Privacy Policy

1. Who We Are

This website is operated by Erik Warner ("Peace thru Strength"), a performance architecture practice serving high-agency men. Our website address is https://erikwarner.com. Peace thru Strength is a sole proprietorship based in Tennessee, United States.

2. Information We Collect

We collect personal information that you voluntarily provide, including:

• Name and email address when you download our lead magnet or subscribe to our email list
• Name, email, professional role, and responses when you submit an application
• Payment information processed securely through Stripe (we do not store card details)
• Health and lifestyle information you provide during the intake questionnaire (see Section 4)
• Self-assessment responses used to identify your primary performance pattern

3. Automatically Collected Data

When you visit our site, we automatically collect:

• Pages visited, referring URL, and UTM parameters
• Browser type, screen resolution, and general device information
• Session identifiers (not tied to your identity unless you submit a form)
• Page-view and event data written directly to our own database (Supabase)

We do not use third-party analytics or advertising vendors (Google Analytics, Meta Pixel, etc.). We do not collect IP addresses in our analytics. If we introduce a third-party analytics or advertising tool in the future, we will update this policy with at least 30 days advance notice before it takes effect.

4. Health-Related Data

During onboarding and throughout the advisory engagement, you may provide health-related information including but not limited to: medical history, current medications, injuries, dietary habits, sleep patterns, stress levels, body composition data, bloodwork results, and biometric markers.

This information is treated with heightened care:

• Stored in encrypted databases with row-level security policies
• Accessible only to Erik Warner and essential service providers (Supabase for hosting)
• Never sold, rented, or shared with third parties for marketing or commercial purposes
• Used exclusively to design and deliver your performance architecture protocols

Peace thru Strength is not a HIPAA-covered entity. However, we voluntarily treat all health information with the same level of confidentiality and security you would expect from a covered entity. For more on how health data is handled within the advisory relationship, see Section 9 of the Service Agreement.

5. How We Use Your Information

• To deliver the lead magnet and educational email sequence you opted into
• To review and respond to your application
• To facilitate onboarding and deliver advisory services
• To process payments through Stripe
• To improve our website through first-party analytics we host ourselves

We do not sell your personal information. We have not sold personal information in the preceding 12 months and have no plans to do so.

6. Third-Party Services

We use the following third-party services that may process your data:

• Supabase: Database hosting and authentication
• Stripe: Payment processing
• Resend: Transactional email delivery
• Calendly: Appointment scheduling
• Trainerize: Workout programming, habit tracking, and body composition logging for active clients. You will be asked to create a Trainerize account during onboarding. Trainerize processes workout data, habit data, and any body composition information you choose to log in the platform.

Each service operates under its own privacy policy. We share only the minimum data necessary for each service to function. No third-party service receives your health data except Supabase (database hosting), Resend (email delivery of program materials), and Trainerize (workout and body composition data you choose to log in the platform). Lab results and session notes are not shared with Trainerize.

7. Cookies and Tracking

Our site uses cookies and similar tracking technologies:

• Essential cookies: Required for site functionality (session management, consent state)
• First-party session identifier: A per-visit identifier stored in session storage so we can group your page views for our own analytics. It is not shared with any third party and is cleared when you close the tab.

You can decline non-essential storage through our cookie consent banner or clear your browser storage at any time. Declining does not affect your ability to use the site.

8. Data Retention

We retain your personal information for as long as necessary to provide services and fulfill legal obligations:

• Email subscribers: retained until you unsubscribe. Unsubscribe requests are processed within 24 hours.
• Applicants not accepted: application data is deleted after 90 days.
• Active clients: all data is retained for the duration of the engagement.
• Former clients: session notes and health data are retained for 2 years after the engagement ends, then permanently deleted unless you request earlier removal.
• Analytics data: retained in aggregated, non-identifiable form indefinitely.

You may request earlier deletion at any time, subject to legal retention requirements (see Section 9).

9. Your Rights

Regardless of where you are located, you have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Unsubscribe from marketing emails at any time
• Opt out of analytics tracking via browser settings or cookie controls
• Receive a copy of your data in a portable format upon request

10. California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

• Right to Know: You may request that we disclose what personal information we have collected, used, disclosed, and sold about you in the past 12 months.
• Right to Delete: You may request deletion of your personal information, subject to certain legal exceptions.
• Right to Opt Out of Sale: We do not sell personal information. We have not sold personal information in the preceding 12 months.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights. You will not receive different pricing or a different quality of service for making a request.

To exercise these rights, email erik@erikwarner.com with the subject line "CCPA Request." We will verify your identity and respond within 45 days.

11. Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) signal. Because there is no industry consensus on what DNT means or how websites should respond, we do not currently alter our data collection practices in response to DNT signals. Our first-party analytics do not collect IP addresses or cross-site tracking identifiers. You can control all non-essential storage through our cookie consent banner or your browser settings.

12. International Users (GDPR)

This practice serves clients based in the United States. However, if you are accessing this site from the European Economic Area, the United Kingdom, or another jurisdiction with data protection laws based on the GDPR, the following applies:

• Lawful basis: We process your personal data on the basis of your consent (when you submit forms or download the lead magnet), contract performance (when you become a client), and legitimate interests (first-party analytics to improve the site). You may withdraw consent at any time.
• Your GDPR rights: You have the right to access your data, rectify inaccurate data, erase your data (right to be forgotten), restrict processing, object to processing, and receive a copy of your data in a portable format (data portability).
• International transfer: All data is processed and stored in the United States. By submitting personal information, you acknowledge that your data will be transferred to and processed in the United States, which may not offer the same level of data protection as your jurisdiction. We rely on your consent for this transfer.
• Data Protection Officer: Erik Warner serves as the contact point for all data protection matters. Email erik@erikwarner.com with the subject line "GDPR Request."
• Right to complain: You have the right to lodge a complaint with your local data protection authority.

We respond to all GDPR requests within 30 days.

13. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encrypted databases with row-level security policies
• Payment processing handled entirely by Stripe (PCI-DSS compliant); we never store card details
• HTTPS encryption on all data transmitted to and from this site
• Access controls limiting who can view client data to essential personnel only

No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security. However, we take commercially reasonable steps to protect your data.

14. Data Breach Notification

In the unlikely event of a data breach that compromises your personal information, we will notify affected individuals within 72 hours of discovering the breach, by email or prominent notice on this website. The notification will include: the nature of the breach, the categories of data affected, steps we are taking to address it, and recommended actions for you to protect yourself. We will also notify relevant authorities as required by applicable law.

15. Children

Our services are not directed to individuals under 18. We do not knowingly collect personal information from minors. If we learn that we have collected personal information from a person under 18, we will delete it promptly.

16. Changes to This Policy

We may update this privacy policy from time to time. For material changes that affect how we collect, use, or share your personal information, we will provide at least 30 days advance notice via email (to active subscribers and clients) or a prominent notice on this website before the changes take effect. Non-material changes (such as formatting or clarification of existing practices) may be posted without advance notice. The "Last updated" date at the top of this page reflects the most recent revision. If you disagree with a material change, you may close your account or unsubscribe before the change takes effect.

17. Contact

For privacy-related inquiries, data requests, or to exercise any of your rights under this policy, contact:

Erik Warner
Peace thru Strength
erik@erikwarner.com