THE MOVEMENT.
This website is operated by **[*********], [**********]** (“we”, “us”, “our”). We are the controller responsible for the personal information described in this Policy.
For any privacy question or to exercise your rights, contact us at **[privacy@tonyhuge.is].**
This website, the book it accompanies, and all membership areas are intended solely for adults who are eighteen (18) years of age or older, or twenty-one (21) where a higher age of majority applies. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a person under 18, we will delete that information and terminate the account.
If you believe a minor has provided us with personal information, contact us at [privacy@tonyhuge.is] and we will remove it.
3.1 Information you give us directly
3.2 Information collected automatically
3.3 Information from third parties
Some of the information described above can reveal information about your body or your health. This includes physique photographs, the fact that you hold a membership on a site dedicated to hormonal and performance enhancement, and anything you choose to tell the AI assistant.
We treat this information as consumer health data. We collect it only with your affirmative, opt-in consent, given at the moment you submit it. We do not sell it, and we do not use it for advertising. You can withdraw your consent at any time, as described in our Consumer Health Data Privacy Notice.
Please do not send us medical records, laboratory results, prescriptions, or details of any diagnosis or treatment. We do not need them, we do not want them, and we are not equipped to hold them. Any such information you send us unsolicited will be deleted.
The members area includes an AI assistant that answers questions about the contents of the book. You should understand the following before using it:
Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract, for account creation, membership, and payment; consent, for marketing emails, non-essential cookies, physique photographs, publication on The Wall, and all consumer health data; legitimate interests, for site security, fraud prevention, and service improvement; and legal obligation, for tax, accounting, and record-keeping duties.
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.
We use strictly necessary cookies to keep you logged in, remember your membership level, secure form submissions, and operate the shopping and checkout process. These cannot be switched off.
We also use functional and analytics cookies to remember your preferences and understand how the site is used. Where required by law, we ask for your consent before setting them, and you can change your choice at any time through the cookie settings link in the footer.
We do not use advertising cookies, and we do not permit third parties to collect information through this site for cross-context behavioural advertising.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We disclose it only to the following categories of service providers, who act on our instructions:
**[RECOMMENDATION: name each specific provider here — Stripe, AWeber, Cloudflare, etc. Washington law requires naming the specific companies in Part 2, and naming them here also builds more trust than the generic categories]**
We may also disclose information where required by law, to respond to a lawful request from a public authority, to protect our rights or the safety of any person, or in connection with a merger, acquisition, or sale of assets, in which case we will notify you.
We are based in the United States and our servers are located in **[VPS COUNTRY]**. Some of our service providers, including our AI provider, process information outside the United States and outside the European Economic Area.
Where we transfer personal information out of the EEA or the UK, we rely on the European Commission’s Standard Contractual Clauses or the UK International Data Transfer Addendum, together with additional safeguards where required. You may request a copy of the relevant safeguards using the contact details in Section 14.
Depending on where you live, you may have the right to: access the personal information we hold about you; correct inaccurate information; delete your information; obtain a portable copy; object to or restrict certain processing; withdraw consent; opt out of marketing; and not be discriminated against for exercising these rights.
Residents of California, Colorado, Connecticut, Virginia and other US states with comprehensive privacy laws additionally have the right to opt out of the sale or sharing of personal information and of profiling, and the right to limit the use of sensitive personal information. As stated above, we do not sell or share personal information and we do not carry out profiling that produces legal or similarly significant effects.
To exercise any of these rights, email [privacy@tonyhuge.is]. We will verify your identity before acting, and we will respond within the period required by the law that applies to you, which is normally 30 or 45 days. If we refuse your request, you may appeal by replying to our decision, and you may complain to your data protection authority or state attorney general.
You may unsubscribe from marketing emails at any time using the link at the bottom of every message. This does not stop transactional messages about your account.
Account and membership records: for as long as your account is active, and then **[PERIOD — recommended: 3 years]** after it closes.
Payment and tax records: **[PERIOD — normally 7 years due to tax obligations]**
Inner Circle applications that are rejected, including the photograph: **[PERIOD — recommended: 90 days, then deleted]**
AI assistant conversations: **[PERIOD — recommended: 12 months]**
Contact form messages: **[PERIOD — recommended: 24 months]**
Published Wall submissions remain public until you ask us to remove them, and we will remove them within a reasonable time of your request.
