Request an intake
Back to home

Privacy Policy

Last updated: September 23, 2026

This Privacy Policy explains how Plus Ultra Performance LLC ("Plus Ultra Performance", "we", "us" or "our") collects, uses, shares and protects personal information when you visit https://plusultraperformance.com (the "Website") or contact us about our online powerlifting coaching services. It also explains the choices and rights available to you. This policy is effective as of September 23, 2026.

1. Who we are (data controller)

The controller responsible for the personal information described in this policy is Plus Ultra Performance LLC, a limited liability company organized under the laws of the State of New Mexico, United States, with its registered address at 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110, United States. You can contact us about any privacy matter by email at info@plusultraperformance.com. We do not publish a telephone number; email is our official contact channel for privacy requests.

We provide personalized online powerlifting coaching for adults, including strength programming for the squat, bench press and deadlift, technique review of training videos you send us, periodization and meet preparation, and accountability (check-ins, review and adjustment). We are not a healthcare provider and the Website is not a medical service.

2. Scope of this policy

This policy covers personal information processed through the Website and through email correspondence that starts from the Website. If you become a client, the processing of information needed to deliver coaching (for example, training history, goals and, only with your explicit consent, health-related information you choose to share) is also governed by your written proposal or coaching agreement, which will refer to this policy. Our Cookie Policy explains the browser storage used by the Website in more detail.

3. Information we collect

3.1 Information you give us through the contact form

When you use the contact form on the Website, we collect:

  • Name (required);
  • Email address (required), so that we can reply to you;
  • Phone number (optional), only if you choose to provide it;
  • Your message (required), including any information you decide to include in it;
  • Privacy consent: a required checkbox confirming that you have read this policy, together with the date and time the form was submitted.

The form also contains a hidden anti-spam field (a so-called "honeypot") that is invisible to people and is only filled in by automated bots. It does not collect any information about you. When you submit the form, the message is sent by email to our mailbox at info@plusultraperformance.com. The Website itself does not store your message in a database.

3.2 Information you give us by email

If you write to us directly, we receive your email address, any name associated with it, the content of your message and any attachments, together with the technical metadata that email systems normally add (such as dates and routing information).

3.3 Information collected automatically

  • Server access and security logs. Like almost every website, our web server automatically records technical information about each request, such as the IP address, the browser user agent (browser and operating system type), the page or file requested, the referring page and timestamps. We use these logs to operate, secure and troubleshoot the Website.
  • Rate-limit records. To protect the contact form from abuse, the server keeps a short-lived record keyed by a one-way hash of the IP address used to submit the form, together with a counter and a timestamp. These records are kept for no more than one hour.
  • Browser storage (localStorage). The Website stores two small entries in your own browser: pu-lang, which remembers whether you chose English or Spanish, and pu-consent, which records your cookie-banner choice and the date you made it. These entries stay on your device and are not sent to our server. Details are in our Cookie Policy.

The Website does not set cookies, does not use analytics tools, does not use advertising or marketing pixels, does not embed third-party content (such as videos, maps or social media widgets) and loads its fonts from our own server rather than from third-party font services. As a result, visiting the Website does not transmit your information to advertising networks, analytics companies or social media platforms.

3.4 Information we do not want through the form

Please do not send health information, medical records, diagnoses, medication details, payment card numbers, government identification numbers or other sensitive information through the contact form or in your first email. We do not need it to answer an inquiry. See section 12 on sensitive information.

4. How we use your information and our legal bases

We use personal information only for the purposes listed below. Where the EU General Data Protection Regulation (GDPR) or the UK GDPR applies, we rely on the legal bases in Article 6 indicated for each purpose.

  • Responding to your inquiry and answering your questions about coaching. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b)) and, for general questions, our legitimate interest in replying to people who contact us (Art. 6(1)(f)). You also give your consent by ticking the privacy checkbox (Art. 6(1)(a)).
  • Preparing a written proposal or coaching agreement if you ask for one. Legal basis: pre-contractual steps at your request (Art. 6(1)(b)).
  • Delivering coaching services if you become a client, as described in your agreement. Legal basis: performance of a contract (Art. 6(1)(b)); for any health-related information, your explicit consent (Art. 9(2)(a)).
  • Operating, securing and maintaining the Website, including preventing spam, fraud and abuse, detecting attacks and fixing errors through server logs and rate-limit records. Legal basis: our legitimate interests in keeping the Website available and secure (Art. 6(1)(f)).
  • Remembering your language and consent choices in your browser. Legal basis: these entries are strictly necessary to provide the service you request or to record your consent choice, and are used for no other purpose.
  • Keeping business, accounting and tax records and responding to lawful requests from authorities. Legal basis: compliance with legal obligations (Art. 6(1)(c)).
  • Establishing, exercising or defending legal claims. Legal basis: our legitimate interests (Art. 6(1)(f)).

