Privacy Policy

This privacy policy describes how Timber & Steel ("we," "us," or "our") collects, uses, and protects your personal information when you interact with our website, scheduling system, or communications.

We collect information you provide directly to us, including:

• Name, email address, and phone number when you schedule an appointment, complete an intake form, or contact us directly
• Health and fitness information you voluntarily share as part of our coaching or onboarding process
• Payment information (processed securely through third-party providers)

We don't sell contact lists or provide them to other businesses for unsolicited outreach.

If you allow ad measurement, we also collect campaign tags, ad-click or browser identifiers and browser information for that purpose. Your optional measurement choice is separate from permission to receive texts or emails.

Google Tag Manager manages our Google Analytics, Meta Pixel and Contentsquare tags. If you allow ad measurement, Google Analytics helps us understand website visits and marketing performance. Google may receive page and referrer paths, browser and device information, and analytics identifiers. We configure its page and referrer information without query strings, and disable Google Signals and advertising personalization in this setup. See Google's Privacy Policy. The Meta Pixel can also report a page visit after you allow ad measurement. Confirmed booking and membership reporting follows the separate rules below.

We also keep aggregate counts of visits and booking-page activity to understand whether the page and calendar work properly. These counts don't use cookies or visitor identifiers, and don't include your form answers or booking details. We group them by day and a limited set of advertising campaign labels, retain them for up to 90 days, and don't send them to Meta or Contentsquare. These basic counts are separate from optional ad measurement and page recordings.

We use Contentsquare on our Getting Started page for visits carrying our paid Meta advertising tags, to understand clicks, scrolling and page usability through masked session recordings. Recording starts automatically unless you have opted out, your browser sends a Global Privacy Control signal, or a stored privacy choice prevents it. The recording setup masks form controls and the embedded booking calendar, removes page and referrer query strings, and masks link destinations. We don't send Contentsquare your booking details or coaching notes. See Contentsquare's privacy information.

If you have opted in to receive SMS messages from Timber & Steel — for example, by checking the consent box on our Acuity Scheduling intake form — we may send you text messages related to your appointments, goal reviews, waitlist availability, and member communications.

• Message frequency varies based on your activity and membership status
• Message and data rates may apply.
• To opt out of SMS at any time, reply STOP to any message you receive from us. You may also contact us directly at contact@timberandsteelgym.com.
• For help, reply HELP or contact us at 208-615-5143.

Opting out of SMS does not affect your membership or any other services.

We use the information we collect to:

• Schedule and manage your appointments and coaching sessions
• Send appointment reminders, goal review notifications, and member updates
• Respond to your questions and requests
• Improve our services

We use service providers to operate our scheduling, customer records, communications, payments and website. We may share information with those providers as needed to provide our services, or when required by law. We don't sell contact lists or give them to other businesses for unsolicited calls, texts or emails.

With your permission, we use Meta to measure which ads lead to booked consultations and new memberships. We may send Meta the type and time of those events, a stable event identifier, a hashed version of your email, permitted ad identifiers and browser information. Hashing lets Meta match an email to an account; it doesn't make the information anonymous. Meta's handling of the information is governed by its own policies, including its advertising policies. See Meta's Privacy Policy.

These measurement uploads don't include your health or coaching notes, goals, program details, phone number, payment details or membership price. We don't upload contact lists for unsolicited outreach. Booking and membership events aren't proof of payment.

You may contact us at any time to:

• Request access to or correction of the information we hold about you
• Request deletion of your personal data
• Opt out of any communications from us

Reach us at contact@timberandsteelgym.com or 208-615-5143.

Page recordings and advertising measurement have separate defaults. Masked recordings on Getting Started are on unless you opt out; advertising measurement stays off unless you allow it. Choose Opt out to turn both off, or Allow ad measurement to allow both. Existing refusals are preserved. You can use Privacy settings in the website footer to change your choice in this browser at any time. We also honor a Global Privacy Control opt-out signal when your browser provides one; it keeps both off even if you previously allowed them. Declining measurement doesn't affect booking, coaching or membership.

Changing your choice stops future measurement sharing through these connections; it can't recall information Meta or Contentsquare has already received. After you turn recordings off, a new permission can resume recording on your next visit to Getting Started. You can contact us using the details above about information we've already collected.

We remember permissions for up to 180 days in this browser. Stored refusals remain effective until you explicitly change them or remove the stored settings. Attribution and copied matching details in our tracking system expire after 30 days. We retain minimal event receipts and hashed acquisition records to prevent duplicate counts. Separate scheduling and customer records follow their existing retention process.

We take reasonable precautions to protect your information. Sensitive data is transmitted using encryption (HTTPS). Access to personal information is limited to staff who need it to perform their role.

This policy may be updated periodically. Changes will be posted on this page with a revised date.