Privacy Policy
Last updated: October 12, 2026
Golden Jiu Jitsu (“GJJ,” “we,” “us,” or “our”) runs the website at goldenjj.com and its subdomains, including the member hub at app.goldenjj.com, and the gym itself. This page explains what information we collect, what we do with it, who we share it with, and how to opt out.
The Short Version
- We use your information to run your classes, your membership, and your payments, and to stay in touch by text and email.
- We advertise on Google (including Search, Maps, and YouTube) and Meta (Facebook and Instagram). Our website tells them which pages you visit and when you book, so we can see which ads work and show our ads to people who have visited. We also share scrambled (hashed) email addresses and phone numbers of adults with them, so current members don’t see our ads and so the platforms can find people like our members.
- We record how people use our website (clicks, scrolls, and screen recordings) to fix confusing pages. What you type into our forms is hidden from those recordings.
- We never share children’s information with advertising platforms.
- We don’t sell your information.
- You can opt out of any of the advertising uses by emailing [email protected] or texting 303-578-0198.
What We Collect
Information you give us
When you book a class, ask a question, join, or sign in to the member hub, we may collect:
- Name, email address, phone number, and home address
- Date of birth and gender (gender is optional)
- Your child’s name, date of birth, and program, if you book or enroll a child, plus a parent’s or guardian’s details for anyone under 18
- An emergency contact’s name and phone number
- Experience level, belt, and class choices, so coaches can prepare for your first class
- Answers you give us when you book or sign up (for example, what you’re hoping to get out of training, or whether you’ve had a bad experience at another gym)
- Your signed waiver and membership agreement, including your typed signature and the IP address and device you signed from
- Membership details, such as your plan, freezes, cancellations, and the reason you give for cancelling
- Payment details, which go straight to Stripe (we keep only the card brand and last four digits)
Information we collect at the gym and in the member hub
- Check-ins, attendance, and belt promotions, for adults and kids
- Your activity in the member hub, such as pages you’ve read, quiz answers, written reflections, and how much of a video you watched
- Sign-in details for the member hub (your email or phone number, used to send you a sign-in code)
- Notes our coaches and staff keep about your membership and training
- The texts and emails we send you, which we keep a copy of
Information collected automatically on our website
When you visit our site, we and the services below may collect:
- Device and browser information (browser type, operating system, screen size)
- IP address and rough location (city level)
- Pages you visit, how long you stay, and what you click and scroll
- How you found us, including the website, ad, or link that sent you, and the ad click code that comes with it
Cookies, Tags, and Recordings on Our Website
Our site uses these tools:
- Google tag (Google Analytics and Google Ads). Tells Google which pages you visit, which ad or link brought you here, and when you book a class or send us a question. We use it to count visitors, see which ads lead to bookings, and show GJJ ads to people who have visited our site.
- Meta pixel (Facebook and Instagram). Tells Meta which pages you visit and when you book a class or send us a question. We use it the same way: to see which ads work and to show GJJ ads to people who have visited our site.
- Microsoft Clarity. Records how people use our pages (clicks, scrolling, and screen recordings of visits) and turns them into heatmaps, so we can see where a page is confusing and fix it. Our booking and contact forms are masked, so what you type is not recorded.
- YouTube. Videos on our site are played from YouTube, which may set its own cookies when a video loads or plays.
- Cloudflare Turnstile. Checks that a form is being filled in by a person, not a spam bot.
- Local storage in your browser. Remembers your light or dark mode setting, and which ad or link brought you to our site, for up to 90 days, so a booking can be credited to the ad that led to it.
Google, Meta, and Microsoft may combine what their tools collect on our site with information they already hold about you, under their own privacy policies.
The member hub and the sign-up steps on app.goldenjj.com use cookies and local storage to keep you signed in, remember your settings, and save a sign-up form while you fill it in. Videos and podcasts in the member hub play from Bunny Stream, Spotify, and Apple Podcasts, which may set their own cookies.
