Let's Roll
← Back to Home

Privacy Rights (CCPA/GDPR)

Last Updated: June 3, 2025

Introduction

BlueHouse Capital LLC (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This notice explains your rights under the California Consumer Privacy Act (CCPA) and the General Data Protection Regulation (GDPR) as they relate to your use of Let's Roll.

Your Rights Under CCPA (California Residents)

If you are a California resident, you have the following rights regarding your personal information:

  • Right to Know: You have the right to request that we disclose what personal information we collect, use, disclose, and sell about you.
  • Right to Delete: You have the right to request the deletion of your personal information that we have collected, subject to certain exceptions.
  • Right to Opt-Out of Sale: You have the right to opt out of the sale of your personal information. We do not sell personal information.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.
  • Right to Correct: You have the right to request correction of inaccurate personal information that we maintain about you.
  • Right to Limit Use of Sensitive Personal Information: You have the right to limit the use and disclosure of sensitive personal information collected about you.

Categories of Personal Information Collected

We may collect the following categories of personal information:

  • Identifiers: Name, email address, username, IP address
  • Account Information: Login credentials, profile information, belt rank
  • Geolocation Data: Approximate location when using our gym finder features
  • Usage Data: Browsing history on our platform, check-in history, gym interactions
  • Inferences: Preferences and characteristics derived from the above information

Your Rights Under GDPR (EEA/UK Residents)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the GDPR:

  • Right of Access: You have the right to obtain confirmation as to whether your personal data is being processed and to access that data.
  • Right to Rectification: You have the right to have inaccurate personal data corrected and incomplete data completed.
  • Right to Erasure: You have the right to have your personal data deleted under certain circumstances (“right to be forgotten”).
  • Right to Restrict Processing: You have the right to restrict the processing of your personal data in certain situations.
  • Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Object: You have the right to object to the processing of your personal data based on our legitimate interests.
  • Right Not to Be Subject to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing, including profiling.

Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases:

  • Consent: When you have given us explicit consent to process your data for a specific purpose.
  • Contract: When processing is necessary for the performance of a contract with you (e.g., providing our services).
  • Legitimate Interest: When processing is necessary for our legitimate business interests, provided your rights do not override those interests.
  • Legal Obligation: When processing is necessary to comply with a legal obligation.

International Data Transfers

If you are located outside the United States, please be aware that your personal data may be transferred to and processed in the United States, where our servers are located. We take appropriate safeguards to ensure that your personal data is treated securely and in accordance with applicable data protection laws, including the use of Standard Contractual Clauses (SCCs) approved by the European Commission where required.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. When determining the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, and the purposes for which we process the data.

How to Exercise Your Rights

To exercise any of the rights described above, please contact us at:

We will respond to your request within 30 days (CCPA) or one month (GDPR). In certain cases, we may need to verify your identity before processing your request. If we need additional time, we will inform you of the reason and extension period.

Do Not Sell My Personal Information

We do not sell your personal information to third parties. If this practice changes in the future, we will update this notice and provide you with an opt-out mechanism.

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority. For EEA/UK residents, this would be the data protection authority in your country of residence. For California residents, you may contact the California Attorney General's office.

Changes to This Notice

We may update this privacy rights notice from time to time. We will notify you of any changes by posting the new notice on this page and updating the “Last Updated” date. We encourage you to review this notice periodically for any changes.