Privacy Policy

1. Introduction

Welcome. This Privacy Policy explains how Xtremission LLC (“we,” “us,” or “our”) collects, uses, discloses, and safeguards your information when you visit our website xtremission.com (the “Site”) and interact with our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Site.

We are committed to protecting your personal information and your right to privacy. If you have any questions, please contact us at support@xtremission.com.

2. Information We Collect

We collect information in the following ways:

2.1 Information You Provide Directly

• Account Registration: Name, email address, username, and password.
• Contact Forms: Name, email address, phone number, and message content.
• Purchases / Transactions: Billing name, billing address, payment card information (processed securely via third-party payment processors- we do not store full card numbers).
• Surveys & Feedback: Responses to voluntary surveys, reviews, or feedback forms.

2.2 Information Collected Automatically

When you visit the Site, certain data is collected automatically:

• Device & Browser Data: IP address, browser type and version, operating system, device identifiers.
• Usage Data: Pages visited, time spent on pages, links clicked, referring URLs, and exit pages.
• Cookies & Tracking Technologies: We do not use tracking cookies- see Section 7.

2.3 Information from Third Parties

We do not receive personal information about you from third-party analytics providers, advertising partners, or social-media login integrations. The information we hold about you is what you provide to us directly (for example, through our contact form) and the limited technical data described in Section 2.2.

3. How We Use Your Information

We use the information we collect for the following lawful purposes:

Purpose	Legal Basis
Providing and operating the Site and services	Contract performance
Processing transactions and sending order confirmations	Contract performance
Responding to inquiries and support requests	Legitimate interest
Sending marketing communications (with your consent)	Consent
Personalizing your experience on the Site	Legitimate interest
Analyzing usage trends to improve the Site	Legitimate interest
Preventing fraud and ensuring security	Legitimate interest / Legal obligation
Complying with applicable laws and regulations	Legal obligation

We will never sell your personal data to third parties for their own marketing purposes.

4. Marketing Communications & Opt-In

We respect your inbox. We only send you marketing communications when you have clearly and actively opted in.

4.1 How We Obtain Your Consent

You may opt in to receive communications through any of the following mechanisms:

• Checkbox on Registration: A clearly labeled, unchecked by default checkbox at account signup (e.g., “Yes, I’d like to receive news, offers, and updates from Xtremission LLC.”).
• Newsletter Subscription Form: Submitting your email address via a dedicated subscription form on the Site.
• Checkout Opt-In: A clearly labeled, unchecked by default checkbox during purchase (separate from order confirmation emails, which are transactional).
• Preference Center: Updating your communication preferences at any time via your account settings.

We do not pre-tick consent boxes, use ambiguous language, or bundle marketing consent with other terms.

4.2 Types of Communications We May Send

Once you opt in, we may contact you via:

• Email: Newsletters, promotional offers, product updates, and event announcements.
• SMS / Text Messages: Order updates and promotional texts (only if you separately opt in to SMS).
• Push Notifications: Browser or app notifications (only if you grant permission in your browser/device settings).

4.3 How to Opt Out (Unsubscribe)

You may withdraw your consent and opt out of marketing communications at any time at no cost:

• Email: Click the “Unsubscribe” link at the bottom of any marketing email.
• SMS: Reply STOP to any text message.
• Account Settings: Log in and update your communication preferences under Settings → Notifications.
• Contact Us: Email support@xtremission.com and we will process your request within 5 business days.

Note: Opting out of marketing communications does not affect transactional messages (e.g., order confirmations, password resets, security alerts), which are required to deliver our services.

5. How We Share Your Information

We do not sell or rent your personal data. We may share your information only in the following circumstances:

• Service Providers: Trusted third-party vendors who assist us in operating the Site (e.g., hosting providers, payment processors, email platforms, analytics tools). These parties are contractually bound to use your data only on our behalf and in accordance with this policy.
• Legal Compliance: When required by law, court order, or government authority, or to protect the rights, property, or safety of Xtremission LLC, our users, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email and/or prominent notice on xtremission.com before your data is transferred and becomes subject to a different privacy policy.
• With Your Consent: We may share your information for any other purpose with your explicit prior consent.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. Specifically:

• Account Data: Retained for the duration of your account and up to 3 years after account closure.
• Transaction Records: Retained for 7 years for accounting and legal compliance purposes.
• Marketing Consent Records: Retained for the duration of the consent and for 3 years after withdrawal, to demonstrate compliance.
• Website Usage / Analytics Data: Retained for up to 26 months.

7. Cookies & Tracking Technologies

We do not use cookies, web beacons, or similar cross-site tracking technologies on this Site, and we do not use the Site to serve targeted or behavioral advertising. We do not operate a cookie consent banner or preference center because no consent-requiring cookies are set.

We may review aggregate, non-identifying server logs (such as page requests and error counts) generated by our hosting provider to keep the Site secure and running. This information is derived from standard web-server logs, not from cookies placed on your device.

8. Data Security

We implement industry-standard technical and organizational measures to protect your personal data, including:

• SSL/TLS Encryption for all data transmitted between your browser and our servers.
• Access Controls limiting data access to authorized personnel only.
• Regular Security Audits and vulnerability assessments.
• Pseudonymization and Encryption of stored sensitive data where appropriate.

No method of transmission over the Internet or electronic storage is 100% secure. While Xtremission LLC strives to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify relevant authorities within 72 hours and affected users without undue delay, as required by applicable law.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

Right	Description
Access	Request a copy of the personal data we hold about you.
Rectification	Request correction of inaccurate or incomplete data.
Erasure (“Right to be Forgotten”)	Request deletion of your data under certain circumstances.
Restriction	Request that we restrict processing of your data.
Portability	Receive your data in a structured, machine-readable format.
Objection	Object to processing based on legitimate interests or direct marketing.
Withdraw Consent	Withdraw any previously given consent at any time.

To exercise any of these rights, please submit a request to:

• 📧 Email: support@xtremission.com
• 📬 Mail: Xtremission LLC, Sevierville, TN 37862

We will respond to all verified requests within 30 days (or 45 days where permitted). We may need to verify your identity before processing your request.

10. Children’s Privacy

Our Site is not directed to individuals under the age of 13 (or 16 where applicable under GDPR). We do not knowingly collect personal information from children. If we become aware that we have collected data from a child without verifiable parental consent, we will take steps to delete that information promptly. If you believe a child has provided us personal information, please contact us at support@xtremission.com.

11. Third-Party Links

The Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of every website you visit.

12. International Data Transfers

If you are located outside of the United States, please be aware that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country. Where Xtremission LLC transfers data internationally, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses, adequacy decisions) in compliance with applicable laws.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

• Update the “Last Updated” date at the top of this page.
• Notify you via email (if you have an account) or a prominent banner on xtremission.com.
• For significant changes affecting how we use your data, we will seek renewed consent where required.

Your continued use of xtremission.com after the effective date of any changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact our Data Privacy Officer:

If you are located in the EU/EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local supervisory authority.