PRIVACY POLICY

Last updated: May 6, 2026

This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service and tells You about Your privacy rights and how the law protects You.

We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

  • Account means a unique account created for You to access our Service or parts of our Service.

  • Business, for the purpose of the CCPA (California Consumer Privacy Act, as amended by the CPRA), refers to the Company as the legal entity that collects Consumers’ personal information and determines the purposes and means of the processing of Consumers’ personal information.

  • Company (referred to as either “the Company”, “We”, “Us” or “Our” in this Agreement) refers to CVAC Inc., 27300 Rancho San Carlos Rd., Carmel, CA 93923.

  • Consumer, for the purpose of the CCPA, means a natural person who is a California resident.

  • Cookies are small files that are placed on Your computer, mobile device or any other device by a website, containing the details of Your browsing history.

  • Global Privacy Control (GPC) is a browser-level privacy signal that allows internet users to automatically communicate their privacy preferences, specifically their choice to opt-out of the sale or sharing of their personal information.

  • Personal Data is any information that relates to an identified or identifiable individual.

  • Sensitive Personal Information (SPI) includes data such as government identifiers (SSN, driver’s license), precise geolocation, racial or ethnic origin, religious beliefs, biometric data, health data, and the contents of a consumer’s private communications.

  • Sale and Share, for the purpose of the CCPA, mean communicating a Consumer’s personal information to a third party for monetary/valuable consideration or for cross-context behavioral advertising.

  • Service refers to the Website.

  • Website refers to Carmel Valley Athletic Club, accessible from www.cvaclife.com.

  • You means the individual accessing or using the Service.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information, including but not limited to:

  • Email address

  • First name and last name

  • Phone number

  • Address, State, Province, ZIP/Postal code, City

  • Usage Data

Tracing Technologies and Cookies

We use Cookies and similar tracking technologies (beacons, tags, scripts) to track activity on Our Service and store certain information.

  • Necessary Cookies: Essential to provide You with services available through the Website.

  • Functionality Cookies: Allow us to remember choices You make when You use the Website.

  • Tracking and Performance Cookies: Used to track information about traffic to the Website and how users use the Website.

  • Web Beacons / Pixels: Small electronic files contained in our emails or on our Website that permit the Company to count users who have visited those pages or opened an email, and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).

Use of Your Personal Information

The Company may use Personal Data for purposes including:

  • To provide and maintain our Service

  • To manage Your Account

  • For the performance of a contract

  • To contact You regarding updates or informative communications.

  • To manage Your requests

Retention of Your Personal Data

We retain Your Personal Data only for as long as is necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Our specific retention periods are determined by the following criteria:

  • Category A & B (Identifiers & Contact Data): Retained for as long as Your Account remains active, plus a standard period (e.g., 3 years) post-closure to comply with legal/tax obligations.

  • Category F (Usage Data): Generally retained for 14 to 26 months for internal analytics, unless used to strengthen security, in which case it may be kept longer.

  • Category L (Sensitive Personal Information): Retained strictly for the time necessary to provide the specific service requested by the Consumer and subsequently deleted or de-identified.

Disclosure of Your Personal Data

We may share Your personal information with Service Providers, Affiliates, business partners, or for business transfers (mergers/acquisitions). We may also disclose Your data for law enforcement or other legal requirements.

Detailed Information on the Processing of Your Personal Data

Analytics

We may use third-party Service providers to monitor and analyze the use of our Service.

  • Google Analytics: Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Service. This data is shared with other Google services. You can opt-out by installing the Google Analytics opt-out browser add-on. For more information, visit the Google Privacy & Terms web page.

Advertising

We may use third-party Service providers to show advertisements to You to help support and maintain Our Service, or to remarket our services to You after You leave our Website.

We may use third-party Service providers to monitor and analyze the use of our Service.

  • Google Ads (AdWords): Google Ads remarketing service is provided by Google Inc. We use this service to advertise on third-party websites (including Google) to previous visitors to our site. This means we may advertise to previous visitors who have interacted with our Website. Third-party vendors, including Google, use cookies to serve ads based on someone’s past visits to the Website. Any data collected will be used in accordance with our own privacy policy and Google’s privacy policy. You can opt-out of Google Analytics for Display Advertising and customize the Google Display Network ads by visiting the Google Ads Settings page.
  • Meta Analytics and Advertising (Meta Pixel): We use Meta Pixel (formerly Facebook Pixel) to measure the effectiveness of our advertising campaigns and understand how You interact with our Website. Meta Pixel collects data that helps us track conversions from Meta ads, optimize ads, build targeted audiences, and remarket to people who have taken action on our Website. You can manage your preferences and opt-out of Meta’s use of cookies and Meta Pixel tracking through your Facebook Ad Settings. For more information, visit Meta’s Privacy Policy.

