TrainHeroic Privacy Policy
October 4, 2023
Train Heroic, LLC (“TrainHeroic”, “we,” or “us”) provides a variety of services and features directed to coaches, sport enthusiasts and athletes through our online and mobile fitness offerings provides information and tools to athletes and coaches to manage and provide training programs, assess performance, communicate and share data, provide educational information, and sell/purchase training content (“Services”).The TrainHeroic Services are provided through its websites (www.trainheroic.com, athlete.trainheroic.com, coach.trainheroic.com, coachapp.trainheroic.com, marketplace.trainheroic.com, teams.trainheroic.com, account.trainheroic.com, library.trainheroic.com), related mobile applications and all related subdomains. All of the above-identified websites and mobile applications are collectively referred to as the “Sites” and individually as a “Site.”
Some of the data we collect is considered “personally identifiable information,” “personal information” or “personal data” under applicable law (collectively referred to in this Privacy Policy as “Personal Data”). Generally, Personal Data is information that can be reasonably connected to an identified or identifiable individual. It does not include de-identified or anonymized data.
The purpose of this Privacy Policy is to disclose to you how we collect, use and share Personal Data and how we attempt to safeguard the Personal Data we collect and process. We are committed to securing the Personal data that we collect concerning you (“you”) and complying with applicable data protection and privacy laws. We may update this Privacy Policy from time to time. When we do, we will post an amended version of the Privacy Policy on our Sites. Please review this Privacy Policy periodically.
If you have any questions regarding data protection or your rights, please contact us:
Train Heroic LLC
Attn: Privacy Team
285 Century Place, Louisville, CO 80027
United States of America
Visit us at support.trainheroic.com
Email us at privacy@trainheroic.com
Call us toll-free (for the U.S.A.): 1-877-201-1442
We rely on the following legal grounds for the collection, processing, and use of personal data:
In some circumstances, the provision of your personal data is voluntary, but in many cases it is necessary in order to access the Sites and/or receive Services your request.
We collect, process and use Personal Data to allow us to provide our Sites and Services to you. For example, we use the Personal Data we collect to:
We obtain Personal Data directly from you, through cookies and other technologies, through your devices, and from third parties as described in this Policy and any other privacy notices we may provide to you when you interact with us.
In compliance with applicable law and our company practices, we do not knowingly collect Personal Data from children under 16 years of age or permit children under 16 years old to register for accounts on the Sites and Services without first obtaining consent from a parent or legal guardian. The exception to this is we will collect limited Personal Data from a child under 16 years old if they attempt to create an account and identify that they are under 16 years old. In that event, we will permit the child to create a limited, temporary account to provide contact information for a parent or legal guardian so that we can attempt to obtain consent. If we are unable to obtain verifiable consent within seventy-two (72) hours, we will delete the child’s account and Personal Data. We will fully activate an account only after receiving verifiable consent from a parent or legal guardian. We also permit parents and legal guardians of athletes under 16 years of age to contact us to request (1) what Personal Data we have about their child, (2) that we correct any incorrect Personal Data, (3) that we delete the Personal Data of their child, and/or (4) that we cease further collection or use of any Personal Data from their child. Please see our Terms of Use for more information.
We do not sell the Personal Data of children under 16 years old.
Types of cookies we use:
We use Cookies to: (a) estimate audience size and usage patterns; (b) understand and save your preferences for future visits, allowing us to customize the Sites and Services to your individual needs; (c) advertise new content, events and services that relate to your interests; (d) keep track of advertisements and search engine results; (e) compile aggregate data about Site traffic and Site interactions to resolve issues and offer better Site experiences and tools in the future; and (f) recognize when you return to the Site(s). We set some Cookies ourselves and others are set by service providers. We use Cookies set by service providers to provide us with useful information to help us improve our Sites and Services, to conduct advertising, and to analyze the effectiveness of advertising.
You can control the use of cookies at the browser level by setting your web browser controls to accept or refuse cookies. If you choose to block all cookies (including essential cookies) you may not be able to access all or parts of our Sites and Services. In addition, most advertising networks offer you a way to opt out of targeted advertising. If you would like to find out more information on this, please visit the websites: http://www.aboutads.info/choices/ or http://www.youronlinechoices.com or http://globalprivacycontrol.org.
