Any health information as well as uploaded body images will however always be deleted 6 months after your last activity.

Third country data transfers

The personal data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA and who work for us or for one of our service providers.

We will take all steps reasonably necessary to ensure that your personal data is treated securely and in accordance with this Privacy Notice and applicable data protection laws, including, where relevant, entering into EU standard contractual clauses (or equivalent measures) with the party outside the EEA receiving the personal data.

Keeping your information secure

We have implemented technical and organisational security measures in an effort to safeguard personal data in our custody and control. Such measures we have implemented include, limiting access to personal data only to employees and authorised service providers who need to know such information for the purposes described in this Privacy Notice, as well as other technical, administrative and physical safeguards.

While we endeavour to always protect our systems, sites, operations and information against 6 unauthorised access, use, modification and disclosure, due to the inherent nature of the Internet as an open global communications vehicle and other risk factors, we cannot guarantee that any information, during transmission or while stored on our systems, will be absolutely safe from intrusion by others, such as hackers.

To provide you with increased security, certain personal data stored in your online account is only accessible via your username and password. You are responsible for maintaining the confidentiality of your online account credentials, and we strongly recommend that you do not disclose your online account username or password to anyone. We will never ask you for your password in any unsolicited communication. Please notify us immediately (see “Contact us” section below) of any unauthorised use of your online account credentials or any other suspected breach of security.

Your Personal Data Rights

You have various rights in connection with our processing of your personal data:

• Access. You have the right to request a copy of the personal data we are processing about you, which we will provide back to you in electronic form.
• Rectification. You have the right for any incomplete or inaccurate personal data that we process about you to be rectified.
• Deletion. You have the right to request that we delete personal data that we process about you, except we are not obligated to do so if we need to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims.
• Restriction. You have the right to restrict our processing of your personal data where you believe such data to be inaccurate, our processing is unlawful or that we no longer need to process such data for a particular purpose. Where we are not able to delete the data due to a legal or other obligation or because you do not wish for us to delete it, we would mark stored personal data with the aim of limiting particular processing for particular purposes in accordance with your request, or otherwise restrict its processing.
• Objection. Where the legal justification for our processing of your personal data is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process the data for the establishment, exercise or defence of a legal claim.
• Withdrawing Consent. Where we process certain personal data on the basis of your consent, 7 you have the right to withdraw your consent, including with regard to direct marketing. In relation to the consequences of your withdrawal of consent for us to process your health data, please see above under “The use of consent for processing of your health data”.

If you wish to exercise one or more of the above rights, please contact us with your request at getfitwithmer@gmail.com, and include your name, email and postal address, as well as your specific request and any other information we may need in order to provide or otherwise process your request.

In some situations, we may refuse to act or may impose limitations on your rights, as permitted by law. Before we can provide you with any information or correct any inaccuracies, we may ask you to verify your identity and/or provide other details to help us respond to your request. For the exercise of your rights, please contact us using the contact information provided below in the “How to Contact Us” section.

In all cases, you have a right to file a complaint with your local data protection authority if you believe that we have not complied with applicable data protection laws.

SMS Messaging & Compliance

Text Message Program Terms & Conditions

By opting into our SMS messaging services, you agree to receive text messages related to our services, including appointment reminders, customer support, and important updates.

Opt-In & Consent:

• You will only receive messages if you have explicitly opted in
  
• We maintain timestamped records of all opt-in actions
  
• We comply with the Telephone Consumer Protection Act (TCPA) and all applicable laws

Opt-Out Instructions:

• You can cancel SMS notifications at any time by replying “STOP”
  
• You will receive a final confirmation message, and no further messages will be sent unless you re-opt in
  
• All opt-out requests are processed immediately.