Where we rely on legitimate interests, we have considered your interests and fundamental rights and concluded that the processing is limited, expected and proportionate. You may object to it at any time (see section 10). We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects, and we do not send marketing emails. If we ever wish to send newsletters or marketing communications, we will only do so with your prior consent where required and with an easy way to unsubscribe.

5. How we share your information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) and similar US state privacy laws. We have not sold or shared personal information in the preceding 12 months. We share personal information only with:

  • Our hosting and IT service provider, which runs the servers that host the Website and our email in Germany (European Union), acting as a processor on our behalf and under our instructions;
  • The payment provider stated in your proposal, if you become a client and pay fees. That provider processes payment information under its own terms and privacy policy; we do not receive or store full payment card numbers;
  • Professional advisers, such as accountants, auditors or lawyers, where reasonably necessary and under a duty of confidentiality;
  • Authorities, courts or other parties when required by law, to respond to valid legal process, or to protect our rights, our clients or others from fraud or harm;
  • A successor entity in the event of a merger, acquisition, reorganization or sale of all or part of our business, subject to this policy or an equally protective one.

Our processors may only use personal information to provide services to us and are bound by contractual confidentiality and data protection obligations.

6. International data transfers

Plus Ultra Performance LLC is a US company, while the Website and our email are hosted on servers located in Germany (European Union). Personal information may therefore be processed in the European Union and accessed from the United States by us. Where the GDPR or UK GDPR applies and personal information is transferred to a country that has not been recognized as providing an adequate level of protection, we rely on appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission (and the UK Addendum where relevant), or on another transfer mechanism permitted by law, together with supplementary measures where needed. You may request more information about these safeguards by writing to us.

7. How long we keep your information

  • Inquiries and related correspondence: up to 24 months after our last contact with you, unless a client relationship begins. If you become a client, we keep the information for the duration of the agreement and afterwards for as long as required by the agreement and by applicable tax, accounting and legal record-keeping obligations.
  • Server access and security logs: for a limited period, normally not more than 90 days, unless a specific log is needed longer to investigate or address a security incident or abuse.
  • Rate-limit records of the contact form: up to 1 hour.
  • Browser storage entries (pu-lang and pu-consent): stored only on your device; pu-lang persists until you clear it and pu-consent for up to 12 months, after which you are asked again.

When the retention period ends, we delete or anonymize the information, unless we must keep it longer to comply with a legal obligation or to establish, exercise or defend legal claims.

8. How we protect your information

We apply reasonable administrative, technical and organizational measures appropriate to the nature of the information we handle. These include encrypted HTTPS connections for the Website, a static website architecture that does not keep a database of visitor submissions, hashing of IP addresses in rate-limit records, anti-spam controls on the contact form, access to mailboxes and servers restricted to authorized personnel, and data minimization (we only ask for what we need). No method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will notify you and the relevant authorities where required by law.

9. Your privacy rights

9.1 If you are in the European Economic Area, the United Kingdom or Switzerland

Subject to the conditions and exceptions of the GDPR, UK GDPR or Swiss data protection law, you have the right to:

  • Access the personal information we hold about you and receive a copy;
  • Rectification of inaccurate or incomplete information;
  • Erasure of your information (the "right to be forgotten");
  • Restriction of processing in certain circumstances;
  • Data portability, meaning to receive the information you provided to us in a structured, commonly used and machine-readable format, or have it transmitted to another controller;
  • Object to processing based on our legitimate interests;
  • Withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal;
  • Lodge a complaint with a supervisory authority, in particular in the country where you live or work or where an alleged infringement occurred. We would appreciate the chance to address your concern first, so please contact us.

