Privacy Policy | Urvil Performance

This Privacy Policy describes how Urvil Performance LLC ("we", "us", "Urvil Performance") collects, uses, and protects personal information when you use this website at urvilperformance.com or any service offered through it.

Who controls your data

Urvil Performance LLC is the controller (also referred to as a "business" under California law) of personal information submitted through this site. We engage Signal X Studio LLC as our technical service provider to operate the website and process this information on our documented instructions. Signal X Studio LLC does not use your information for its own purposes.

What we collect

We only collect information you actively provide through site forms, plus minimal technical metadata:

Program subscriptions (Stripe Checkout): name, email, billing address, and payment method. Card details are handled directly by Stripe and never reach our servers.
Coaching applications: name, email, position, year, current vertical, training availability, goals.
Contact messages: name, email, inquiry type, age (if athlete-related), message.
Liability waivers: name, date of birth, contact information, emergency contact, self-reported medical conditions, injuries, medications, and a typed signature. For athletes under 18, the same information for a parent or guardian.
Technical metadata: IP address, browser user-agent, and timestamps are recorded with every form submission for fraud prevention and dispute defense.

Sensitive information

The liability waiver collects self-reported health-related information. We treat this information as sensitive personal information. We do not sell, rent, share, or use it for advertising or profiling. It is stored only for the purpose of safely delivering training services and managing program liability.

Urvil Patel is a Doctor of Physical Therapy student, not a licensed physical therapist. Information you provide on the waiver is not subject to HIPAA because Urvil Performance is not a HIPAA-covered entity. We nevertheless apply HIPAA-style handling practices (access controls, encryption at rest, minimum necessary use).

How we use it

We use your information to:

Deliver the training program or coaching you signed up for
Process subscription payments and prevent fraud
Respond to your questions and applications
Maintain a record of signed liability waivers as required for the safe operation of our services
Comply with legal obligations (e.g., tax records, responding to lawful requests)

We do not sell or share your personal information for cross-context behavioral advertising. We do not target advertising to users under 16.

Service providers and sub-processors

We use the following third parties to operate the site. Each acts as our service provider and is bound by their own privacy commitments:

Cloudflare, Inc.: hosting, content delivery, edge security, database (D1), and email delivery (Email Workers).
Stripe, Inc.: payment processing and subscription billing.
TrainHeroic, Inc.: program delivery and workout tracking for subscribed athletes.
YouTube (Google LLC): embedded intro video, served from youtube-nocookie.com (no cookies set until you play the video).

How long we keep it

Subscription records: kept for the life of your subscription and for 7 years afterward (tax / dispute defense).
Liability waivers: kept for 7 years after your last training session (the standard statute-of-limitations window for personal-injury claims in most states).
Contact and application messages: kept for 2 years from receipt unless they become part of an active customer record.
IP / user-agent metadata: kept for the same period as the form record it was attached to.

Your rights

Depending on where you live, you may have the right to:

Know what personal information we hold about you
Request a copy in a portable format
Correct information that is inaccurate
Delete your information, subject to legal retention requirements (we are required to keep signed waivers and tax-relevant subscription records)
Opt out of any sale or sharing of personal information for behavioral advertising (we do not do this)
Withdraw consent for any optional processing

To make a request, email urvilperformance@gmail.com with the subject line "Privacy Request". We will verify your identity and respond within 30 days (extendable to 45 if needed). There is no charge for a reasonable request. You may also designate an authorized agent.

Children under 13

This site is not directed at children under 13. We do not knowingly collect information from anyone under 13. If you believe a child under 13 has submitted information through this site, please email urvilperformance@gmail.com and we will delete it.

For athletes aged 13 to 17, our liability waiver requires a parent or legal guardian to provide written consent before any training services begin.

Security

We use encryption in transit (TLS) and encryption at rest (Cloudflare D1 platform encryption). Self-reported health information on the liability waiver is additionally encrypted at the application layer using AES-GCM with a key held only as a Cloudflare Pages secret. Access to production systems is limited to Urvil Patel (Urvil Performance LLC) and authorized personnel of Signal X Studio LLC. No system is perfectly secure; we cannot guarantee absolute security.

Data breach notification

If we become aware of a security breach affecting your personal information, we will notify you and applicable regulators within the timeframes required by law.

International users

This site is operated from the United States. If you access the site from outside the U.S., your information will be transferred to and processed in the U.S. and other jurisdictions where our service providers operate.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date. Continued use of the site after a change constitutes acceptance of the updated policy.

Contact

Urvil Performance LLC
Email: urvilperformance@gmail.com