Privacy Policy

Privacy Policy

Effective Date: December 28, 2025

BBF LLC d/b/a BASH Boxing (“BASH Boxing,” “we,” “us,” or “our”) operates the websites located at bash-boxing.com and bash-boxing-shop.com (each a “Website,” and collectively the “Websites”). This Privacy Policy explains what information we collect, how we use and share it, your rights, and how to contact us. By accessing or using the Websites or our services, you consent to the collection, use, and disclosure of information as described in this Privacy Policy.

1. Scope and Applicability

This Privacy Policy applies to personal information collected through the Websites and to personal information collected in connection with the provision of our products and services (collectively, the “BASH Services”). It does not apply to information collected offline or by third parties not described in this policy. Where we process personal information on behalf of another business (for example, a franchisee or partner), that business’s privacy policy may also apply.

2. Definitions

• Personal Information means information that identifies, relates to, describes, or is reasonably capable of being associated with an identifiable individual.
• Device Information means technical information automatically collected when you visit the Websites, such as IP address, browser type, device identifiers, and pages viewed.
• User Content means any content you submit to the Websites, including photos, reviews, messages, and other materials.
• Process/Processing means any operation performed on personal information, including collection, storage, use, disclosure, or deletion.

3. Information We Collect
4. Information You Provide Voluntarily

We collect information you provide directly when you: create an account; register for classes or events; purchase products; contact customer support; submit User Content; or otherwise interact with the Websites. This may include:

• Contact and identity data: name, email address, postal address, telephone number;
• Account data: username, password, profile preferences;
• Payment and billing data: payment card number, billing address, transaction details (collected by our payment processors);
• User Content: photos, videos, reviews, messages, and other materials you upload or post; and
• Communications: messages you send to us, including support requests.

1. Device Information Collected Automatically

When you visit the Websites we automatically collect Device Information, including:

• IP address;
• Browser type and version;
• Device type and operating system;
• Referring/exit pages and URLs;
• Pages and content viewed; and
• Cookies, web beacons, tags, and pixels.

1. Information Collected from Third Parties and Service Providers
   We may receive personal information about you from third parties, including:

• Shopify for purchases on bash-boxing-shop.com;
• Mariana Tek for class reservations and payments (or similar CRM)
• Forte Nexus, Inc. for livestreamed and on‑demand classes; and
• Payment processors and fraud‑prevention providers.

We use such information in accordance with this Privacy Policy and the third parties’ privacy policies.

4. How We Use Your Information
   We use Personal Information for the following purposes:

• To provide and operate the BASH Services, including processing purchases, booking classes, delivering products, and administering accounts;
• To communicate with you, including confirmations, account notices, customer support, and service updates;
• To send marketing and promotional communications, where you have consented or where permitted by law;
• To personalize and improve the Websites and Services, including content recommendations and user experience;
• To detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity;
• To comply with legal obligations and respond to lawful requests by public authorities; and
• For other purposes disclosed at the time of collection or with your consent.

We process Personal Information on the legal bases necessary to perform the contract with you, to comply with legal obligations, to pursue our legitimate interests (such as fraud prevention and service improvement), and where required, with your consent.

5. Sharing and Disclosure of Personal Information
   We may share Personal Information as follows:

• Service providers and processors: We share information with vendors who perform services on our behalf (e.g., Shopify, Mariana Tek, Forte, payment processors, email service providers, analytics providers). These parties are authorized to use Personal Information only as necessary to provide services to us and are subject to contractual data protection obligations.
• Business transfers: In connection with a merger, acquisition, sale of assets, or other corporate transaction, Personal Information may be transferred as part of the transaction.
• Legal and safety reasons: We may disclose Personal Information to comply with legal obligations, respond to lawful requests, enforce our Terms of Use, or protect the rights, property, or safety of BASH Boxing, our users, or the public.
• Aggregated or de‑identified information: We may share aggregated or de‑identified information that does not identify you.
• With your consent: We may share Personal Information with third parties when you have provided consent.

SMS and phone numbers are not shared with third parties for SMS marketing purposes except as necessary for service delivery or as disclosed at the time of collection.

6. Third‑Party Services and Links
   The Websites may contain links to third‑party websites and services. We are not responsible for the privacy practices or content of third‑party sites. Please review the privacy policies of any third party before providing personal information.

Key third‑party processors we use include:

• Shopify (online store and e‑commerce processing) — see Shopify Privacy Policy;
• Mariana Tek (class reservations and payments) — see Mariana Tek Privacy Policy; or CRM used by BASH Boxing. Please, contact us for updated information.
• Forte Nexus, Inc. (livestream and on-demand classes) — see Forte Privacy Policy; or another livestream provider used by BASH Boxing. Please, contact us for updated information.
• Payment processors (as disclosed at checkout).

We maintain contractual agreements with our processors to require appropriate safeguards for Personal Information.

7. Cookies and Tracking Technologies
   We use cookies and similar technologies to operate the Websites and improve your experience. Cookies may be strictly necessary, functional, analytics, or advertising cookies.

