Privacy Policy

1. Who We Are

This platform is operated by MBOSC, LLC
13914 Greendale Drive, Woodbridge, VA 22191, USA
Website: mindbodyoptimization.io
Support: support@mindbodyoptimization.io

For privacy laws that use the term, MBOSC, LLC is the “data controller” (or equivalent) for the information described here. Privacy notices generally must identify the controller and explain processing in a clear way. (GDPR transparency requirements.)

2. What We Collect

2.1 Information you provide to us

• Account information: name, email address, password (stored securely), login and account settings.
• Purchase information: billing details and transaction records (payment processing is handled by our payment processors; we do not store full card numbers).
• Learning information: course progress, completion status, quiz/form submissions, certificates earned.
• Community content: comments, posts, messages, and any content you choose to share inside MBOS spaces.
• Support communications: messages you send to support, including troubleshooting details.

2.2 Information collected automatically

• Device and usage data: IP address, browser type, device identifiers, pages viewed, time spent, referring/exit pages, and interaction signals.
• Log data: security logs, sign-in events, and error logs used to keep the platform stable and secure.
• Cookies and similar technologies: described below.

2.3 Sensitive information (please read carefully)

MBOS may include reflection forms or learning discussions that touch on health, lifestyle, lab concepts, or personal experience. You control what you share. If you choose to submit information that could be considered “sensitive” in your jurisdiction, you consent to our processing of that information for the purposes described in this policy (primarily to provide the service, administer your learning experience, and maintain your account).

Some privacy laws (including Virginia’s consumer law) require explicit consent for certain sensitive data processing. If we ask for sensitive information in a way that triggers explicit consent requirements, we will present a clear consent request at that time.

3. How We Use Your Information

Privacy laws generally require that we describe what we collect and why we collect it. (GDPR Art. 13 / transparency; and similar notice duties.)

• Provide the platform: create accounts, grant access, deliver course content, track progress, and issue certificates.
• Process payments: complete transactions, prevent fraud, and handle billing support.
• Support and communication: respond to requests, send essential service messages (e.g., confirmations, security notices).
• Community administration: maintain safe participation and enforce our Code of Conduct.
• Improve MBOS: analyze usage patterns to improve performance, usability, and content delivery.
• Security: protect accounts, detect misuse, and maintain platform integrity.
• Legal compliance: comply with lawful requests and applicable legal obligations.

4. Legal Bases (EEA/UK)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under one or more legal bases:

• Contract: to provide the services you requested (account access, course delivery, certification).
• Legitimate interests: to secure, improve, and operate MBOS, prevent fraud, and maintain platform quality (balanced against your rights).
• Consent: where required (e.g., certain cookies, marketing communications, or sensitive data in specific contexts).
• Legal obligation: where we must retain or disclose information to comply with law.

GDPR privacy notices are expected to include the controller identity, purposes, legal bases, retention, recipients, and rights.

5. Cookies & Tracking

Cookies are small files stored on your device that help websites function and remember preferences. We use:

• Essential cookies: required for login, security, and core platform features.
• Preference cookies: remember settings that improve your experience.
• Analytics cookies: help us understand how the platform is used so we can improve it.

Where required by law, we provide cookie controls and honor choices around non-essential cookies.

6. How We Share Information

We do not sell your personal information. We share information only as needed to operate MBOS, including:

• Service providers (processors): hosting, analytics, email delivery, payment processing, security tools, and customer support systems.
• Compliance and protection: when required by law, or when necessary to protect MBOS, users, and the public.
• Business operations: in connection with a merger, acquisition, or asset sale (with appropriate safeguards).

Some laws require a “notice at collection” style disclosure of categories collected and purposes (California), and a privacy notice that describes request methods and rights (Virginia). We aim to make this policy usable worldwide.

7. International Transfers

MBOS is operated from the United States and may use service providers in other countries. If you access MBOS from outside the U.S., your information may be transferred internationally.

Where required, we use appropriate safeguards for international transfers, such as contractual protections and vendor due diligence.

8. Data Retention

We keep personal data only as long as necessary for the purposes described in this policy, including: maintaining your account, providing lifetime access, supporting certification records, complying with legal obligations, resolving disputes, and enforcing agreements.

If you request deletion, we will evaluate the request in light of legal and operational requirements (e.g., security logs, transaction records, and certification audit trails).

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is 100% secure, but we work seriously to protect the platform and its users.

You are responsible for maintaining the confidentiality of your password and for using a strong password.

10. Your Privacy Rights

10.1 EEA/UK (GDPR / UK GDPR)

Depending on your location, you may have rights including: access, correction, deletion, restriction, objection, and data portability. You may also withdraw consent where processing is based on consent.

You also have the right to lodge a complaint with your local data protection authority. (Guidance on privacy notices commonly requires explaining rights and how to complain.)

10.2 United States (State privacy laws)

Depending on your state of residence and the nature of our processing, you may have rights such as: access, deletion, correction, portability, and the ability to opt out of certain processing (e.g., targeted advertising).

10.3 California Notice

California residents may have specific rights regarding their “personal information,” and California law also emphasizes notice of categories collected and purposes.

10.4 Virginia Notice

Virginia law requires controllers to describe how consumers can submit rights requests in a privacy notice. We provide request methods below.

10.5 How to exercise your rights

You can submit a privacy request by emailing: support@mindbodyoptimization.io

To protect your privacy, we may need to verify your identity before fulfilling certain requests.

11. Children’s Privacy

MBOS is not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact us and we will take appropriate steps.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the platform, or legal requirements. Updates will be posted on this page and the “Last updated” date will change.

13. Contact

If you have questions about this policy or privacy requests, contact: MBOSC, LLC
13914 Greendale Drive, Woodbridge, VA 22191, USA
support@mindbodyoptimization.io

---

Last updated: February 8, 2026