Privacy Policy
Last updated: January 2024
1. Information We Collect
When you use granitegym.com, we may collect the following information:
- Contact form submissions: name, email address, inquiry type, and message content
- Cookies: functional cookies for site operation and analytics cookies to understand usage patterns
- Technical data: IP address, browser type, referring URL, pages visited, and time on site (collected via analytics services)
We do not collect health information, payment card data, or physical waivers through this website. Waivers and payment are processed through separate systems at the gym or through designated third-party providers.
2. How We Use Your Information
We use collected information to:
- Respond to inquiries submitted through the contact form
- Understand how visitors use the site so we can improve it
- Protect the site from spam and automated abuse
- Comply with applicable legal obligations
We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Third-Party Services
The following third-party services may process data in connection with your use of this site:
- Schematic / form endpoint: contact form submissions are forwarded to Granite’s email via Schematic’s API. Data is not retained by Schematic beyond delivery.
- Cloudflare Turnstile: bot protection on the contact form. Privacy policy at cloudflare.com/privacypolicy.
- Cloudflare Web Analytics: privacy-first analytics with no cookies or personal identifiers. See cloudflare.com/web-analytics.
- Google Analytics 4: aggregate usage analytics. Enabled only with consent. See policies.google.com/privacy.
- Google Maps: embedded map on the Visit page. Google may collect data per their privacy policy at policies.google.com/privacy.
- Instagram: if an Instagram feed embed is enabled, Meta may collect data per their data policy at facebook.com/policy.
5. Data Retention
Contact form submissions forwarded to our email are retained in our email system and deleted at our discretion. Analytics data is retained per the default retention settings of each analytics provider (GA4 default: 2 months to 14 months depending on configuration). We do not build individual user profiles.
6. Your Rights
Depending on your location, you may have rights under applicable privacy law:
- EU/EEA (GDPR): right to access, rectification, erasure, data portability, and objection to processing
- California (CCPA): right to know what personal information is collected, right to delete, right to opt out of sale (we do not sell data)
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
7. Children’s Privacy
This site is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have received data from a child under 13, contact us and we will delete it promptly.
8. Security
This site is served over HTTPS. Form submissions are encrypted in transit. We do not store personal data on this site beyond what is logged by our hosting infrastructure (Cloudflare). We take reasonable technical and organizational measures to protect data from unauthorized access.
9. Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted to this page with a revised date. Material changes will be communicated where feasible.
10. Contact
Granite
410 Foundry St, Portland, OR 97209