or “shared” for cross-context behavioral advertising, are set out in Section 6 and Section 9.

If you are in Canada

We handle personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where they apply, Québec’s Law 25 and the personal information protection acts of Alberta and British Columbia. In addition to the rights above:

We collect, use and disclose personal information only for the purposes identified in this policy, and only with your knowledge and consent, except where the law permits otherwise.
You may withdraw consent at any time, subject to legal or contractual restrictions and reasonable notice; we will tell you what the consequences are.
You may ask us to access or correct the personal information we hold, and to tell you to whom it has been disclosed.
Québec residents: we tell you when we use technology on this Site that can identify, locate or profile you; we keep those functions switched off by default, and we ask for your consent before turning them on. We do not use your personal information for automated decision-making. You may ask for the information you gave us in a structured, commonly used technological format. Our Privacy Officer, named in Section 2, is accountable for our compliance.
Cross-border: as noted in Section 7, your information is stored and processed in the United States.
If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca, 1-800-282-1376) or, in Québec, to the Commission d’accès à l’information du Québec (cai.gouv.qc.ca).

14. Consumer health data (Washington, Nevada and Connecticut residents)

Washington’s My Health My Data Act, Nevada’s SB 370 and Connecticut’s health data provisions define “consumer health data” very broadly — broadly enough to include information about bodily functions, physical measurements, symptoms, or an inference that someone is seeking care for a physical condition. Because we work with pain and movement, we take a deliberately narrow approach:

We do not ask for consumer health data anywhere on this Site. Our booking and contact forms collect name, contact details, the service and the time.
We do not sell consumer health data, and we will never do so — a sale would require your signed authorization, and we do not seek one.
We do not share consumer health data with advertising or analytics platforms, and we do not use it to target ads.
If you volunteer something about a pain problem or an injury so that we can train you safely, we use it only to deliver the session or program you asked for, keep it confidential, and delete it on request.
You may ask us to confirm whether we hold any such information about you, to give you a copy, and to delete it, by writing to Tsarukaeva.Svetlana@gmail.com. We will respond within 45 days. If we delete it we will also tell any provider who received it to delete it.

15. Health, medical and fitness disclaimer

Svetlana Tsarukaeva is a certified kinesiologist, not a licensed physician. Our programs, assessments and sessions are educational and physical training services. They are not medical care, diagnosis, treatment, or physical therapy, and they do not replace advice from your doctor. Nothing you send us through this Site becomes a medical record, and we are not a HIPAA covered entity. Consult a qualified healthcare provider before starting any exercise program, particularly if you have an injury, a medical condition, or are pregnant.

16. Third-party links and platforms

The Site links to third-party services including Google Maps, WhatsApp, Instagram, and our booking, payment and video platforms. Once you leave our Site or open one of those services, their own privacy policies apply, not ours. We are not responsible for their practices, and we encourage you to read their policies.

17. Changes to this policy

We review this policy at least once every 12 months, and we update it whenever our business, our tools or the law changes. When we do, we will change the “Last updated” date at the top and post the new version here. If a change materially affects how we handle information we have already collected from you, we will tell you by email or by a notice on the Site before it takes effect and, where the law requires it, ask for your consent. Previous versions are available on request.

18. How to contact us

Tsarukaeva Healthy Life LLC (dba Svetlana Tsarukaeva) 730 W Hallandale Beach Blvd #106 Hallandale Beach, FL 33009 United States

Email: Tsarukaeva.Svetlana@gmail.com Telephone: +1 (954) 670-4437

We answer privacy questions as quickly as we can, and formal privacy requests within 45 days.

If you need this policy in an accessible format, or need help exercising a right, tell us, and we will accommodate you – see also our Accessibility statement.