Privacy Policy
Version 1.2 · Effective 2026-09-26 · Last updated 2026-09-26
This policy explains what MB Move Better collects when you use mbmovebetter.com or buy a service, why, who handles it for us, how long we keep it, and what you can ask us to do with it. Questions: matt@mbmovebetter.com.
1. Who we are
MB Move Better is operated by MB Move Better LLC, of South Lake Tahoe, California ("we," "us"). We are responsible for your information.
Our coaching CRM (GoHighLevel) is set up and maintained for us by Honistee LLC (Wyoming) as our platform operator. Honistee acts only under our direction, accesses the CRM to operate and support it, does not copy your information out of it, and loses access if our arrangement ends.
2. What we collect
- Checkout: name, email, phone. Card details go directly to Stripe; we never see or store your full card number.
- Intake questionnaire: age, height, weight, goals, training history, routine, and mobility concerns, including areas of discomfort, past or current injuries, and surgeries. We need honest answers to work safely; we do not need medical records.
- Body photos and videos: three standardized photos (front, left side, right side) for the posture assessment; sixteen short movement videos for the movement assessment, which you send in one transfer through a Dropbox file-request link to Matthew's own Dropbox account. Used only to perform your assessment.
- Consent records: your acceptance of the Terms and Refund Policy at checkout, the Assessment-Use Consent on the intake form, and any Marketing Release tier you choose later, each with version and timestamp.
- Ad and campaign identifiers: tags in the link you arrived from (for example `utm_` parameters or `fbclid`), so we know which campaign worked. The Meta Pixel is not active at this version; see the Cookie Notice.
- Email and SMS engagement: whether a message was delivered, opened, or clicked. Texts are sent only if you tick the separate SMS box; reply STOP any time.
- Contact form and email: messages you send us.
- Server logs: IP address, browser type, and timestamps, kept by our host for security. Site analytics are cookieless and aggregate.
3. Why we use it
To process your purchase; perform your assessment and build your program or coaching plan; send the intake link, reminders, your report, and follow-ups about what you bought; answer your questions; invite you to related services (opt out any time); keep records for accounting, disputes, and legal obligations; and keep the site secure.
We never use your intake answers or photos for advertising, ad targeting, or anything other than your assessment and coaching unless you sign the separate, optional Marketing Content Release.
4. Who handles your information
| Provider | Role | Data touched | Location |
|---|---|---|---|
| GoHighLevel (HighLevel Inc.) | Coaching CRM, forms, file storage, email and SMS | Contact details, intake answers, photos, reports, consent records, engagement | United States |
| Honistee LLC | Platform operator for the CRM and site | Operator access only; no copies taken | United States |
| Dropbox, Inc. | File-request transfer and storage of movement-assessment videos (movement assessment only) | The videos you send, and the name and email you enter on the upload page | United States |
| Stripe, Inc. | Payments | Name, email, card details (Stripe only), purchase history | United States |
| Vercel Inc. | Hosting and cookieless analytics | Server logs, aggregate page views | United States |
| Meta Platforms, Inc. | Ad measurement — not active at this version; listed and consented to before it ships | Ad identifiers and standard events only; never intake answers or photos | United States |
Each provider is bound by its own privacy and security commitments and may not use your information for its own purposes. We do not sell your personal information or share it for cross-context behavioral advertising.
5. How long we keep it
- Photos and videos: deleted 12 months after your report is delivered, or sooner on request — including the copy of your movement videos in the Dropbox account they were sent to. Deleting them before delivery cancels the assessment; the Refund & Credit Policy applies. One exception: if you separately signed a Marketing Content Release authorizing an image or clip for marketing or a case study, that specific material is governed by the release — it stays up until you withdraw permission or we retire it — rather than by this 12-month deletion. Everything in your client record still goes on schedule.
- Client records (contact details, intake answers, reports, purchase history): life of our relationship plus four years after your last transaction, then deleted. Intake answers stay with your record because they document the screening we relied on.
- Consent records: as long as any data they authorize is kept, plus four years.
- Financial records: as long as tax law requires, in our accounting systems.
- Server logs: our host's default retention (days to weeks).
6. Your rights
Ask us any time to show you what we hold, correct it, or delete it; we respond within 30 days. You can also: request early deletion of your photos and videos; withdraw a Marketing Content Release (we remove your content from surfaces we control within 30 days); unsubscribe from marketing email using the link in any message; and stop texts by replying STOP.
California residents have additional rights under the CCPA/CPRA (know, delete, correct, opt out of sale or sharing). We do not sell or share, but we honor requests to that standard, and we will not treat you differently for making one. Email matt@mbmovebetter.com with the subject "Privacy request"; we may ask you to confirm your identity. We may keep what we need for a live payment dispute, legal claim, or legal obligation, and will tell you if that applies.
7. Children
Our services are for adults 18 and older, and we do not knowingly collect information from anyone under 18. If you believe a minor has submitted information, email us; we will delete it promptly and confirm to the parent or guardian.
8. Do Not Track
This site does not track you across other websites, so it does not change its behavior in response to browser "Do Not Track" signals. If that changes, this policy and the Cookie Notice will be updated first.
9. Security
Traffic to the site and CRM is encrypted in transit. Card data is handled by Stripe and never touches our systems. Access to your record is limited to Matthew and the platform operator on a need-to-know basis. No online system is perfectly secure, and we do not claim certifications we do not hold.
10. Changes
We update this policy as the business changes and revise the version and "Last updated" line. Material changes are emailed to active clients before they take effect.
11. Contact
MB Move Better · Matthew Booska · 2485 Ponderosa St, South Lake Tahoe, CA 96150 · matt@mbmovebetter.com
Related: Terms of Service · Refund & Credit Policy · Cookie Notice · Medical Disclaimer