Email Marketing

We may use Email Marketing Service Providers to manage and send emails to You. You may opt-out of receiving these communications by following the unsubscribe link in any email We send.

Email Tracking (Web Beacons and Pixels): Our marketing emails may contain tracking pixels (web beacons) and tracked links. These technologies allow us to monitor subscriber engagement, such as when an email is opened, which links are clicked, and the device or IP address used. We use this data to analyze the effectiveness of our campaigns and improve our communications.

CCPA Privacy (2026 Compliance)

This section supplements the information contained in Our Privacy Policy and applies solely to California residents.

Categories of Personal Information Collected

We may collect or may have collected the following categories of personal information within the last 12 months:

  • Category A: Identifiers (Collected: Yes)

  • Category B: California Customer Records (Collected: Yes)

  • Category C: Protected classification characteristics (Collected: No)

  • Category D: Commercial information (Collected: No)

  • Category E: Biometric information (Collected: No)

  • Category F: Internet or network activity (Collected: Yes)

  • Category G: Geolocation data (Collected: No)

  • Category H: Sensory data (Collected: No)

  • Category I: Professional or employment-related information (Collected: No)

  • Category J: Non-public education information (Collected: No)

  • Category K: Inferences drawn from other personal information (Collected: No)

  • Category L: Sensitive Personal Information (Collected: Yes – e.g., health information for fitness program participation or account logins).

Sources of Personal Information

We obtain the categories of personal information listed above Directly from You, Indirectly from You (observing activity), Automatically from You (cookies), and From Service Providers.

Sale of Personal Information of Minors Under 16 Years of Age

We do not sell or share the personal information of Consumers We actually know are less than 16 years of age, unless We receive affirmative authorization (the “right to opt-in”) from either the Consumer who is between 13 and 16 years of age, or the parent or guardian of a Consumer less than 13 years of age. Consumers who opt-in to the sale or sharing of personal information may opt-out of future sales at any time.

Your Rights under the CCPA

If You are a resident of California, You have the following rights:

  • The Right to Know: You have the right to request that We disclose information to You about Our collection and use of Your personal information. You may request access to all Your personal information retained by Us going back as far as January 1, 2022.

  • The Right to Delete: You have the right to request the deletion of Your personal information that We have collected and retained, subject to certain legal exceptions (e.g., to complete a transaction, detect security incidents, or comply with a legal obligation).

  • The Right to Correct: You have the right to request the correction of inaccurate personal information that We maintain about You. Note: If We deny a request to correct health-related information, You have the right to submit a 250-word written statement contesting its accuracy, which We will provide to anyone to whom We disclose the contested data.

  • The Right to Limit the Use of Sensitive Personal Information: You have the right to direct Us to limit Our use and disclosure of Your Sensitive Personal Information (Category L) strictly to what is necessary to perform the services or provide the goods reasonably expected by an average consumer.

  • The Right to Opt-Out of Sale or Sharing: You have the right to direct Us not to sell or share Your personal information. Our Website recognizes frictionless opt-out preference signals, such as the Global Privacy Control (GPC).

  • Opt-Out Confirmation: Upon successfully processing Your request to opt-out via our cookie banner, privacy toggle, or a GPC signal, We will provide explicit confirmation to You (e.g., displaying “Opt-Out Request Honored” in your privacy settings).

  • The Right to Non-Discrimination: We will not discriminate against You for exercising any of Your CCPA rights. We will not deny You goods or services, charge You different prices, or provide a different level or quality of goods or services as a result of You exercising Your rights.

How to Exercise Your Rights

To exercise Your rights to Know, Delete, Correct, or Limit, You can submit a verifiable consumer request to Us by:

Verification Process:

For Your security, We must verify Your identity before fulfilling a request. We will accomplish this by matching the email address You use to submit the request with the email address We currently have on file for Your account.

Authorized Agents:

You may use an authorized agent to submit a request on Your behalf. To do so, We require that You provide the authorized agent with written, signed permission. Additionally, We may require You to verify Your own identity directly with Us before We process the agent’s request.

Contact Us

If you have any questions about this Privacy Policy, You can contact us:

  • By email: [email protected]
  • By phone number: (831) 624-2737
  • By mail: 27300 Rancho San Carlos Rd, Carmel, CA 93923