How we handle your information

Privacy Policy

Effective Date: September 18, 2026. Vibeat LLC, doing business as VOLTARA (“VOLTARA,” “we,” “us”), 1410 Ponce de Leon Blvd, Coral Gables, FL 33134.

1. Information We Collect

  • Contact information: name, email address, phone number, preferred language.
  • Health and safety information from our pre-session medical waiver and screening.
  • Client profile / starting-point information (optional), used to help your coach tailor your program.
  • Body composition scan data (Visbody equipment).
  • Payment information: processed through iPOSpays' hosted, tokenized payment form. Card numbers are never transmitted to or stored on our servers; we retain only a secure reusable token.
  • Communications sent to us via WhatsApp, email, or our booking system.
  • Standard technical data (IP address, browser type, pages visited).
  • Client portal data: if you use our client portal, a six-digit login code sent to your email and a resulting 30-day session token, and the invoices, scan records, and cards on file visible through the portal.
  • Consent log data: for each booking submission, we log the IP address, user agent (browser/device string), referring page, and the verbatim text of the consent checkboxes as displayed to you at the time.

2. How We Use Your Information

  • To schedule and confirm sessions and respond to inquiries.
  • To evaluate your eligibility for EMS training and ensure your safety.
  • To track body composition and training progress, if you use our scanning service.
  • To help your coach personalize your program, if you share starting-point information.
  • To process membership payments.
  • To send appointment confirmations/reminders, and — only with separate opt-in — marketing communications.

3. Third-Party Service Providers

We share personal information only with the following service providers, solely as necessary to operate our services. None of these providers are authorized to use your information for their own marketing purposes.

  • Twilio — sends appointment SMS messages (A2P 10DLC registered).
  • Meta (WhatsApp Business Cloud) — sends appointment WhatsApp messages, if you select that channel.
  • iPOSpays — processes payments via hosted, tokenized fields.
  • Visbody — stores your body composition scan data on its own cloud system.
  • Our email service provider (DreamHost).
  • OVH US LLC — our website hosting provider.
  • Cloudflare — sits in front of all site traffic as our CDN and DNS provider, and as a result sees every visitor's IP address. It does not use this information for its own purposes.
  • Wasabi — stores our hourly and weekly off-site backups, which include the booking database, signed waivers, and body composition scan records. This means health information leaves our primary server environment as part of routine backup, encrypted at rest and in transit.
  • Google (Google Fonts) — loading our site's typography discloses the visitor's IP address to Google. See Section 7 for how this is used.

4. Text Messages and WhatsApp

Appointment confirmations and reminders are sent via SMS (Twilio) or WhatsApp (Meta WhatsApp Business Cloud), using (786) 807-2680.

  • As of this policy's effective date, we send appointment-related messages only. Any future marketing messages require separate opt-in.
  • Message frequency corresponds to your actual appointment activity; marketing messages, if ever sent, are limited to up to 4 per month.
  • Message and data rates may apply.
  • Consent to receive messages is not a condition of purchasing any membership or service.
  • Reply STOP at any time to opt out. Reply HELP for assistance.

5. Email Communications — CAN-SPAM

  • Marketing emails require separate opt-in, and will accurately identify VOLTARA as sender with our physical address.
  • Every marketing email includes a working unsubscribe mechanism, honored within 10 business days.
  • Appointment-related emails are not marketing and continue regardless of marketing opt-out status.

6. Body Composition Scan Data

Retained for three years from the scan date, in two parts:

  • Our own systems: automatically and permanently deleted after three years via an automated monthly process.
  • Visbody's cloud copy: Visbody provides no deletion API; deletion requests are processed manually by our staff on your behalf, tracked on an internal deletion worksheet.
  • You may request access to or deletion of your scan data at any time.

7. Cookies and Tracking Technologies

  • Strictly necessary: required for the site to function. Cannot be disabled.
  • Functional: Google Fonts (typography only).
  • Analytics: not currently in use.
  • Advertising/marketing: not currently in use. No tracking pixel or advertising tag is active on this site as of this policy's effective date.

8. Sale or Sharing of Personal Information; Do Not Sell/Share

VOLTARA does not sell personal information and does not share it with third parties for cross-context behavioral advertising as of this policy’s date. Before any tracking technology capable of triggering these obligations is added, our internal Tracking and Marketing Technology Review Policy requires: updating this Privacy Policy, adding a cookie consent banner, and adding a “Do Not Sell or Share My Personal Information” link to the site footer.

9. California Privacy Rights (CCPA)

If you are a California resident, you have the right to: know what personal information we have collected about you; request deletion of your personal information; correct inaccurate personal information; opt out of the sale or sharing of personal information (not currently applicable, as described above); and not be discriminated against for exercising these rights.

Health information collected through our medical waiver and screening process is “sensitive personal information” under the CCPA. We use this information solely to evaluate your eligibility and safety for EMS training, and you have the right to limit its use to that purpose.

To exercise these rights, contact us at [email protected] or (786) 807-2680. We may need to verify your identity before processing a request. You may also designate an authorized agent to make a request on your behalf.

10. Age Requirements and Children's Privacy

Our services and this website are intended for users 18 and older. We do not knowingly collect personal information from anyone under 18 through this website. See our Terms of Use for the full age policy.

11. Do Not Track Signals

Because no industry standard for responding to browser “Do Not Track” signals has been adopted, this site does not currently respond to them. Since we do not use advertising tracking technology as of this policy’s date, this has no practical effect on your data today.

12. Data Security

  • The entire site is served over HTTPS/TLS encryption.
  • Server access logs are retained for 14 days and rotated daily.
  • Booking data is stored on our own dedicated platform.
  • Client portal access is protected by a one-time six-digit code sent to your registered email address, with a resulting session token valid for 30 days; no separate password is stored.

13. Data Breach Notification

In the event of a breach affecting your personal information, we will notify affected individuals in accordance with Florida law (Fla. Stat. § 501.171), generally within 30 days of discovery.

14. Data Retention — Other Records

  • Booking and contact records: retained for the duration of your relationship with VOLTARA and for a reasonable period afterward for legal and accounting purposes.
  • Consent records (SMS/WhatsApp/email opt-ins): retained for as long as required to demonstrate compliance with applicable law.
  • Signed Membership Agreements and waivers: retained per our standard business record-keeping practices, consistent with Florida's health studio recordkeeping requirements.

15. Dispute Resolution

Any dispute arising from this Privacy Policy or our collection or use of your information shall be resolved exclusively through binding arbitration in Florida, on an individual basis only and not as part of any class, collective, or representative action, to the fullest extent permitted by law. YOU AND VOLTARA EACH KNOWINGLY AND VOLUNTARILY WAIVE THE RIGHT TO A JURY TRIAL for any such dispute.

16. Limitation of Liability

To the fullest extent permitted by law, VOLTARA's liability arising from this Privacy Policy or your use of your personal information as described herein shall not exceed the amount you have paid VOLTARA in the twelve months preceding the claim, except where such limitation is prohibited by law.

17. Your Rights and How to Contact Us

To ask about this policy, request access to your data, or file a complaint, contact us at [email protected] or (786) 807-2680. If you are not satisfied with our response, Florida residents may also contact the Florida Attorney General's Office of Consumer Protection.

18. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted here with an updated effective date, and where required by law, we will provide additional notice before the change takes effect. Any new use of tracking technology will trigger an update to this policy before that technology is activated, per our internal Tracking and Marketing Technology Review Policy.