• Manage cookies: You can control cookies through your browser settings and opt out of certain tracking via industry opt‑out tools (for example, http://www.networkadvertising.org/choices or http://www.aboutads.info/choices). Disabling cookies may limit functionality of the Websites.
• Do Not Track: We do not currently respond to browser Do Not Track signals.

8. Marketing Communications and SMS Consent

We may send marketing communications by email, SMS, or other electronic means where you have consented or where permitted by law. Consent is not a condition of purchase. Message and data rates may apply.

• Opt‑out: You may opt out of marketing emails by following the unsubscribe link in any marketing email. You may opt out of SMS marketing by following the opt‑out instructions in the message (for example, replying STOP). We will process opt‑out requests in accordance with applicable law.
• Recordkeeping: We retain records of consents and opt‑outs to demonstrate compliance with applicable law.

9. Children’s Privacy

The Websites are not intended for children under 18. We do not knowingly collect Personal Information from children under 13. If we learn that we have collected Personal Information from a child under 13 without verified parental consent, we will delete that information. Parents or guardians who believe we have collected Personal Information about a child in violation of this policy should contact us at [email protected].
Minors aged 12–17 may participate in certain in‑studio classes only with parental presence or written parental consent as described in our Terms of Use.

10. Data Retention
    We retain Personal Information only as long as necessary to fulfill the purposes described in this Privacy Policy, to comply with legal obligations, resolve disputes, and enforce our agreements. Typical retention periods include:

• Transaction and billing records: 7 years;
• Account and profile information: until account deletion plus 2 years;
• Marketing lists: until you opt out;
• Device logs and analytics: 90 days (unless aggregated or retained longer for security or legal reasons);
• User Content: until removed by you or as required by law.

If you request deletion of your Personal Information, we will delete it except where retention is required by law or necessary for legitimate business purposes.

11. Your Rights and Choices

Depending on your jurisdiction, you may have rights regarding your Personal Information, including:

• Access: request a copy of the Personal Information we hold about you;
• Correction: request correction of inaccurate Personal Information;
• Deletion: request deletion of Personal Information (subject to exceptions);
• Portability: request a portable copy of certain Personal Information;
• Restriction or objection: request restriction of processing or object to certain processing; and
• Opt‑out of sale or targeted advertising: where applicable under state law.

How to Exercise Your Rights
To exercise your rights, contact us at [email protected] or submit a request via our designated web form (if available). We will verify your identity before responding. We will respond to verifiable requests in accordance with applicable law, typically within 45 days of receipt; we may extend this period by an additional 45 days where reasonably necessary and will notify you of any extension.

Residents of California and Virginia have additional rights under the California Consumer Privacy Act/California Privacy Rights Act (CCPA/CPRA) and the Virginia Consumer Data Protection Act (CDPA). To submit a request under these laws, please use [email protected] and indicate the state law under which you are making the request. We will provide required disclosures and follow the verification procedures required by law.

12. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect Personal Information from unauthorized access, disclosure, alteration, and destruction. Examples include access controls, encryption in transit, and periodic security assessments. However, no system is completely secure; we cannot guarantee absolute security of your information.

In the event of a security incident involving Personal Information, we will notify affected individuals and regulators as required by applicable law.

13. International Transfers

Personal Information collected through the Websites may be processed in the United States and in other countries. When we transfer Personal Information across borders, we use appropriate safeguards required by law, such as contractual protections. By using the Websites, you consent to the transfer of your information to the United States and other jurisdictions.

14. Data Processors and Subprocessors

We engage third‑party service providers to perform functions on our behalf. These providers may process Personal Information as processors under contract. We require processors to implement appropriate safeguards and to process Personal Information only on our instructions. For information about specific processors and the categories of data they process, contact [email protected].

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the revised policy on the Websites and update the Effective Date. Your continued use of the Websites after changes are posted constitutes acceptance of the revised policy. We encourage you to review this Privacy Policy periodically.

16. Contact Information and Complaints

If you have questions, wish to exercise your rights, or want to make a complaint, contact us:

Privacy Contact Email: [email protected] Mailing address: BBF LLC d/b/a BASH Boxing 1550 Wilson Blvd, suite 102, Arlington, VA, 22209

DMCA Agent for Copyright Notices Email: [email protected] Mailing address: BBF LLC d/b/a BASH Boxing 1550 Wilson Blvd, suite 102, Arlington, VA, 22209

If you are a resident of a U.S. state with a privacy regulator (for example, California or Virginia), you may also submit a complaint to the applicable regulator after contacting us.

17. Additional Notices

• California Privacy Rights: California residents may request certain information regarding our disclosure of Personal Information to third parties for direct marketing purposes. To make such a request, contact [email protected] or write to the address above.
• Do Not Track: We do not currently honor browser Do Not Track signals.
• Third‑party links: The Websites may contain links to third‑party sites; this Privacy Policy does not apply to those sites