Privacy Policy

Last Updated: May 27, 2026

Effective Date: May 27, 2026

Able Years LLC (“Able Years,” “we,” “us,” or “our”) operates the website at https://ableyears.com and provides fitness coaching services in Spokane, Washington. This Privacy Policy describes how we collect, use, share, retain, and protect personal information when you visit our website, submit forms, communicate with us, or use our services.

By using our website or providing personal information to us, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our website or provide personal information.

Plain-Language Summary

This Privacy Policy explains how Able Years LLC handles your personal information — name, email, phone number, ZIP code, IP address, and similar website-usage data.

Personal information that qualifies as “consumer health data” under Washington's My Health My Data Act (such as your Independence Assessment answers, fall history, pain locations, or medical conditions) is covered by a separate document — the Consumer Health Data Privacy Policy. If you are taking the Independence Assessment or enrolling as a member, please read both.

Three things we want you to know:

We do not sell your personal information.
We share your information only with service providers we have hired (and named below), and only with you or with people you explicitly direct us to share with.
You can ask us at any time to show you, correct, delete, or stop using your personal information. Section 8 explains how.

1. About This Policy

1.1 Who we are

Able Years LLC is a Washington limited liability company (UBI 606 140 951) operating a coached, small-group fitness studio in Spokane, Washington.

1.2 What this Policy covers

This Privacy Policy describes how we collect, use, share, retain, and protect personal information that we receive when you:

Visit our website at https://ableyears.com.
Submit a form (Strategy Session, waitlist, contact, SMS opt-in).
Communicate with us by email, phone, or text message.
Enroll as a member and use our services.

1.3 Relationship to the Consumer Health Data Privacy Policy

Some of the information we collect about you qualifies as “consumer health data” under Washington's My Health My Data Act (RCW 19.373). That category is covered by a separate document, the Consumer Health Data Privacy Policy. To the extent any provision of this Privacy Policy conflicts with the Consumer Health Data Privacy Policy with respect to consumer health data, the Consumer Health Data Privacy Policy controls.

2. Information We Collect

2.1 Information you provide directly

When you submit a form, contact us, or enroll, we may collect:

Full name (or first name and last name).
Email address.
Phone number.
ZIP code or postal address.
Whether you are inquiring for yourself or for a family member.
Notes or comments that you choose to write into a form's freeform field.
Emergency contact information (collected at member enrollment).
SMS consent indications (opt-in events, opt-out events).

2.2 Information we collect automatically when you visit our website

IP address.
Browser type and version.
Device type (desktop, mobile, tablet).
Operating system.
Pages visited and time spent on each.
Referring URL.
Approximate geographic location at city or region level (derived from IP).
Cookie identifiers and similar tracking-technology values (see Cookie Policy).

2.3 Information we receive from third parties

Email-deliverability and engagement data (from our email-sending platform).
Payment-confirmation data (from our payment processor when you pay for a Strategy Session or membership).
Health-related data that you ask a third party (such as your physician) to send to us. That category is covered by the Consumer Health Data Privacy Policy.

3. How We Use Your Personal Information

We use personal information to:

Respond to your inquiry and contact you about our services.
Schedule and manage Strategy Sessions, classes, and assessments.
Process payments and manage your membership account.
Send service-related communications (appointment reminders, schedule changes, billing notices).
Send promotional communications (only if you opted in to marketing communications, and only at the frequency disclosed). You can opt out at any time.
Improve our website, services, and member experience.
Enforce our Terms of Service, this Privacy Policy, the Liability Waiver, and other agreements.
Comply with legal obligations (tax, business-license recordkeeping, RCW 19.142 record retention, RCW 19.255 breach notification, court orders, subpoenas).
Defend or assert legal claims, only to the extent necessary.

We do not use personal information to:

Sell or rent it to third parties for their own marketing.
Train artificial-intelligence models for sale or licensing to others.
Combine it with data purchased from data brokers.

4. Service Providers (Who We Share Data With)

We use the following service providers to operate our business. Each one processes personal information on our behalf, under a contract that requires them to protect your information and to use it only for our purposes.

GoHighLevel — customer-relationship management; lead handling; email and SMS automation. Categories shared: name, email, phone, ZIP, form-submission content, marketing-event data.
Vercel — website hosting; CDN; server-side compute. Categories shared: server logs (IP, request headers, referrers).
Supabase — secure database hosting (member records, assessments, coach session notes). Categories shared: member-side personal information.
Stripe (or similar payment processor) — payment processing. Stripe receives only what is needed to process payments; we do not see or store full card numbers.
Google Analytics 4 — aggregated website analytics. Configured with IP anonymization where supported.

Meta Pixel and the Meta Conversions API are active on this website. They allow us to measure the effectiveness of our advertising on Facebook and Instagram. Information shared may include the pages you visit and, if you complete a form, hashed contact information (a one-way scrambled version of your email or phone number that we cannot reverse). We only activate Meta Pixel if you have given consent for marketing cookies. You can withdraw consent anytime through our cookie preferences (link in footer) or by emailing privacy@ableyears.com.

Google Analytics 4 is active on this website for general site analytics. It helps us understand how visitors use the site (which pages they read, where they leave, what works and what doesn't). We use Google Consent Mode v2: if you have not given consent for analytics cookies, Google Analytics will collect only aggregated, non-identifying signals (called “modeled conversions”) and will not store cookies on your device. You can withdraw consent anytime through our cookie preferences or by emailing privacy@ableyears.com.

