Privacy Policy

Introduction

At James Martial Arts Academy (we, us, our), privacy is a top priority. This Privacy Policy explains our collection, use, and protection of personal information when you access our website, purchase services, or interact with our AI-powered features and CRM systems. We will update this Policy as needed and encourage review with every visit.

Information We Collect

• Personal Data: Name, contact details, demographic info, account details, social media profiles.
• Derivative Data: IP address, browser, device ID, geolocation, site activity (includes cookies).
• AI Data: Voice recordings, transcripts, contextual data from AI voice/text agents.
• Financial Data: Payment details processed by Stripe, PayPal, Intuit (see their Privacy Policy).
• Mobile/Social Networking Data: Device info, social profile data, app activity when using site/app.
• Other Data: Contest/survey data supplied for promotions/events.

AI Technologies and Data Processing

• AI technologies may process personal data to automate responses, ensure quality, and enhance user experience with strict data minimization.
• Right to opt out of AI voice recording at any time.
• AI decisions about users available on request. Human review of automated decisions is available.
• AI data deletion requests honored via [email protected].

How We Use Your Information

• Provide requested products/services and administer accounts.
• Correspond, process payments/refunds, communicate offers.
• Personalize experience, generate anonymous stats for business analysis.
• Train and improve AI systems with technical/human oversight.
• Targeted advertising, limited by opt-out rights and setting controls.

Security

• Encrypted storage and secure transmission (SSL) for sensitive data.
• Access controls, staff confidentiality, regular security audits (including AI data).
• All transactions handled via secure gateways; no financial data stored on our servers.

Data Sharing Commitment

• We DO NOT sell your personal data.
• Information shared only with trusted service providers (Stripe, PayPal, Intuit, HighLevel CRM, Spark Membership CRM) solely for processing services, under strict confidentiality.
• SMS opt-in data used only for SMS services and will not be shared with third parties.
• Do Not Sell My Personal Information: California residents may request opt-out for any future data sales.

Cookies and Advertising

We use cookies, pixels, and analytics tools (Google, Facebook) for ad measurement and remarketing. Users may opt out of targeted ads and analytics via browser settings and provided opt-out links. Disabling cookies may impact site function.

SMS/Text Message Privacy

• SMS opt-in data and consent will not be shared with third parties except those needed for technical delivery.
• Text STOP to opt out of SMS communications at any time. Opt-out confirmed via SMS reply.

White-Labeled CRM Services

• HighLevel CRM service delivered under our brand; infrastructure and data are managed by GoHighLevel, whose privacy policy applies.
• In case of platform issues or breach, clients may need to contact GoHighLevel directly.

Data Retention and Rights

• Personal data kept only as long as needed for legitimate business or legal purposes, or until deletion requested. AI voice recordings are retained up to 90 days and transcripts up to 12 months, unless longer retention is required for compliance.
• Users have the right to update, correct, get a copy, transfer, or request deletion of personal data any time by emailing [email protected].
• Account termination or service limitations may occur when data is deleted as requested.

California Privacy Rights (CCPA)

• California residents can request, free of charge, data collected/stored about themselves or household members, including deletion of any personal data (see CCPA).
• Verification of identity and residency required. Email requests to [email protected].
• Annual review and policy update commitment: We review and update this policy, at minimum, every 12 months or as regulations change.

COPPA: Children's Privacy

• We do not collect personal information from children under 13 or market intentionally to them.
• Parents/guardians may request deletion if accidental collection occurs.

Fair Information Practices

• Responsive data breach notification via email within 7 business days of discovery.
• Individual redress available for users affected by non-compliance.

CAN-SPAM Compliance

Email unsubscribe options are available with every email communication and via [email protected].

HIPAA

• Health information submitted to our systems is protected under HIPAA privacy and security standards (SSL transmission, access controls, minimum necessary disclosure).
• AI systems processing health data include enhanced controls, encryption, and tracked access.

AI Ethics and Commitments

• Transparency: AI use is clearly disclosed.
• Human oversight, privacy by design, regular AI audits, non-discrimination, and accountability commitments.
• Ethical reviews and user opt-out options for AI features.

If you have questions about how we handle your information, please contact us about our privacy policy.