Last updated: September 10, 2026
Website Privacy and Cookie Notice
This notice explains how we handle your information when you use barefootstrength.com. Each section below covers a different part of the website.
About Barefoot Strength
Barefoot Strength is operated by C.C.J. Exercising Health Ltd. We are responsible for the uses of your information described here.
- Company number: HE398746
- VAT number: CY10398746F
- Address: 26 Makedonias Avenue, Building 17, Pyla 7080, Cyprus
- Privacy contact: academy@barefootstrength.com
1. Browsing the website
Cloudflare delivers our pages, images, and hosted videos. It also helps protect the website against abuse.
Your browser sends technical information when it requests a page. This includes your IP address, browser information, and the requested address. Hosting and security information is kept for the relevant operational purpose under the provider’s retention arrangements.
We process this information for our legitimate interests in running a reliable and secure website. These requests are needed to provide the website, even when you reject optional tracking.
2. Contacting us
Our Contact Us page uses Tally to display its form. Opening that page connects your browser to Tally.
If you submit the form, we receive the contact details and message you provide. Our team uses them to answer your inquiry. Relevant form and email providers help deliver that correspondence.
For purchase or service inquiries, the legal basis is taking steps you request before a contract or providing an existing contract. For other correspondence, we rely on our legitimate interest in responding to you.
We keep your inquiry while needed to answer it and provide related support. Records may need to remain longer for an unresolved dispute or a legal obligation. Without contact details, we may be unable to reply.
3. Watching the YouTube video
The homepage displays a preview of our YouTube video. The YouTube player loads when you choose to open it.
Playing the video connects your browser to YouTube’s privacy-enhanced player. YouTube then processes information needed for playback, including browser and network information. Its own privacy information explains additional processing and retention.
We provide the player to deliver the video you request. The website’s cookie buttons do not configure YouTube’s own settings.
Google and YouTube privacy policy
4. Joining the Academy
Membership buttons take you to our Academy checkout, hosted on circle.so. Stripe processes payments.
The checkout collects the information needed for your account and purchase. We use purchase records to provide your membership and administer billing. The legal bases are our contract with you and applicable accounting or legal obligations. Required financial records may remain after a subscription ends.
The Academy has its own privacy information. Its account and checkout settings are separate from the public website’s cookie choices.
Academy privacy policy · circle.so privacy policy · Stripe privacy policy
5. Optional website tracking
You can browse the website and go to checkout without accepting optional tracking.
- Accept allows analytics and advertising measurement.
- Reject optional keeps both off.
- Privacy details lets you choose the two categories separately.
Neither category is preselected for a new visitor. Open Privacy choices in the footer whenever you want to change your decision. Supported Global Privacy Control and Do Not Track signals also keep optional tracking off.
Website analytics — PostHog
With your analytics consent, PostHog records page visits and clicks on membership or resource links. This helps us understand which pages are useful and how visitors reach checkout.
These records can include the page and its revision, a temporary random visit identifier, and permitted campaign labels. A membership click can also include a random checkout reference. We do not use your email address as the visit identifier.
With the same analytics consent, session replay records how you browse our homepage and four sales pages, including scrolling, clicks, and changes to the page. It does not record your desktop or other websites. Forms, input fields, editable content, and embedded players are blocked from recordings. We do not record Contact Us, checkout, member pages, or the CMS. Console logs, network request bodies, and assessment information are not collected by this recording integration.
Recording starts only after you accept analytics. We strip query strings and fragments from recorded page addresses. The current PostHog recording retention setting is 30 days; recordings deliberately saved for investigation may be kept longer.
Our PostHog collection endpoint is in the United States. Network information may be processed when requests arrive. Using a random identifier does not make the records anonymous.
We keep measurement records while needed to compare page and campaign performance or investigate reporting discrepancies. This is separate from the shorter life of the identifier in your browser.
Advertising measurement — Meta
With your advertising consent, the Meta Pixel records page views and membership-button clicks. Meta may match this activity to browser or account information under its own policies.
Our integration does not run on Contact Us. It disables automatic event configuration and requests that Meta not create first-party cookies through this integration. Meta can still receive browser and network information. Its privacy policy explains its own uses and retention.
Tracking a visit through checkout
With analytics consent, recognized checkout links can carry campaign labels and a random checkout reference. Advertising consent also allows recognized advertising-click identifiers.
If the checkout retains the reference, it can help match a confirmed payment to a measured visit. A button click is not counted as a purchase. Billing records remain available even when a purchase cannot be matched to website tracking.
Rejecting or withdrawing consent removes this website’s optional attribution from the links it manages. It does not change circle.so’s separate tracking settings or erase information already received by a provider.
Remembering your choices
The website uses browser storage to remember your decision and, with permission, a measured visit:
- Privacy preference: valid for up to 180 days, after which we ask again. Its storage name is
bsf_public_consent_v1. - Replay session: a separate PostHog identifier in this website’s session storage connects public pages within the browser tab. It expires after 30 minutes of inactivity or when the tab’s session ends. Storage keys include
ph_bsf_public_replay. Withdrawing analytics clears this integration’s stored identifiers. - Analytics visit: expires after 30 minutes without a measured event. Its storage name is
bsf_public_session_v1. Rejecting or withdrawing analytics clears this identifier.
An expired entry is handled when the website next runs; it does not erase itself while your browser is closed. You can also clear website storage in your browser settings.
We remember choices to respect your preferences and meet applicable consent requirements. Withdrawing consent stops future optional tracking controlled by these settings. It does not automatically delete earlier records or change whether earlier processing was lawful.
Access to information and international processing
Our internal team operates from Cyprus. Service providers receive information needed for the functions described above. They may use authorized subprocessors. We may also share necessary records with advisers or authorities when legally required or justified to protect rights.
Providers may process information in the EEA, the United States, or other countries. Transfers that require safeguards must use an applicable adequacy decision or appropriate safeguards, such as the European Commission’s Standard Contractual Clauses. Additional protections may be needed. You can ask us for information about the safeguards relevant to your data or a copy of them.
Necessary legal records and restricted backup copies may remain after active records are deleted. Contact us if you want to understand retention for information relating to you.
Your privacy rights
Depending on applicable law, you can ask to access, correct, delete, restrict, or receive a portable copy of your information. You can object to processing based on legitimate interests and to direct marketing. You can also withdraw consent. These rights have conditions and exceptions.
Email academy@barefootstrength.com to make a request. We may need to verify your identity. We normally respond to GDPR requests within one month and explain any permitted extension.
You also have the right to lodge a complaint with a competent data protection authority.
This website’s measurement does not make decisions with legal or similarly significant effects solely through automated processing. We do not intentionally collect children’s information through the public website. Please contact us if a child has supplied information without the necessary authority.
Changes to this notice
We update this notice when our website or its processing changes. We will provide additional information or request new consent where required.