9.2 If you live in California or another US state with a consumer privacy law

To the extent the CCPA/CPRA or a similar privacy law of another US state (such as Colorado, Connecticut, Virginia, Utah, Texas, Oregon and others) applies to us and to you, you may have the right to:

  • Know and access the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes of collection and the categories of third parties with whom we disclose it;
  • Delete personal information we collected from you, subject to legal exceptions;
  • Correct inaccurate personal information;
  • Opt out of the sale of personal information, the sharing of personal information for cross-context behavioral advertising, targeted advertising and profiling. We do not engage in any of these activities, but you may still send us an opt-out request and we will record it;
  • Limit the use of sensitive personal information. We only use sensitive information, if at all, for the purposes allowed by law and with your consent;
  • Non-discrimination: we will not deny you services, charge you different prices or provide a different level of quality because you exercised your privacy rights;
  • Use an authorized agent to submit a request on your behalf. We may ask the agent for written, signed permission from you and may ask you to verify your identity directly with us;
  • Appeal our decision if we decline to act on your request. To appeal, reply to our decision email with the word "Appeal" in the subject line. We will respond to your appeal within the period required by applicable law, and if the appeal is denied you may contact your state Attorney General.

Categories of personal information collected in the last 12 months, using CCPA categories: identifiers (name, email address, optional phone number, IP address); internet or other electronic network activity information (server log data); and any information you include in your messages. Sources: you directly and your browser or device. Purposes: those described in section 4. We disclose these categories only to the recipients listed in section 5, for business purposes.

10. How to exercise your rights

Send your request by email to info@plusultraperformance.com, stating the right you wish to exercise and the email address you used to contact us. To protect your information, we will verify your identity before acting on a request, usually by asking you to confirm the request from the email address we have on file or by asking for information that matches our records. We will not ask for more information than is reasonably necessary for verification.

We respond within one month of receiving a request under the GDPR or UK GDPR (extendable by two further months for complex or numerous requests, in which case we will inform you), and within 45 days under the CCPA/CPRA and other US state laws (extendable by a further 45 days where reasonably necessary, with notice to you). In any event we aim to acknowledge requests within 30 days. Exercising your rights is free of charge, unless requests are manifestly unfounded or excessive, as permitted by law.

11. Children

The Website and our services are intended only for adults aged 18 or over. They are not directed to children or minors, and we do not knowingly collect personal information from anyone under 18. If you believe that a minor has sent us personal information, please contact us at info@plusultraperformance.com and we will delete it promptly.

12. Sensitive and health information

The contact form is designed for general inquiries only. Please do not include details about your health, medical conditions, injuries, medication or pregnancy in the form or in your first email. If you become a client and coaching requires you to share health-related information (for example, an injury that affects your training), we will only process it with your explicit consent, only for the purpose of adapting your coaching safely, and under the terms of your coaching agreement. You can withdraw that consent at any time, although this may limit our ability to adapt your program. We are not a healthcare provider and do not create medical records. If you become a client, the training videos you send us for technique review are used only to review your technique and adapt your program; we do not publish them, and we delete them when they are no longer needed for your coaching or when you ask us to.

13. Do Not Track and Global Privacy Control

The Website does not track visitors across websites or over time for advertising purposes and does not use analytics or advertising technologies. Because no such tracking exists, Do Not Track browser signals and Global Privacy Control (GPC) signals are effectively honored in full: when your browser sends a GPC signal, we treat it as a valid request to opt out of the sale or sharing of personal information and of targeted advertising, and no such activity takes place.

14. Links to other websites

If the Website or our emails contain links to websites or services operated by third parties, those third parties are responsible for their own privacy practices. We encourage you to read their privacy policies.

15. Changes to this policy

We may update this Privacy Policy from time to time, for example if we change the technology used by the Website or begin to use a new service provider. The "Last updated" date at the top of this page shows when it was last revised. If we make material changes, we will publish the new version on this page and, where appropriate or required by law, notify you or ask for your consent before the change applies to you. In particular, analytics or marketing technologies will not be activated before this policy and our Cookie Policy have been updated and, where required, your consent has been obtained.

16. Contact us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact Plus Ultra Performance LLC by email at info@plusultraperformance.com or by post at 1209 Mountain Road Pl NE, Ste R, Albuquerque, NM 87110, United States.