How We Use Your Information
We use the information we collect to:
- Book your classes and confirm your reservation
- Prepare coaches for your first visit (knowing your experience level helps us pair you with the right training partner)
- Run your membership, including billing, freezes, check-ins, and the member hub
- Stay in touch about your booking, class times, schedule changes, and membership, by text and email
- Answer your questions
- Send updates and offers about GJJ programs, events, and promotions, including to people who used to train with us (you can opt out anytime)
- Improve our website, using visit data, heatmaps, and recordings
- Advertise the gym, as described in the next section
We don’t use your information to make automated decisions about you that have legal or similar effects.
Advertising and Customer Lists
We advertise on Google (Search, Maps, YouTube, and Google’s other ad networks) and Meta (Facebook, Instagram, and Meta’s other ad networks). Here is everything that involves.
Hashing. Wherever this section says “hashed,” it means we turn an email address or phone number into a scrambled code before it leaves our systems (or the platform’s tag does it in your browser). Google and Meta can only use the code to match it to an account they already have.
Showing ads to people who visited our site (retargeting). The Google tag and Meta pixel let Google and Meta build audiences of people who visited goldenjj.com, including which pages they saw and whether they booked. We use those audiences to show GJJ ads afterwards on Google, YouTube, Facebook, and Instagram. We may also show ads to people who interacted with our Instagram or Facebook pages or watched our videos there.
Measuring bookings and joins. When you book a class, your browser tells Google and Meta that a booking happened, and may include a hashed copy of the booking adult’s email address and phone number so they can match it to the ad that led to it (Google calls this enhanced conversions; Meta calls it advanced matching). When someone joins or pays for a membership, we may send the same kind of event from our own systems, with the hashed email and phone and the ad click code, to Google and Meta (through Meta’s Conversions API and Google’s conversion uploads). This tells the platforms which ads bring in members, not just bookings.
Customer lists. We may upload hashed customer lists to Google and Meta, with adults’ email addresses and phone numbers, and sometimes their name and ZIP code. We use these lists to:
- keep current members from seeing ads meant for new people;
- show our ads to people who booked a class, came to a class, or used to train with us;
- help Google and Meta find new people who are similar to our members (lookalike or similar audiences). For this one, a list may include a number for how much a household has paid us in total, so the platform can look for people like our longest-standing members.
Apart from that one total, the platforms don’t receive your class history, cancellation reasons, or payment details.
Never children’s information. We never share children’s information with advertising platforms. We never upload a child’s name, age, or details, and we never build an audience from children’s enrollment. For kids’ bookings and memberships, only the parent’s or guardian’s hashed contact details may be shared.
To opt out, email [email protected] or text 303-578-0198 and ask us to leave you out of advertising. We’ll take you off our customer lists and leave you out of future uploads. You can also:
- manage the ads you see in Google’s My Ad Center and your Meta ad preferences;
- block cookies or use an ad blocker in your browser, which stops our site from telling Google, Meta, and Microsoft about your visit.
Texts and Emails
We send booking confirmations, class reminders, schedule changes, and membership and billing messages by text and email. These are part of your booking or membership.
We may also send updates and offers, including to people who booked a class or used to train with us. You can stop them anytime: reply STOP to a text, or email or text us. Messages about an active booking or membership may still come through.
Message and data rates may apply to texts.
Photos and Video
We film and photograph adult classes and members for our website, social media, and ads. If you’d rather not appear, tell a coach or contact us, and we’ll leave you out or take the photo down. We never photograph or film children during training, and a child only appears in our marketing with a parent’s or guardian’s written permission.