Message Frequency & Content:

• Message frequency varies based on your interactions with our business
  
• Messages will be directly related to the services you have requested
  
• We do not send promotional content without specific consent

Help & Support:

• Reply “HELP” for assistance or contact us at getfitwithmer@gmail.com
  
• Customer support is available during regular business hours

Carrier Information:

• Standard message and data rates may apply
  
• Carriers are not liable for delayed or undelivered messages
  
• Supported carriers include AT&T, Verizon, T-Mobile, Sprint, and most regional carriers

SMS Data Protection Statement

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Information sharing to subcontractors in support services, such as customer service is permitted. All other use case categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We implement strict data protection measures to safeguard your SMS opt-in information and consent records.

Information Sharing & Disclosure

We do not sell, rent, or trade personal information. We may share information with:

Service Providers:

• Third-party vendors who assist in our operations (e.g., payment processing, appointment scheduling)
  
• SMS aggregators and providers solely for the purpose of delivering messages you’ve consented to receive
  
• All service providers are contractually obligated to maintain confidentiality and security

Legal Compliance:

• If required by law, legal process, or to protect our rights
  
• In response to valid law enforcement requests or court orders

Business Transfers:

• In case of mergers, acquisitions, or sale of assets
  
• In such cases, your data remains protected under the terms of this policy

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties, excluding aggregators and providers of the Text Message services.

Data Security

We implement and maintain reasonable security measures to protect your personal information:

• Encryption of sensitive data in transit and at rest
  
• Secure access controls and authentication mechanisms
  
• Regular security assessments and updates
  
• Employee training on data protection
  
• Breach notification protocols in accordance with applicable laws
  
• Secure backup systems and disaster recovery procedures

Despite these measures, no method of transmission over the Internet or electronic storage is 100% secure. We strive to use commercially acceptable means to protect your personal information but cannot guarantee absolute security.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to:

• Analyze site traffic and user behavior
  
• Remember your preferences
  
• Improve website functionality and user experience
  
• Measure the effectiveness of our services

You may control cookies through your browser settings. Disabling cookies may limit your ability to use certain features of our website.

7. Your Rights & Choices

You have the right to:

• Access, update, or delete your personal information
  
• Opt-out of marketing emails by clicking “unsubscribe” in our emails
  
• Opt-out of SMS messages by replying “STOP”
  
• Request information on how we process your data
  
• Withdraw consent at any time for future communications
  
• Lodge a complaint with a supervisory authority if you believe your rights have been violated

To exercise these rights, please contact us at getfitwithmer@gmail.com

United States – California

If you are a consumer located in California, we process your personal data in accordance with the California Consumer Privacy Act (CCPA). This section provides additional details about the personal information we collect and use for purposes of CCPA.

a. How We Collect, Use, and Disclose your Personal Information

The Personal Data We obtain section describes the personal information we may have collected about you within the last 12 months, including the categories of sources of that information. We collect this information for the purposes described in the How we use the information we obtain section. We share this information as described in the Third Parties, including processing by Lenus eHealth ApS section.

b. Your CCPA Rights and Choices

As a California consumer and subject to certain limitations under the CCPA, you have choices regarding our use and disclosure of your personal information:

• Exercising the right to know: You may request the following information about the personal 8 information we have collected about you:
  • the categories and specific pieces of personal information we have collected about you; • the categories of sources from which we collected the personal information;
  • the business or commercial purpose for which we collected the personal information;
  • the categories of third parties with whom we shared the personal information; and
  • the categories of personal information about you that we disclosed for a business purpose, and the categories of third parties to whom we disclosed that information for a business purpose.
• Exercising the right to delete: You may request that we delete the personal information we have collected from you, subject to certain limitations under applicable law.
• Exercising the right to opt-out from a sale: You may request to opt out of any “sale” of your personal information that may take place. We do not use, share, rent or sell the personal information of our customers for interest-based advertising. We do not sell or rent the personal information of our customers or our site visitors.
• Non-discrimination: The CCPA provides that you may not be discriminated against for exercising these rights.

How to contact us

If you have any questions about this Privacy Notice and/or about the privacy policies and practices of our service providers, please contact us at getfitwithmer@gmail.com.

Last updated: 1/29/2026