The Sites recognize the Global Privacy Control (GPC) signal. If you are using a browser setting or plug-in that sends and opt-out preference signal to the Site you visit, we will treat that as a valid request to opt out. To download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use.
Some internet browsers incorporate a “Do Not Track” feature that signals to websites you visit that you do not want to have your online activity tracked. Given that there is not a uniform way that browsers communicate the “Do Not Track” signal, the Site does not currently interpret, respond to or alter its practices when it receives “Do Not Track” signals.
We may provide access to Personal Data to others in the following ways:
When you register for an account with us, you will be required to choose a password which enables you to access our Sites and Services. You are responsible for keeping this password confidential and for all activity that takes place through your account credentials. Do not share your password with anyone. If your password is compromised, change your password within your account. If you believe your account may have been compromised, please notify us immediately.
We take industry standard security measures to protect your information. We also have put into place appropriate agreements and/or procedures with our service providers to ensure that your Personal Data is treated consistent with applicable data privacy and security laws. Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your Personal Data, we cannot and do not guarantee the security of your data.
We will store your Personal Data for as long as: (a) you maintain an account with us; (b) you continue using our Sites and Services; (c) your Personal Data is stored in our backup servers and/or services; (d) in accordance with our retention policies and schedules; and (e) as long as we are legally required to retain the Personal Data. Data can be deleted upon request.
We value all of our users, and it is our goal to provide an excellent experience for all our users, including our users with disabilities. You understand and accept, however, that some of the features of the Site and Services may not be fully accessible because they are provided by third-parties or have errors. If you wish to access this Privacy Policy in an alternate format, or would like to report an issue you are experiencing on our Sites or Services, please email us at support@trainheroic.com. You expressly agree to attempt to resolve any and all issues with accessibility directly with us and in good faith prior to instituting any legal action against us.
Depending on the state in which you reside, you may have certain privacy rights regarding your personal data. If you are a California resident, please see our “Notice to California Residents” section below. For other state residents, your privacy rights may include (if applicable):
We do not sell personal data. However, depending on how applicable privacy laws define a “sale,” our use of cookies and tracking technologies may constitute a sale of personal data (i.e., information from cookies) to third-party advertisers and analytics companies. Our Sites also use cookies and other tracking technologies to display advertisements about our products to you on nonaffiliated websites, applications, and online services. This is “targeted advertising” under applicable privacy laws. We do not use personal data for profiling in furtherance of “decisions that produce legal or similarly significant effects” concerning individuals.
To exercise your rights, please submit a request through our Privacy Request Page, emailing us at privacy@trainheroic.com or calling us at 1-877-201-1442. If legally required, we will comply with your request upon verification of your identity and, to the extent applicable, the identity of the individual on whose behalf you are making such request. To do so, we will ask you to verify data points based on information we have in our records. If you are submitting a request on behalf of another individual, please use the same contact methods described above. If we refuse to take action regarding your request, you may appeal our decision by emailing us at privacy@trainheroic.com or calling us at 1-877-201-1442.
This Privacy Notice to California Consumers (“CA Notice”) is for California residents and supplements the other sections of our Privacy Policy. This CA Notice explains how we collect, use and disclose your “Personal Information” (as that term is defined by California law) and how you may exercise your rights under the California Consumer Privacy Act (“CCPA”). This Notice is intended solely for, and is applicable only as to, California residents. If you are not a California resident, this does not apply to you.
NOTE: If you are a California resident and a current or former employee, job applicant or independent contractor of TrainingPeaks, please see our Privacy Policy for California Employees, Former Employees & Job Applicants for more information on our collection, use and storage of your Personal Information in that capacity.
