Privacy Policy
Effective Date: September 28, 2026

BeyondReady Rehab (BeyondReady Rehab LLC) respects your privacy. This policy explains what we collect, why, who we share it with, and the rights you have. The data controller is BeyondReady Rehab LLC, 5441 S Macadam Ave, Ste N, Portland, OR 97239, contact [email protected].

1. Information we collect

  • You give us: name, email address, phone number, country and time zone, billing details, and the contents of messages you send us.

  • Health and training information you provide through the application, intake form, coaching calls, assessments, and training logs: injury and surgery history, dates of surgery, symptoms and pain reports, medical clearances and restrictions, information about your treating clinicians and their plan, physical assessment measurements, training performance data, and photos or video you send for movement review.

  • Automatically: IP address, device and browser type, pages viewed, referring source, and cookie and analytics data.

  • Payment card details are collected and processed by Kajabi Payments. We never see or store your full card number.

2. Why we use it, and our legal basis

Delivering coaching, programming, assessments, and support — performance of a contract.
Programming safely around your injury and medical restrictions — necessary to perform our contract with you, together with your explicit consent (health data).
Taking payment, invoicing, and managing payment plans and subscriptions — contract; legal obligation.
Responding to enquiries and applications — contract / pre-contractual steps.
Sending marketing emails and program updates — consent (you may withdraw at any time).
Site analytics, security, and improving our services — legitimate interests.
Keeping records for tax, accounting, and defending legal claims — legal obligation; legitimate interests.

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising.

3. Health information — how we treat it

Health information you share is used only to coach you safely and to build and adjust your program. It is never sold, never shared with employers, insurers, or teams, and is not published or used in marketing unless you give separate written permission. We are not a HIPAA-covered entity — BeyondReady Rehab is a coaching business, not a healthcare provider, so HIPAA does not apply to the information you give us here. We nevertheless treat it as confidential. If you ask us to communicate with your physical therapist, surgeon, or physician, we will only do so with your written authorization.

4. Who we share it with

We use third-party service providers to run the business. Each receives only what it needs, and processes it on our instructions:

  • Kajabi — website hosting, checkout, email, forms, member portal, contact records

  • Kajabi Payments — payment processing

  • TrainHeroic — training program delivery, session logging, exercise video review

  • Google Workspace, Drive and Sheets — business email, documents, return-to-sport assessment dashboard

  • Google Meet — coaching calls

  • Calendly — call scheduling

  • Cloudflare — DNS and site delivery and security

  • Google Analytics — website analytics

  • Meta Platforms (Instagram and WhatsApp) — Instagram is our main social channel; some coaching communication happens over WhatsApp at the client's preference. If you message us on Instagram or WhatsApp, Meta processes those messages. We also see aggregate, non-identifying audience statistics

  • YouTube (Google) — hosting for our exercise library and funnel videos

  • Zapier — passing information between the tools above

We may also disclose information where required by law, to enforce our Terms, or in connection with a sale or transfer of the business.

5. International transfers

We operate from Oregon, USA, and our service providers are primarily US-based. Wherever in the world you live, if you are outside the United States your information will be transferred to and processed in the United States, where privacy laws may differ from those in your country. By using our Services you understand and accept this.

Where your country requires a specific legal mechanism for that transfer, we use one. For clients in the European Economic Area, Switzerland, and the United Kingdom, we rely on the European Commission's Standard Contractual Clauses and the equivalent Swiss and UK mechanisms in our vendor agreements.

6. How long we keep it

  • Coaching, health, and assessment records: for the duration of your program and 3 years afterwards, so we can support you if you return.

  • Financial and tax records: 7 years, as required.

  • Marketing contacts: until you unsubscribe, then suppression-list only.

  • Analytics data: per the retention settings of the analytics provider.

We delete or anonymize data at the end of these periods unless we are legally required to keep it.

7. Your rights

Wherever you live, you may: access the information we hold about you; correct it; ask us to delete it; get a copy in a portable format; unsubscribe from marketing at any time using the link in any email or by replying; and withdraw consent for our use of your health information (note that we cannot safely continue coaching you without it).

If you are in the EEA, Switzerland, or the UK, you additionally have the right to restrict or object to processing, and the right to lodge a complaint with your local supervisory authority — in Switzerland, the Federal Data Protection and Information Commissioner.

If you are a resident of California, Oregon, or another US state with a consumer privacy law, you may exercise the rights that law gives you, including the right to know, delete, correct, and opt out of sale or targeted advertising. We do not sell personal information. We will not discriminate against you for exercising any right.

If you live somewhere whose law gives you rights beyond those listed above, tell us and we will honour them. We would rather apply the stronger standard than argue about which country's rules reach us.

To exercise any right, email [email protected]. We will respond within 30 days and may need to verify your identity first.

8. Cookies and tracking

We and our providers use cookies and similar technologies for essential site function, checkout, remembering you, and analytics. You can control cookies through your browser settings; blocking essential cookies may break checkout or the member portal.

9. Marketing communications

If you opt in, we will send program updates, education, and offers. Every email has an unsubscribe link and our postal address. We will only send you text messages if you have separately agreed to receive them; message and data rates may apply and you can stop at any time by replying STOP.

10. Children

Our Services are not directed to children under 13 and we do not knowingly collect their information. Clients under 18 require parent or guardian consent — see the Terms. If you believe a child has given us information, contact us and we will delete it.

11. Security

We use industry-standard safeguards, including reputable vendors, two-factor authentication on our business accounts, and access limited to the owner. No online system is 100% secure, and we cannot guarantee absolute security. If a breach affects your personal information, we will notify you and any required authority as the law requires.

12. Changes

We may update this policy; material changes will be posted here with a new Effective Date and notified by email to active clients.

13. Contact

📧 [email protected]
📮 5441 S Macadam Ave, Ste N, Portland, OR 97239