4.1 At your direction

We may share your information with:

Family members you designate, with your explicit, separate, written consent.
Your physician or healthcare provider, with your explicit, separate, written consent.
Referring healthcare providers who sent you to us, with your explicit consent.

You may withdraw any of these consents at any time.

4.2 Legal compulsion

We may disclose your information if required by a valid subpoena, court order, regulatory inquiry, or government order. Where lawful, we will notify you in advance so you can challenge the disclosure.

4.3 Business transactions

If Able Years is involved in a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred as part of that transaction. We will require any successor to honor the commitments in this Policy or to obtain new consent from you.

4.4 We do not sell your personal information

We do not sell, rent, or trade your personal information for monetary or other valuable consideration with any third party for their independent use.

No Sharing or Sale of SMS Data

We do not sell, rent, lease, or share your mobile phone number, SMS consent, or SMS messaging content with any third party for marketing, promotional, or any other purposes. Your SMS opt-in information and any data collected as part of our SMS program is used solely to communicate with you regarding your inquiry, appointments, and services with Able Years LLC. This information is never shared with affiliates, partners, advertisers, or any other organization, and is never used by any third party for their own marketing purposes.

5. Cookies, Pixels, and Tracking Technologies

Our website uses cookies and similar tracking technologies. The full list and purpose of each is in our separate Cookie Policy. We honor your browser's “Do Not Track” signal and Global Privacy Control (GPC) signal where technically feasible.

6. How We Protect Your Information

We use reasonable administrative, technical, and physical safeguards:

Encryption in transit (HTTPS/TLS).
Encryption at rest at the storage layer.
Access controls limited to authorized Able Years staff.
Vendor diligence and written processor contracts.
Privacy and security training for staff who handle personal information.
Written incident-response procedure.

No method of transmission or storage is perfectly secure. While we strive to protect your information, we cannot guarantee absolute security.

7. How Long We Keep Your Information

Website inquiries: 2 years from your last interaction with us, or until you request deletion.
Member personal-information records: 7 years after the end of your membership.
Member health and fitness records: See Consumer Health Data Privacy Policy.
TCPA SMS consent records: 5 years from withdrawal of consent.
Payment and billing records: 7 years (tax/accounting requirement).
Server logs: Up to 90 days, or as required for security incident review.
Records under litigation hold: Until the hold is lifted.

When the retention period expires, we delete the data from active systems and from backups during the next backup-cycle rotation.

8. Your Rights and How to Exercise Them

You have the following rights regarding your personal information.

Access — ask us to confirm what personal information we hold about you.
Correction — ask us to correct inaccurate or incomplete personal information.
Deletion — ask us to delete your personal information, within 30 days, subject to legal retention obligations.
Portability — ask us to provide your personal information in a structured, commonly-used, machine-readable format.
Withdraw consent — for SMS marketing, reply STOP. For email marketing, click unsubscribe. For other consents, contact us.

8.1 How to submit a request

Submit any of the requests above by:

Email to nick@ableyears.com with the subject “Privacy Request”.
Mail to: Able Years LLC, Spokane, Washington (specific address available upon request — studio location to be confirmed).
Phone to (509) 309-0946.

We may need to verify your identity before fulfilling a request. We will respond to your request within 30 days (or 45 days for consumer health data per the MHMDA policy).

8.2 Right to appeal

If we deny your request, you may appeal by emailing us with the subject line “Privacy Appeal.” If we deny the appeal, we will provide instructions for filing a complaint with the Washington Attorney General's Office.

9. Data Breach

If we become aware of a data breach affecting your personal information, we will:

Investigate and contain the incident.
Notify you in writing within 30 days of discovering a breach affecting Washington residents' personal information, as required by RCW 19.255.
Notify the Washington Attorney General if the breach affects 500 or more Washington residents.
Provide the information required by RCW 19.255 (date of breach, type of information involved, steps you can take, contact information for credit reporting agencies).

10. Children's Privacy

Our services are designed for adults aged 60 and older. We do not direct our website or services to children, and we do not knowingly collect personal information from anyone under 18. If we learn we have collected personal information from a person under 18, we will delete it promptly. This Policy and our practices are designed to comply with the federal Children's Online Privacy Protection Act (COPPA, 15 U.S.C. § 6501 et seq.).

11. California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act and California Privacy Rights Act (“CCPA/CPRA”).

Able Years is a Washington-based small business and may not strictly meet CCPA/CPRA business thresholds. We voluntarily extend the following rights to California residents:

Right to know what personal information we have collected.
Right to delete personal information we have collected from you.
Right to correct inaccurate personal information.
Right to opt out of any “sale” or “sharing” of personal information.
Right to non-discrimination for exercising these rights.

We do not sell your personal information for monetary consideration. We do not currently “share” personal information for cross-context behavioral advertising.

12. International Users

Our website and services are intended for users in the United States, and specifically for adults in Washington State and surrounding areas. We do not direct our services to users outside the United States. We do not currently offer GDPR-specific data subject rights beyond what U.S. and Washington law provide.

13. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will:

Update the “Last Updated” date at the top.
Email registered members and inquiry contacts at least 30 days before the change takes effect.
Post a notice at the top of the Policy on our website.
Where required, obtain new consent.

Continued use of our website or services after changes take effect constitutes acceptance of the updated Policy.

14. Contact

For any question, concern, or request related to this Privacy Policy:

Email: nick@ableyears.com
Phone: (509) 309-0946
Mail: Spokane, Washington (specific address available upon request — studio location to be confirmed)

You may also file a complaint with the Washington Attorney General's Office at www.atg.wa.gov/file-complaint.

← Back to home