Privacy Policy

Chano Boxing operates two gyms in San Diego, California, at 701 Sixth Ave and 2110 El Cajon Blvd, and this website and member app. This policy covers the personal information we handle through the website, the app and the front desk. It does not cover other companies' websites you reach from links here.

We only collect what the gym actually needs to run. Concretely:

• Identity and contact: your name, email, phone number and date of birth.
• Emergency contact: the name and phone number of the person we call if something happens to you in the gym.
• Training goals: what you tell us you want out of training, and your experience level.
• Body data you choose to give us: your weight, height or injuries. All of it is optional. If you leave it blank, everything still works — the coaching just gets less specific.
• Attendance history: which classes you booked, which ones you showed up to, and at which location.
• Your conversations with the AI training assistant, and the meal plans it generates for you.
• Payment information: your billing history and the last four digits of your card. We never see or store your full card number — our payment processor handles it.
• Your signed waiver, together with its audit trail: date, time, waiver version, IP address and browser.
• Technical data: IP address, browser, device type and the pages you visit, used to keep the site working and secure.

• To give you access to the gym, book your classes and keep your membership current.
• To charge your membership and send you receipts.
• To generate your training plan and your meal guidance through the AI assistant.
• To reach you about your classes, schedule changes, closures and account issues.
• To call your emergency contact if you get hurt.
• To keep proof that you signed the waiver, which is what lets you train at all.
• To keep the site secure and to detect abuse.
• To send you gym news and offers — only if you asked for them, and you can stop it in one click from any email.

We use outside companies to run parts of the service. Each one only gets what it needs for its job, and each one is under contract not to use your information for anything else.

Payment processor

Charges your membership. Gets your name, email and card details, which go straight to them — we never hold the card number.

Email provider

Delivers the emails we send you. Gets your name and email address.

AI provider

Powers the training assistant. Gets the messages you send it and the training context needed to answer. It does not get your card details, your address or your emergency contact.

Hosting and database

Runs the website and stores your account. Technical access only.

Law enforcement

Only when a valid subpoena, warrant or court order requires it, or to prevent serious harm to someone.

Signed waiver

At least 4 years after your last day of training, because that is the window in which a claim can still be brought.

Attendance history

3 years after your last visit.

Payment and billing records

7 years, for tax and accounting rules.

AI assistant conversations and meal plans

12 months, or until you delete them from your account.

Marketing list

Until you unsubscribe.

Technical logs

90 days.

When a retention period runs out, we delete the data or strip it of anything that identifies you.

If you live in California, the California Consumer Privacy Act as amended by the CPRA gives you these rights, and we honor them for everyone regardless of where they live:

• Know and access: ask us what personal information we hold about you, where it came from, why we have it and who we gave it to.
• Delete: ask us to delete what we hold about you. We will, except for what the law requires us to keep — the signed waiver and the billing records.
• Correct: ask us to fix information about you that is wrong.
• Portability: get a copy of your data in a file you can read and take somewhere else.
• Limit the use of sensitive personal information: tell us to use your health and body data only for giving you the service, and nothing else.
• Opt out of sale or sharing: we do not sell or share, so there is nothing to opt out of — but the right stands.
• No retaliation: we will not raise your price, cut your access or treat you worse for exercising any of this.

To exercise any of them, call us at (619) 379-5581 or ask at the front desk of either gym. We will confirm it is really you — usually by checking details already on your account — and answer within 45 days. You can also name someone to act for you, in writing.

Members under 18 can only join with a parent or legal guardian, who signs the waiver and provides the contact details. We do not knowingly collect personal information from children under 13 online. We do not sell or share the personal information of anyone under 16, ever. If you are a parent and believe your child gave us information without you, call us and we will delete it.

Traffic to this site is encrypted. Access to member records is limited to staff who need it. Card numbers never touch our systems. None of this makes anything unbreakable — no system is — but it is what we can honestly promise.

We use the minimum: a cookie that remembers whether you want the site in English or Spanish, and a cookie that keeps you signed in. There are no third-party advertising trackers on this site.

If we change this policy we update the date at the top of the page, and if the change matters we tell you by email before it takes effect.

Chano Boxing — 701 Sixth Ave, 3rd Floor, San Diego, CA 92101, and 2110 El Cajon Blvd, San Diego, CA 92104. Phone: (619) 379-5581. Ask for whoever handles member records, and say it is about your data.