NOTICE AT COLLECTION OF PERSONAL INFORMATION. To provide you with our products, Sites and Services, we collect and process information about you, including in some cases, Personal Information. To comply with the CCPA and to assist you in understanding our data collection and protection practices during the past 12 months:
Category of Personal Information | Categories of Third Parties |
Unique personal identifiers (such as browser information, IP address, date and time of visit, device identifiers, unique user IDs, cookies, beacons, pixel tags, mobile ad identifiers, or other similar technology) | Advertising networks/service providers. |
The following table identifies the categories of Personal Information that we disclosed for a business purpose in the 12 months preceding the Last Updated date of this Privacy Policy and, for each category, the categories of recipients to whom we disclosed Personal Information. Please note that not all categories of personal information were necessarily shared with all categories of recipients listed.
Category of Personal Information | Categories of Recipients |
Identifiers (name, alias, account name, email address, Internet Protocol address, online identifiers, other similar identifiers) | Coaches; other app providers; data hosting and cloud storage providers; mailing providers; accounting and billing service providers; client relationship management service providers; payment processing vendors, API partners. |
Unique personal identifiers (cookies, beacons, pixel tags, mobile ad identifiers, or other similar technology) | Data hosting and cloud storage providers; advertising service providers; cookie and privacy management provider; client relationship management service providers. |
Physical characteristics or description | Coaches; other app providers; data hosting and cloud storage providers; client relationship management service providers. |
Telephone number | Coaches; client relationship management service providers; data hosting and cloud storage providers. |
Account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account | Client relationship management service providers; security, anti-fraud, and verification providers; data hosting and cloud service providers; payment processing vendors. |
Internet or other electronic network activity information (browsing history; search history; and information regarding an individual’s interaction with a website, application or advertisement) | Data hosting and cloud storage providers; cookie and privacy management provider; error logging provider; website hosting providers; advertising service providers. |
Commercial information (records of products or services purchased, obtained, or considered, or other commercial information) | Coaches; data hosting and cloud storage providers; mailing providers; accounting and billing service providers; advertising service providers; client relationship management service providers; payment processing vendors. |
Biometric data | Coaches; other app providers (if you share it); data hosting and cloud storage providers; client relationship management service providers. |
Fitness data | Coaches; other app providers (if you share it); data hosting and cloud storage providers; client relationship management service providers. |
Audio, electronic, visual, or similar information that is linked or reasonably linkable to an individual (photos) | Coaches; other app providers (if you share it); data hosting and cloud storage providers; client relationship management service providers. |
Video | Coaches; other app providers (if you share it); data hosting and cloud storage providers; client relationship management service providers. |
RIGHT TO KNOW | You have the right to request that we disclose to you the Personal Information we collected about you in the 12-month period preceding your request. This right includes the right to request: (1) specific pieces of Personal Information we have collected about you; (2) categories of Personal Information we have collected about you; (3) categories of sources from which the Personal Information was collected; (4) categories of Personal Information that we sold or disclosed for a business purpose about you (if applicable); (5) categories of third parties to whom your Personal Information was sold or disclosed for a business purpose (if applicable); and (6) the business or commercial purpose for collecting or, if applicable, selling your Personal Information. |
RIGHT TO DELETE | You have the right to request that we delete your Personal Information that we have collected from you, with some exceptions. Note that if you request that we delete your information, we may be unable to provide you with certain offers or services. |
RIGHT TO CORRECT | You have the right to correct inaccurate Personal Information we maintain about you. |
RIGHT TO OPT OUT OF SALE OR SHARING | You have the right to say no to the sale of Personal Information or the sharing of your Personal Information for cross-context behavioral advertising purposes. We do not sell Personal Information, but we do engage in advertising practices that could be considered cross context behavioral advertising. |
RIGHT TO LIMIT PROCESSING OF SENSITIVE PERSONAL INFORMATION | If we use or disclose Sensitive Personal Information for purposes other than those allowed by the CCPA and its regulations, you have the right to limit our use and disclosure. We do not collect, use or disclose Sensitive Personal Information for any purposes other than to provide our Sites and Services to you. |
RIGHT TO NON-DISCRIMINATION | You have the right to non-discrimination for exercising your CCPA rights. This means we cannot deny you goods or services, charge you different prices, or provide a different level of quality of goods or services just because you exercise your rights under the CCPA. We do not will not discriminate against you for exercising your CCPA rights. |
