Privacy Policy

Effective Date: August 8th, 2025

LBPfix (“we,” “us,” or “our”) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines how we collect, use, store, and protect your information when you interact with our website and services.

By using our website or services, you agree to the terms of this Privacy Policy.

1. Information We Collect

We collect health-related data only with your explicit consent, obtained via unchecked checkboxes in our Tally.so survey. You may withdraw consent at any time by emailing lbpfix@gmail.com, and we will cease processing your data, subject to legal obligations.

We may collect the following personal information:

Full name
Email address
Payment information (processed securely via Stripe)
Health-related information regarding your lower back pain (collected via Tally.so questionnaires)
Website usage data, including cookies and analytics (via Google Analytics)

We do not intentionally collect IP addresses directly. However, third-party services we use may automatically collect certain technical data, including IP addresses.

2. How We Use Your Information

We use your information to:

Provide access to our rehabilitation programs
Assess your eligibility for participation
Process payments securely
Deliver emails, updates, and program materials (via MailerLite)
Analyze website traffic and improve our services
Comply with applicable legal requirements

3. Sharing of Information

We do not sell, rent, or trade your personal information to third parties.
However, we may share your information with trusted service providers to operate our business effectively, including:

WP Engine (website hosting)
MailerLite (email communications)
Stripe (payment processing)
Zapier (automation workflows)
Tally.so (form and questionnaire management)
Google Analytics (website traffic analysis)

These service providers are obligated to maintain the confidentiality and security of your information.

4. Use of Cookies

We use cookies and similar tracking technologies to:

Provide a personalized website experience
Analyze traffic patterns and site usage
Facilitate targeted marketing and retargeting campaigns

You can control cookie settings through your browser settings. Please note that disabling cookies may affect your user experience.

5. Data Storage, Security, and Health Data Protection

Your data is stored on secure servers in Canada, the United States, or the European Union, depending on our service providers (e.g., WP Engine, Tally.so). For EU/EEA residents, data transfers outside the EEA are protected by Standard Contractual Clauses or other GDPR-compliant mechanisms. We take appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, or misuse.

Health Data Protection
We collect health-related information (e.g., back pain details) via Tally.so surveys to assess program eligibility. This data is considered Protected Health Information (PHI) under the U.S. Health Insurance Portability and Accountability Act (HIPAA) and Personal Health Information under Canada’s Personal Health Information Protection Act (PHIPA). We use HIPAA/PHIPA-compliant measures, including encryption and access controls, to protect your PHI. Our service providers (e.g., Tally.so, MailerLite) sign Business Associate Agreements (BAAs) or equivalent to ensure compliance. PHI is used solely for eligibility assessment and program delivery and is not shared without your explicit authorization.

We retain your personal information only as long as necessary for the purposes outlined (e.g., survey data is deleted within 30 days if you don’t qualify for the program, and program data is retained for the duration of your participation). Payment information is not stored after processing by Stripe.

6. Your Rights

You have the right to:

Access the personal information we hold about you
Request corrections to your personal information
Request the deletion of your personal information

If you are an EU/EEA resident, under the General Data Protection Regulation (GDPR), you have the right to:

Access, correct, or delete your personal data.
Request data portability (receive your data in a structured format).
Object to or restrict data processing.
Withdraw consent at any time by contacting lbpfix@gmail.com.

We process your data based on your explicit consent (via survey checkboxes) or our legitimate interest in providing services. If your data is transferred outside the EEA (e.g., to Canada or the U.S.), we use Standard Contractual Clauses to ensure adequate protection.

To exercise any of these rights, please contact us at: lbpfix@gmail.com

We will respond to your request within a reasonable timeframe.

7. Children’s Privacy

Our services and surveys are intended for individuals 18 and older due to the health-related nature of our program. We do not knowingly collect personal information from individuals under 18 without parental consent. If we discover such data, we will delete it promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
The updated version will be posted on our website with the updated effective date.

9. Contact Us

For questions, concerns, or to exercise your privacy rights, contact us at: Email: lbpfix@gmail.com

We aim to respond within 30 days for GDPR/CCPA requests or 45 days for HIPAA requests, with possible extensions per applicable laws.