Including Consumer Health and Wellness Data Privacy Notice
For VicteliB, LLC d/b/a Boot Camp Challenge®
Effective Date: October 19, 2026
VicteliB, LLC d/b/a Boot Camp Challenge® ("Company," "we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit https://bootcamp-challenge.com, create or use an account, register yourself or a minor for a camp or program, communicate with us, or otherwise use our website and related customer relationship management system ("CRM") (collectively, the "Services"). It also covers information entered into that CRM by our authorized staff for phone or in-person registrations.
This Privacy Policy also describes our practices regarding health and wellness information maintained in our custom-built, in-house CRM, hosted on a virtual private server that we manage through our hosting provider. We do not use a third-party CRM product. Section 4 provides additional disclosures regarding consumer health and wellness information, including information an adult provides about a minor participant.
This Privacy Policy does not apply to information collected in an employment or independent-contractor context. Our website links to BCConDemand, a separate third-party platform for on-demand video content. That platform is not part of our website or CRM; its independent information practices are addressed in Section 7.
The information we collect depends on how you interact with the Services. We may collect the following categories of information:
Contact, account, and registration information. Name, email address, telephone number, mailing or billing address, username and account credentials, account preferences, camp or program registration details, and information identifying a parent or guardian and the participant they register. Account and health-form submissions are subject to the adult-submitter rules in Section 13.
Registration and transaction information. Camp or program selections, purchases, payment status, transaction history, discounts or promotions used, and related customer-service records.
Payment information. Stripe collects payment-card information directly through Stripe Checkout, as described in Section 5. We may receive limited billing and transaction information, such as payment status and transaction identifiers, for account administration and recordkeeping. Full card numbers and card security codes are not submitted to our servers or stored in our CRM.
Health, fitness, and wellness information. Answers to our structured health-history screening form, including signs and symptoms, activity level, medical conditions, and health-related waiver answers, together with a doctor's-note status field. The form is based on ACSM screening concepts. Our CRM does not include a separate open-ended trainer-notes field. Section 4 explains these practices in more detail.
Communications and customer-service information. Messages, support requests, feedback, registration assistance, scheduling information, and other information you provide when communicating with us.
Program participation information. Information about the camps or programs for which you or a minor in your care are registered. This does not describe viewing data independently collected by BCConDemand on its separate platform.
Device and technical information. Our website and hosting systems may automatically receive limited technical information used to operate and secure the Services, such as IP address, browser type, operating system, requested pages, access times, and diagnostic or security records. This is distinct from third-party analytics and advertising tracking, which we do not use on our website or CRM.
Essential website technologies. Cookies, session storage, or similar technologies may be used for login, account functions, security, and other core website functions, as described in Section 8.
Other information you choose to provide. Information you voluntarily include in communications with us. Please do not send health details beyond those requested in our screening process or payment-card credentials through general communications.
We may collect personal information from the following sources:
Directly from an adult customer, including when the customer creates an account, registers for a camp or program, completes the health-history or waiver form, makes a purchase, or communicates with us.
From a parent or legal guardian age 18 or older who registers a minor participant or supplies that participant's health-history or waiver answers.
From authorized adult staff who enter information on behalf of an adult customer or a minor's adult parent or legal guardian during a phone or in-person registration, using the same form and validation process.
Automatically from your browser or device and through the essential website and hosting functions described in Sections 1 and 8.
From providers supporting the Services, including our hosting provider, Stripe for billing and transaction information, and Amazon Web Services through Amazon Simple Email Service (AWS SES) for email delivery.
We do not connect the Services or CRM to Apple Health, Fitbit, Garmin, wearable devices, or other external health or fitness platforms. We do not obtain health information through those integrations.
We may use personal information for the following purposes:
To provide, operate, maintain, and improve the Services.
To create and manage accounts and camp or program registrations, including registrations an adult completes for a minor.
To administer requested camps and fitness or wellness programs and provide related support.
To maintain customer records and manage customer relationships through our CRM.
To process purchases, refunds, and other transactions.
To communicate with you about your account, purchases, programs, appointments, service updates, administrative matters, and customer support.
To send marketing or promotional communications where permitted by law and consistent with your choices.
To use screening answers and doctor's-note status to administer participation requirements, identify relevant exercise precautions, and support participant safety.
To troubleshoot technical issues, maintain website functionality, and improve the Services without third-party analytics or advertising tracking.
To protect the security and integrity of the Services, prevent fraud or misuse, enforce our terms, and protect our rights and the rights of others.
To comply with applicable law, legal process, and regulatory obligations and to establish, exercise, or defend legal claims.
For other purposes disclosed to you at the time information is collected or with your direction or consent, subject to the additional restrictions on health information in Section 4.
Some information we collect in connection with fitness and wellness services may be considered "consumer health data" or similarly protected health-related information under applicable state law. This section provides additional information about our practices concerning that data.