Right to Opt Out of the Sale of Sharing of Data for Cross Context Behavioral Advertising. You have the right to opt-out of the sales of your Personal Information and the sharing of your Personal Information for cross context behavioral marketing. You may exercise your right to opt out of targeted advertising cookies though our cookie management tool. You may adjust your cookie preferences by visiting trainheroic.com and selecting the cookie setting in the footer banner or the widget tool icon in the bottom left corner. Widget Icon:
Our Process for Verifying a Request to Know, Delete, and/or Correct. We will comply with your request upon verification of your identity and, to the extent applicable, the identity of the California resident on whose behalf you are making such request. We will verify your identity either to a “reasonable degree of certainty” or a “reasonably high degree of certainty” depending on the sensitivity of the Personal Information and the risk of harm to you by unauthorized disclosure, deletion, or correction as applicable. For requests to access categories of Personal Information and for requests to delete or correct Personal Information that is not sensitive and does not pose a risk of harm by unauthorized deletion or correction, we will verify your identity to a “reasonable degree of certainty” by verifying at least two data points that you previously provided to us and which we have determined to be reliable for the purpose of verifying identities. For requests to access specific pieces of Personal Information or for requests to delete or correct Personal Information that is sensitive and poses a risk of harm by unauthorized deletion or correction, we will verify your identity to a “reasonably high degree of certainty” by verifying at least three pieces of Personal Information you previously provided to us and which we have determined to be reliable for the purpose of verifying identities. In addition, you must submit a signed declaration under penalty of perjury stating that you are the individual whose Personal Information is being requested.
| Requests to Know | Requests to Delete | Requests to Opt Out of Sales |
Number of requests received | 1 | 1 | 0 |
Number of requests complied with in whole | 1 | 1 | 0 |
Number of requests complied with in part | 0 | 0 | 0 |
Number of requests denied | 0 | 0 | 0 |
Average number of days to complete a request | 1 | 1 | 0 |
The General Data Protection Regulation (“GDPR”) applies to individuals located in the European Economic Area (“EEA”). The GDPR allows us to collect and use personal information from individuals within the EEA only for one or more of the following reasons:
We do not operate in the EEA or specifically direct our business to consumers in the EEA. However, we recognize some of our website users, customers and prospective customers could be located within the EEA. If you reside in the EEA, you have a number of rights under data protection laws in relation to the way we process your Personal Data, which are set forth below. You may contact us directly to exercise any of these rights, and we will verify your request and, if appropriate, respond to any request received from you within one month from the date of the request. In exceptional circumstances we may need to extend this timescale, but we will always tell you in advance if we do, and our reasons why.
Right 1 | A right to access personal data held by us about you, as well as information about how we are using your data. |
Right 2 | A right to require us to rectify any inaccurate personal data held by us about you. |
Right 3 | A right to require us to erase personal data held by us about you, and where the personal data has been made public, for other controllers processing the personal data to also erase links to, or copy or replication of, such personal data. This right will only apply where (for example): we no longer need to use the personal data to achieve the purpose we collected it for; or where you withdraw your consent if we are using your personal data based on your consent; or where you object to the way we process your data (in line with Right 6 below). |
Right 4 | A right to restrict our processing of personal data held by us about you. This right will only apply where (for example): you dispute the accuracy of the personal data held by us; or where you would have the right to require us to erase the personal data but would prefer that our processing is restricted instead; or where we no longer need to use the personal data to achieve the purpose we collected it for, but you require the data for the purposes of dealing with legal claims. |
Right 5 | A right to receive personal data, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to require us to transfer this personal data to another organization, at your request. |
Right 6 | A right to object to our processing of personal data held by us about you (including for the purposes of sending marketing materials to you). |
Right 7 | A right to withdraw your consent, where we are relying on it to use your personal data (for example, to provide you with marketing information about our services or products). |
If you have any concerns regarding our processing of your personal data, or are not satisfied with our handling of any request by you in relation to your rights, please get in touch with our team through the contact information provided in Section 2 of this Privacy Policy. You may also reach out to your applicable Data Protection Authority (“DPA”) for more information. There is a DPA located in each EU Member State.