**These periods have to be decided and then actually HONORED: if the document says 90 days and rejected photos are still on the server two years later, the published policy becomes the evidence against you. Schedule the automatic deletion the same day you publish this.**
We protect your information with encrypted connections, access controls, restricted administrative accounts, two-factor authentication for administrators, regular software updates, and encrypted off-site backups. Uploaded photographs are stored in non-public locations and reviewed manually before any publication.
No system is completely secure. If a breach affects your personal information, we will notify you and the relevant authorities within the time limits the law requires.
Anything published on The Wall is public. It can be seen, copied, indexed by search engines, and shared by anyone. Photographs submitted to The Wall are published only after moderation and only where you have ticked the consent box, but once a photograph is public we cannot control what others do with it. Consider carefully before submitting an identifiable image to a website about hormonal enhancement.
This site links to third-party websites, retailers, documentaries, and social media platforms. We are not responsible for their privacy practices, and this Policy does not apply to them.
We may update this Policy. When we do, we will change the date at the top and, if the change is significant, notify registered members by email. Where the change involves collecting or sharing consumer health data for a new purpose, we will obtain your consent before it takes effect.
**[LEGAL ENTITY NAME] · [POSTAL ADDRESS] · [privacy@tonyhuge.is]**
This website is operated by **[*********], [**********]** (“we”, “us”, “our”). We are the controller responsible for the personal information described in this Policy.
For any privacy question or to exercise your rights, contact us at **[privacy@tonyhuge.is].**
This website, the book it accompanies, and all membership areas are intended solely for adults who are eighteen (18) years of age or older, or twenty-one (21) where a higher age of majority applies. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a person under 18, we will delete that information and terminate the account.
If you believe a minor has provided us with personal information, contact us at [privacy@tonyhuge.is] and we will remove it.
3.1 Information you give us directly
3.2 Information collected automatically
3.3 Information from third parties
Some of the information described above can reveal information about your body or your health. This includes physique photographs, the fact that you hold a membership on a site dedicated to hormonal and performance enhancement, and anything you choose to tell the AI assistant.
We treat this information as consumer health data. We collect it only with your affirmative, opt-in consent, given at the moment you submit it. We do not sell it, and we do not use it for advertising. You can withdraw your consent at any time, as described in our Consumer Health Data Privacy Notice.
Please do not send us medical records, laboratory results, prescriptions, or details of any diagnosis or treatment. We do not need them, we do not want them, and we are not equipped to hold them. Any such information you send us unsolicited will be deleted.
The members area includes an AI assistant that answers questions about the contents of the book. You should understand the following before using it:
Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract, for account creation, membership, and payment; consent, for marketing emails, non-essential cookies, physique photographs, publication on The Wall, and all consumer health data; legitimate interests, for site security, fraud prevention, and service improvement; and legal obligation, for tax, accounting, and record-keeping duties.
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.
We use strictly necessary cookies to keep you logged in, remember your membership level, secure form submissions, and operate the shopping and checkout process. These cannot be switched off.
We also use functional and analytics cookies to remember your preferences and understand how the site is used. Where required by law, we ask for your consent before setting them, and you can change your choice at any time through the cookie settings link in the footer.
We do not use advertising cookies, and we do not permit third parties to collect information through this site for cross-context behavioural advertising.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We disclose it only to the following categories of service providers, who act on our instructions:
**[RECOMMENDATION: name each specific provider here — Stripe, AWeber, Cloudflare, etc. Washington law requires naming the specific companies in Part 2, and naming them here also builds more trust than the generic categories]**
We may also disclose information where required by law, to respond to a lawful request from a public authority, to protect our rights or the safety of any person, or in connection with a merger, acquisition, or sale of assets, in which case we will notify you.
We are based in the United States and our servers are located in **[VPS COUNTRY]**. Some of our service providers, including our AI provider, process information outside the United States and outside the European Economic Area.
Where we transfer personal information out of the EEA or the UK, we rely on the European Commission’s Standard Contractual Clauses or the UK International Data Transfer Addendum, together with additional safeguards where required. You may request a copy of the relevant safeguards using the contact details in Section 14.