Categories we collect. Our structured health-history form collects signs and symptoms, activity level, medical conditions, and related screening answers based on ACSM screening concepts. We also maintain health-related waiver answers and a doctor's-note status field. These records may relate to an adult participant or a minor registered by an adult parent or legal guardian. The CRM does not include a separate open-ended trainer-notes field or obtain data from wearable or external health-platform integrations.
Sources. Adults enter their own information or, as a parent or legal guardian, information about a minor participant. Authorized adult staff may enter the same information on behalf of the adult customer or parent or guardian during a phone or in-person sign-up, using the same form and validation. Minors may not submit health or wellness information directly through the Services.
Purposes. We use this information to administer registration and screening, identify relevant exercise precautions and whether medical clearance may be needed, track doctor's-note status, support participant safety, communicate about participation, maintain customer records, and comply with law. We do not use health-history answers or doctor's-note status for targeted advertising. Before collecting additional categories of consumer health data or using or sharing that data for additional purposes, we will provide the disclosures and obtain the affirmative consent required by applicable law.
Access and disclosure. Authorized personnel may access the information as needed to administer requested programs and support participant safety. In our ordinary operations, the only outside providers that process or may access health information are our hosting provider and AWS SES, our email delivery provider. The health-information categories described above may be maintained on our hosted server and, to the extent included in service-related email, processed through AWS SES. We do not provide CRM health information to Stripe, BCConDemand, a third-party CRM vendor, or an analytics or advertising vendor. VicteliB, LLC has no affiliates.
We may also disclose health information in the limited legal, safety, business-transfer, or customer-directed circumstances described in Section 6, but only as permitted by applicable law and with any notice or consent that law requires. The general disclosures in Section 6 do not override the additional protections in this section.
Sale and targeted advertising. We do not sell consumer health data or use or share it for targeted advertising.
Cross-site collection. We do not permit advertising or analytics providers to collect health-history answers, doctor's-note status, or other CRM health information through the Services for cross-site tracking or advertising.
Consent. Where applicable law requires affirmative consent before collecting or sharing consumer health data, we will request that consent separately from this Privacy Policy and before the relevant collection or sharing. Merely viewing this Policy, accepting general Terms, or confirming adult status is not a substitute for any separately required health-data consent. You may withdraw consent as permitted by law by contacting us using the information in Section 15.
Consumer health data requests. Depending on applicable law, you may request confirmation of whether we collect, share, or sell consumer health data about you; access to that data; correction or deletion; information about recipients, including their contact information where required; or withdrawal of consent. Submit requests to the email in Section 15. A parent or legal guardian may submit an authorized request concerning a minor. We may reasonably verify identity and authority, and may limit or deny requests only where permitted by law. You need not create a new account to submit a request. Where an appeal right applies, email the same address with the subject "Privacy Request Appeal." We will respond within the time required by law, explain any denial, and provide any required information for submitting a complaint to the appropriate regulator.
We use Stripe Checkout to process payment-card transactions. You submit card numbers and card security codes directly to Stripe through its checkout, not through our website forms or servers. We do not store full card numbers or card security codes. Stripe processes payment information under its applicable privacy and security practices. We may receive and retain limited billing and transaction information needed for account administration, refunds, recordkeeping, fraud prevention, and customer support.
Please do not provide full payment-card numbers, card security codes, or other sensitive payment credentials through health-history forms, other CRM fields, email, or other non-payment channels.
We may disclose personal information in the following circumstances:
Service providers. Our providers supporting these Services include our hosting provider, Stripe for payment processing, and Amazon Web Services through AWS SES for transactional and marketing email delivery. Information is provided according to each provider's function and subject to applicable contractual and legal requirements. We do not use a third-party CRM product. The more limited health-data disclosures in Section 4 govern health information.
Personnel and service professionals. We may make information available to employees, contractors, trainers, coaches, instructors, or other personnel who need it to provide or support services you request.
Legal and safety purposes. To the extent permitted or required by applicable law, we may disclose information to comply with legal process or lawful requests from public authorities, investigate fraud or security incidents, or protect the rights, property, health, or safety of the Company, participants, or others.
Business transactions. Information may be transferred with the business in a merger, acquisition, reorganization, or similar change of ownership, subject to applicable law, the protections in this Policy, and any required notices or consents. This provision does not authorize a sale of personal information or consumer health data prohibited by applicable law or by our commitments in this Policy.
At your direction or with your consent. We may disclose information when you direct us to do so or provide any consent required by applicable law.
Affiliates. VicteliB, LLC has no affiliates.
Our website links to BCConDemand (bccondemand.com), a separate, existing third-party platform for on-demand video content. We do not host or build that platform. Information you provide to, or that is independently collected by, that platform is subject to its own privacy policy and terms. We do not send CRM health-history answers or doctor's-note status to BCConDemand. This Policy continues to govern information we collect or maintain through our own Services.
Stripe Checkout and other external websites or services you choose to visit may also have their own privacy practices and technologies. Please review the applicable provider's policy before using its service. Our BCC website and CRM do not offer public forums, user comments, or public profiles.
