Privacy Policy
Last updated: 27 August 2026
This policy explains what personal data claudiavgarcia.com collects, why, and what you can do about it. The data controller is Claudia Garcia, Charlotte, North Carolina — fitnesswithclaudiag@gmail.com.
What we collect
If you only browse the public site, we collect nothing that identifies you. If you create a portal account we store your name, your email address and an encrypted form of your password, plus whether your membership is active. If you pay by card we also store the customer identifier our payment processor gives us. We never see or store your full card number.
Why we use it
To give you access to the portal, to take and manage your monthly payment, to show you the right content, and to contact you about your account — a confirmation email, a password reset, or a notice about a change to the service or the price.
Who else handles your data
Three providers process data on our behalf, and only for us: Supabase (account and membership database, hosted in the United States), Stripe (card payments and subscription management — Stripe is the party that handles your card details, under its own privacy policy), and Vercel (website hosting and server logs). We do not sell your data, and we do not share it with advertisers.
Marketing
We only email you about your account and your membership. If we ever want to send you promotional email, we will ask for your consent first, and every such email will carry an unsubscribe link.
Cookies
The portal sets a small number of strictly necessary cookies: one that keeps you logged in, and one that remembers whether you prefer English or Spanish. We do not use advertising or cross-site tracking cookies.
How long we keep it
We keep your account data while your account exists. If you close your account we delete your profile within 30 days, except for the payment records Stripe and we are required to keep for tax and accounting purposes — those are kept as long as US law requires.
Your rights
You can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete your account and data. Write to fitnesswithclaudiag@gmail.com and we will respond within 30 days. If you are in the EU or UK, you also have the right to object to processing and to complain to your local data protection authority.
Children
The portal is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
Security
Passwords are stored hashed, never in plain text. Access to member content is enforced at the database level, so a member can only ever read their own account. Traffic to the site is encrypted with HTTPS. No system is perfectly secure, but if a breach ever affects your data we will notify you.
Changes
If we change this policy we will update the date above and, for material changes, notify members by email.