Who We Share Your Information With
We share your information only with the services we use to run and advertise the gym:
| Service | What it does for us | What it receives |
|---|---|---|
| GoHighLevel | Contacts, text messages, and emails | Name, email, phone, booking and membership details, and your children’s first names, programs, and dates of birth |
| Resend | Sending our emails | Email address and the message we send you |
| Stripe | Payments and memberships | Name, email, phone, membership and payment details (card details go straight to Stripe) |
| Supabase, Twilio | Member hub sign-in and storage | Email or phone number, to send your sign-in code; Supabase also stores member hub activity and signed waivers |
| Railway | Website, app, and database hosting | Everything we store, on their servers |
| Cloudflare | Blocking spam on our forms | Browser and device signals while you fill in a form |
| Google Analytics | Website visitor counts | Pages visited, device, rough location, and how you found us |
| Google Ads, Meta | Measuring our ads, showing GJJ ads, and finding people like members | Pages visited, ad click codes, booking, question, and join events, and hashed adult email addresses and phone numbers (sometimes name and ZIP code, and household total paid) |
| Microsoft Clarity | Heatmaps and recordings of website visits | Clicks, scrolling, and pages visited, with form entries masked |
| YouTube | Playing videos on our site | Device and browser details when a video loads |
| Bunny Stream, Spotify, Apple Podcasts | Playing videos and podcasts in the member hub | Device and browser details when one loads |
We don’t sell or rent your personal information.
We may also share information if the law requires it, such as in response to a court order.
How We Protect Your Information
We take reasonable steps to protect your data:
- Everything you send us travels over HTTPS (encrypted in transit)
- Access to our database is limited to the systems and people who need it
- We don’t store card numbers (Stripe handles them)
No method of sending or storing data is 100% secure, so we can’t guarantee absolute security.
Children’s Privacy
GJJ offers programs for kids as young as age 4. When a parent or guardian books or enrolls a child, we collect the child’s name, date of birth, program, belt, and attendance, along with the parent’s contact details. We do not collect information directly from children.
- We don’t knowingly collect personal information from children under 13 without a parent’s consent
- Parents provide all information on behalf of their children
- We never share children’s information with advertising platforms, and never use it for advertising
- If you believe your child gave us personal information without your consent, contact us and we will delete it promptly
Your Choices
- Stop marketing texts and emails: Reply STOP to a text, or email or text us.
- Opt out of advertising: Email or text us and we’ll leave you out of the customer lists and uploads we share with Google and Meta (see Advertising and Customer Lists). You can also use your Google and Meta ad settings.
- Block tracking on our website: Block cookies or use an ad blocker. The site still works.
- Stay out of photos and video: Tell a coach or contact us.
- See or fix your information: Contact us for a copy of your data or to correct it.
- Delete your information: Contact us and we’ll delete it, unless the law requires us to keep it.
Data Retention
We keep your personal information while you train with us or are in touch with us, and afterward for as long as we need it for membership, payment, and tax records, or in case you come back to train. We don’t delete it automatically on a schedule. The one exception: a sign-up form you start but don’t finish is deleted after 7 days. You can ask us to delete it at any time, and we will, unless the law requires us to keep it (for example, payment records).
The ad and link details in your browser’s local storage expire after 90 days. Google, Meta, and Microsoft keep what their tools collect under their own retention rules.
Totals that can’t identify you (like page view counts) may be kept indefinitely.
Colorado Privacy Rights
Colorado residents may have rights under the Colorado Privacy Act, including the right to access, correct, delete, and get a copy of personal data, and to opt out of targeted advertising, the sale of personal data, or certain profiling. GJJ doesn’t sell personal data. We do use some personal data for targeted advertising, as described in Advertising and Customer Lists, and you can opt out at any time.
To use any of these rights, contact us using the details below.
Third-Party Links
Our site links to other websites (Instagram, Google Maps, partner sites). Their privacy practices are their own, so read their policies.
Changes to This Policy
We may update this policy from time to time. When we do, we’ll change the “Last updated” date at the top. For significant changes, we’ll let you know by email or with a notice on our site.
Contact Us
Questions about this policy, or want to use any of the choices above?
- Email: [email protected]
- Text: 303-578-0198
- In person: Golden Jiu Jitsu, 802 Washington Ave, Golden, Colorado 80401