Privacy Policy

1. Introduction

Welcome to Habit Tracking Systems ("SimpleHabit," "we," "us," or "our"). We operate the website located at simplehabittracker.com and related services (collectively, the "Services"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it.

When you visit our website, download our templates, subscribe to our newsletter, or otherwise use our Services, you are trusting us with your information. We take that responsibility seriously. This policy is designed to give you clarity on what data we collect and why, using plain language rather than dense legal jargon wherever possible.

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Privacy Policy. If you do not agree with the terms set forth here, please discontinue use of our Services. If you have any questions, please do not hesitate to reach out to us at hello@cardioworkoutsession.com.

2. Information We Collect

We collect information that you provide directly to us, information collected automatically when you use our Services, and in some cases, information from third-party sources. The scope of information we collect is intentionally minimal — we only collect what we need to deliver and improve our Services.

Personal Information You Provide: When you subscribe to our newsletter, submit a contact form, download a resource, or otherwise communicate with us, you may provide us with personal information including your name, email address, and any content you choose to share. We do not require account creation to use the core features of our website.

Usage Data Collected Automatically: When you visit our website, our servers automatically record certain technical information, including your IP address (anonymized after 24 hours), browser type and version, operating system, referring URLs, pages visited, time spent on pages, and date and time of access. This data is used in aggregate form to understand how our website is being used and to improve the experience.

Cookies and Tracking Technologies: We use cookies and similar tracking technologies to maintain session state, remember your preferences, and analyze website traffic. You may control cookie settings through your browser. For more detail, see Section 7 (Cookies Policy) of this document.

3. How We Use Your Information

We use the information we collect for the following purposes, all of which are grounded in legitimate business interests or your direct consent:

• To deliver and maintain our Services, including processing template downloads and sending requested resources
• To send our newsletter and educational content to subscribers who have explicitly opted in
• To respond to your inquiries, comments, and requests submitted through our contact forms
• To analyze website usage patterns and improve the functionality, content, and design of our Services
• To detect, prevent, and address technical issues, security incidents, and fraudulent or harmful behavior
• To comply with applicable legal obligations and respond to lawful requests from public authorities

We do not use your information for automated decision-making or profiling in ways that produce legal or similarly significant effects. We do not sell your personal information to third parties under any circumstances. Our use of your data is always proportionate to the purpose for which it was collected.

If we wish to use your information for a purpose materially different from those described in this policy, we will notify you and, where required by law, seek your consent before proceeding with such new processing activities.

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the limited circumstances described below, and only to the extent necessary for those specific purposes.

Service Providers: We work with trusted third-party service providers who assist us in operating our website and delivering our Services. These include email delivery platforms (for newsletter distribution), analytics providers, and cloud hosting services. All service providers are contractually obligated to process your data only in accordance with our instructions and applicable privacy law, and are prohibited from using your information for their own independent purposes.

Legal Requirements: We may disclose your information if required to do so by law, or in the good-faith belief that such disclosure is reasonably necessary to comply with legal obligations, protect our rights or property, prevent fraud, or protect the personal safety of users or the public. In such cases, we will provide you with notice where permitted by law.

Business Transfers: In the event of a merger, acquisition, reorganization, or sale of all or substantially all of our assets, your information may be transferred as part of that transaction. We will notify you via the email address you have provided and/or a prominent notice on our website prior to your information becoming subject to a different privacy policy.

5. Data Security

We take the security of your personal information seriously and implement appropriate technical and organizational measures to protect it against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit using TLS/SSL, restricted access controls for internal systems, regular security assessments, and staff training on data protection practices.

Your Data, Your Control

We believe personal data deserves the same care you give your daily routines — consistent, transparent, and entirely under your control. Just as tracking a habit builds self-awareness, we're committed to keeping you fully informed about how your data is handled. You decide what you share. You decide how long we keep it. And you can request deletion at any time, no questions asked.

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security, and we encourage you to take reasonable precautions to protect your own data, such as using strong unique passwords and being cautious about what information you share online.

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users and relevant regulatory authorities within the timeframes required by applicable law. We will provide information about the nature of the breach, the data affected, and the steps we are taking to address it.

6. Your Rights and Choices

Depending on your location and applicable law (including the GDPR in the European Economic Area, the UK Data Protection Act 2018, and similar legislation in other jurisdictions), you may have the following rights with respect to your personal information:

• Right of Access: You may request a copy of the personal information we hold about you, along with information about how it is being processed.
• Right to Rectification: You may request that we correct inaccurate or incomplete personal information we hold about you.
• Right to Erasure: You may request that we delete your personal information, subject to certain exceptions where we have compelling legitimate grounds to retain it.
• Right to Restrict Processing: You may request that we restrict the processing of your personal information in certain circumstances.
• Right to Data Portability: Where processing is based on your consent or a contract, you may request a copy of your data in a structured, machine-readable format.
• Right to Object: You may object to the processing of your personal information for direct marketing purposes, or where processing is based on legitimate interests.
• Right to Withdraw Consent: Where we rely on your consent as the legal basis for processing, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at hello@cardioworkoutsession.com. We will respond to all legitimate requests within 30 days. Newsletter subscribers may unsubscribe at any time via the unsubscribe link in any email we send.

7. Cookies Policy

Cookies are small text files placed on your device when you visit a website. We use the following categories of cookies on our website:

• Strictly Necessary Cookies: These cookies are essential for the operation of our website and cannot be switched off. They enable basic functions such as page navigation and access to secure areas. The website cannot function properly without these cookies, and they do not store any personally identifiable information.
• Performance and Analytics Cookies: These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our website. They help us understand which pages are most popular, how visitors navigate between pages, and whether users encounter error messages. All information collected by these cookies is aggregated and therefore anonymous.
• Functional Cookies: These cookies enable enhanced functionality and personalization, such as remembering your preferences between visits. They may be set by us or by third-party providers whose services we have added to our pages.

We do not use advertising cookies or cross-site tracking technologies. We do not participate in any ad networks or retargeting programs. Your browsing behavior on our website is not shared with advertisers.

8. Children's Privacy

Our Services are not directed to children under the age of 13 (or under the age of 16 where applicable under local law), and we do not knowingly collect personal information from children. Habit tracking and personal development resources on our website are intended for adults and older teenagers with appropriate parental guidance.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us immediately at hello@cardioworkoutsession.com. We will take prompt steps to delete such information from our records. We do not knowingly retain personal information from individuals under the applicable age threshold.

If we become aware that we have collected personal information from a child without appropriate consent, we will delete that information as quickly as reasonably practicable. We encourage parents to monitor their children's internet use and to help enforce this policy by instructing their children never to provide personal information on our website without parental permission.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes to this policy, we will provide notice by posting the updated policy on this page with a new "Last Updated" date at the top, and where appropriate, by sending an email notification to our newsletter subscribers.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our Services after the posting of any changes to this policy constitutes your acceptance of those changes. If you disagree with the revised policy, you should discontinue use of our Services and, if applicable, request deletion of your data.

Previous versions of this Privacy Policy are available upon request. If you have questions about changes to this policy or how they may affect you, please contact us using the details provided in Section 10 below.

10. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please do not hesitate to reach out. We are committed to addressing all privacy-related inquiries promptly and transparently. Our data privacy team aims to respond to all requests within 5 business days and to fully resolve all requests within 30 calendar days.

For formal legal requests, including data subject access requests under GDPR or similar legislation, please include your full name, the email address associated with any account or subscription, and a clear description of your request. This will help us locate your records and process your request as efficiently as possible.