Depending on where you live, you may have the right to: access the personal information we hold about you; correct inaccurate information; delete your information; obtain a portable copy; object to or restrict certain processing; withdraw consent; opt out of marketing; and not be discriminated against for exercising these rights.
Residents of California, Colorado, Connecticut, Virginia and other US states with comprehensive privacy laws additionally have the right to opt out of the sale or sharing of personal information and of profiling, and the right to limit the use of sensitive personal information. As stated above, we do not sell or share personal information and we do not carry out profiling that produces legal or similarly significant effects.
To exercise any of these rights, email [privacy@tonyhuge.is]. We will verify your identity before acting, and we will respond within the period required by the law that applies to you, which is normally 30 or 45 days. If we refuse your request, you may appeal by replying to our decision, and you may complain to your data protection authority or state attorney general.
You may unsubscribe from marketing emails at any time using the link at the bottom of every message. This does not stop transactional messages about your account.
Account and membership records: for as long as your account is active, and then **[PERIOD — recommended: 3 years]** after it closes.
Payment and tax records: **[PERIOD — normally 7 years due to tax obligations]**
Inner Circle applications that are rejected, including the photograph: **[PERIOD — recommended: 90 days, then deleted]**
AI assistant conversations: **[PERIOD — recommended: 12 months]**
Contact form messages: **[PERIOD — recommended: 24 months]**
Published Wall submissions remain public until you ask us to remove them, and we will remove them within a reasonable time of your request.
**These periods have to be decided and then actually HONORED: if the document says 90 days and rejected photos are still on the server two years later, the published policy becomes the evidence against you. Schedule the automatic deletion the same day you publish this.**
We protect your information with encrypted connections, access controls, restricted administrative accounts, two-factor authentication for administrators, regular software updates, and encrypted off-site backups. Uploaded photographs are stored in non-public locations and reviewed manually before any publication.
No system is completely secure. If a breach affects your personal information, we will notify you and the relevant authorities within the time limits the law requires.
Anything published on The Wall is public. It can be seen, copied, indexed by search engines, and shared by anyone. Photographs submitted to The Wall are published only after moderation and only where you have ticked the consent box, but once a photograph is public we cannot control what others do with it. Consider carefully before submitting an identifiable image to a website about hormonal enhancement.
This site links to third-party websites, retailers, documentaries, and social media platforms. We are not responsible for their privacy practices, and this Policy does not apply to them.
We may update this Policy. When we do, we will change the date at the top and, if the change is significant, notify registered members by email. Where the change involves collecting or sharing consumer health data for a new purpose, we will obtain your consent before it takes effect.
**[LEGAL ENTITY NAME] · [POSTAL ADDRESS] · [privacy@tonyhuge.is]**
Effective date: **[PUBLICATION DATE]**
This Notice applies to consumer health data and is provided under the Washington My Health My Data Act, the Nevada consumer health data law, and similar state laws. It applies in addition to our general Privacy Policy.
Categories of Consumer Health Data We Collect
Sources of This Data
Why We Collect It
We do not use consumer health data for advertising, and we do not sell it.
Who We Share It With
**[NAME EACH SPECIFIC PROVIDER AND AFFILIATE HERE. The law requires proper names, not categories. Format example: “Our hosting provider, [NAME]. Our AI provider, [NAME].”]**
We do not share consumer health data with any other third party, and we do not sell it. We will not share it for a new purpose without first obtaining your consent.
**This is the section that gets breached the most and the easiest one to check from the outside. The real company names must go in.**
Your Rights
If you are a Washington or Nevada consumer, or a resident of another state with a consumer health data law, you have the right to:
To exercise any of these rights, email **[privacy@tonyhuge.is]** with the subject line “Consumer Health Data Request”. We will respond within 45 days, which we may extend once by a further 45 days where reasonably necessary, and we will tell you if we do. If we deny your request, you may appeal by replying to our response, and you may file a complaint with your state attorney general.
Contact
**[LEGAL ENTITY NAME] · [POSTAL ADDRESS] · [privacy@tonyhuge.is]**