Our website may use essential cookies, session storage, or similar technologies for login, account access, security, and core site operation. Our hosting systems may maintain technical logs for operation and security. These functions are different from advertising or third-party analytics tracking.
We do not currently use Google Analytics, advertising pixels, tag managers, session-replay tools, or chat widgets on our BCC website or CRM. No advertising or analytics provider is connected to health or wellness information maintained in the CRM.
You can control certain cookies through your browser settings. Blocking essential cookies or session storage may affect account or other website functions. Where applicable law requires recognition of an opt-out preference signal, we will honor that requirement. We do not sell personal information or share it for cross-context behavioral advertising.
If our website technologies or information practices change, we will update this Policy and provide any additional notice, consent mechanism, or choice required by applicable law before beginning the new processing. A change in technology does not, by itself, authorize the use of health information for advertising or analytics.
We use AWS SES to deliver both transactional and marketing email. We may send service-related messages needed to administer your account, registration, payments, security, or requested programs. If you receive promotional email, you may unsubscribe using the link in the message. You may still receive non-promotional messages concerning your account, transactions, or services you requested.
We do not use SMS or text messaging for these Services.
Depending on where you reside and whether applicable law applies to our business, you may have rights concerning your personal information, which may include the right to:
Confirm whether we process personal information about you and obtain access to that information.
Correct inaccurate personal information.
Request deletion of personal information, subject to legal exceptions.
Obtain a portable copy of certain personal information.
Opt out of certain sales of personal information, targeted advertising, or profiling in furtherance of decisions that produce legal or similarly significant effects, where applicable.
Withdraw consent where processing is based on consent and applicable law permits withdrawal.
Appeal certain decisions concerning a privacy request, where applicable.
To exercise a privacy right, contact the email address in Section 15. We may request information reasonably necessary to verify your identity and authority. A parent or legal guardian may submit requests concerning a minor where authorized by law, and an authorized agent may submit a request where permitted. We will not unlawfully discriminate against you for exercising a privacy right. Where an appeal right applies, email the same address with the subject "Privacy Request Appeal." We will explain our decision and respond within the time required by applicable law.
Sale or sharing of personal information. We do not sell personal information or share personal information for cross-context behavioral advertising.
We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide the Services, maintain registration and transaction records, comply with legal and accounting obligations, resolve disputes, enforce agreements, and protect security. Retention periods depend on the information, our relationship with you or the participant, and applicable law. When information is no longer needed, we delete or de-identify it, subject to applicable legal requirements. These criteria do not override a deletion right or deadline imposed by law, including requirements applicable to health information in backups or copies held by service providers.
We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. The safeguards we use are intended to be appropriate to the nature and sensitivity of the information we maintain. However, no method of transmission over the Internet or method of electronic storage is completely secure, and we cannot guarantee absolute security.
If we become aware of a security incident involving personal information, we will investigate and provide any notices required by applicable law.
Browsing and camp participation. There is no minimum age imposed by this Privacy Policy for browsing public camp information or being registered as a camp participant. A minor may be registered by a parent or legal guardian age 18 or older, subject to any eligibility rules for the particular camp or program. A participant's age is distinct from the age of the person creating an account or submitting information.
Adult accounts and submissions. You must be at least 18 years old to create an online account or directly submit health-history, waiver, or other health and wellness information through the Services. An adult may submit their own information or, as a parent or legal guardian, information about a minor in their care. Minors may not create their own accounts or complete these forms directly, even if they are eligible to attend a camp. Authorized adult staff may enter the information on behalf of the adult customer or parent or guardian for phone or in-person registrations.
Information about minors. We collect information about minor participants from their adult parents or legal guardians, or through authorized staff assisting those adults, to administer registration, screening, safety, payments, and related communications. We handle that information under the same applicable privacy and health-data protections described in this Policy. A parent or legal guardian may contact the email in Section 15 to request access, correction, or deletion, subject to verification and applicable law.
Direct submissions by minors. Our account-creation and health-form functions are for adults; they are not offered for direct use by minors. If we learn that a minor created an account or submitted health information directly contrary to this rule, we will take appropriate steps to restrict the account or submission and address the information. If information was collected directly from a child under 13 without legally required consent, we will delete or otherwise address that information as required by law. This does not require deletion of information lawfully provided about a minor by a parent or guardian. Please contact us using Section 15 if you believe a minor has submitted information directly.
This age policy does not limit any privacy right available under applicable law.
We may update this Privacy Policy from time to time. When we do, we will post the revised policy and update the Effective Date above. If required by applicable law, we will provide additional notice or obtain consent before a material change takes effect. We encourage you to review this Privacy Policy periodically.
If you have questions about this Privacy Policy, our privacy practices, or a request concerning your personal information, contact us at:
| Company | VicteliB, LLC d/b/a Boot Camp Challenge® |
|---|---|
| lori@victelib.com | |
| Mailing Address | 1156 Adonis Ct., St. Peters, MO 63376 |