Privacy Policy

Effective Date: September 7, 2026

Telshor Operating Partners, LLC (DBA Bionic Barbell) ("Bionic Barbell," "we," "us," or "our") operates the website bionicbarbell.com and the physical gym facility located at 900 N Telshor Blvd, Las Cruces, NM 88011. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.

1. Information We Collect

Information You Provide

We may collect personal information that you voluntarily provide when you:

• Sign up for a membership or free trial
• Register for classes or personal training sessions
• Use our childcare check-in services
• Purchase services such as cryotherapy, red light therapy, PEMF therapy, or oxygen therapy
• Subscribe to our email newsletter
• Fill out a contact form or waiver
• Interact with us on social media

This information may include your name, email address, phone number, mailing address, date of birth, emergency contact information, health and fitness goals, medical conditions relevant to your training, payment information, and photos.

Information Collected Automatically

When you visit our website, we may automatically collect certain information, including your IP address, browser type, device information, pages visited, time spent on pages, referring URL, and general geographic location.

Information from Third Parties

We receive information about you from:

• GymMaster, the gym management system that holds your membership record, visit history, signed agreements, and billing setup
• Insurance and wellness benefit programs — SilverSneakers, Renew Active, Silver&Fit, Active&Fit, One Pass, Prime, and Aaptiv — which confirm whether your plan covers a membership with us
• Wellhub (formerly Gympass), which tells us that a check-in is valid when you check in through the Wellhub app, and identifies you to us so we can open the correct door
• Our payment processors, which tell us whether a charge succeeded and return a token representing your saved payment method

2. How We Use Your Information

We use the information we collect to:

• Provide and manage your gym membership and related services
• Process transactions and send related information (receipts, confirmations)
• Manage childcare check-in and roster services
• Send promotional communications, class updates, and newsletters by email and text message (you may opt out at any time)
• Issue your Apple Wallet or Google Wallet membership pass and keep it current
• Create the short personalized welcome video some new members receive
• Verify your eligibility for an insurance or employer fitness benefit, and record your visits so that program pays for them
• Measure our advertising, so we know which campaigns actually bring people to the gym
• Improve our website, services, and member experience
• Respond to your inquiries and provide customer support
• Monitor gym occupancy and usage for safety and operational purposes
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share your information with:

• Service Providers: The companies listed below, each of which receives only what it needs to do its job for us
• Insurance & Benefit Programs: To verify eligibility for programs such as SilverSneakers, Silver&Fit, Renew Active, Wellhub, and similar programs
• Legal Requirements: When required by law, court order, or governmental regulation, or to protect our rights, safety, or property
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets

Service Providers We Use

Rather than describe these in the abstract, here is the list and what each one receives:

• GymMaster (Treshna Enterprises) — gym management. Holds your membership record: name, contact details, date of birth, emergency contact, visit and check-in history, signed agreements and waivers, and your billing schedule.
• Stripe — card payments taken at the front desk and in our point-of-sale app. Card details are captured by Stripe's card reader and SDK and are tokenized by Stripe; we receive a token and the result, not your card number.
• BluePay / CloverConnect (Fiserv) — card and bank payments for online signup, payment updates, and recurring billing. Card details are tokenized in your own browser by BluePay before submission.
• Klaviyo — email and SMS marketing. Receives your name, email address, phone number, and membership attributes such as join date, membership status, and the fitness goal you told us, so that the messages you get are relevant.
• Twilio — sends and receives our text messages. Receives your mobile number and the content of the message. See section 5 for opt-out.
• Meta (Facebook, Instagram) — the Meta Pixel on this website, plus the Conversions API, which sends the same events from our servers so they are not counted twice. Meta receives page views and signup or purchase events together with your IP address, browser, and Meta's own cookies, and — for a completed signup — a hashed (one-way scrambled) form of your email, phone number, name, date of birth, and postal address. Meta also handles the Instagram and Facebook messages you send us.
• Google Analytics 4 — website usage measurement: pages viewed, time on page, referring site, approximate location, and device type. Some signup-funnel steps are also sent from our servers; those carry no name, email, or phone number.
• PassKit — issues your Apple Wallet and Google Wallet membership pass. Receives your first and last name, email address, phone number, member ID (which is also the barcode on the pass), membership status, join and expiry dates, visit count, and — if you have a balance due — a single-use link to settle it. See "Wallet passes and Bluetooth beacons" below.
• HeyGen — generates the short personalized welcome video some new members receive. Receives your first name and the fitness goal you selected, and nothing else; it does not get your contact details.
• Insurance and benefit eligibility portals — Optum, Tivity Health, American Specialty Health (ASHLink), and Healthy Contributions. When you ask us to check your coverage, we send your first name, last name, date of birth, and ZIP code to the relevant program to confirm whether your plan covers a membership.
• Wellhub — for Wellhub members, to validate each check-in against your Wellhub benefit and to record the visit for payment.
• Cloudflare — the "are you human?" check on our signup form. Receives your IP address and a browser token; it does not receive your name or contact details.
• Google Workspace (Gmail) — hosts support@bionicbarbell.com and sends our transactional email, so messages between you and us are stored there.
• Netlify — hosts this website and the software behind it, and stores our own operational records (feedback submissions, onboarding records, check-in logs, SMS consent records) in Netlify's storage. Netlify's servers also log ordinary request information such as your IP address, browser, and the page requested.

We do not use data-enrichment, people-search, or contact-appending services to add information to your record from outside sources.

Wallet Passes and Bluetooth Beacons

If you add a Bionic Barbell membership pass to Apple Wallet or Google Wallet, that pass is configured to respond to Bluetooth beacons we operate at the gym. When your phone comes within range of one, your pass can surface on your lock screen with a short message, so it is ready when you reach the door.

This works entirely on your own phone: the beacon broadcasts a signal, and your phone decides whether to show the pass. The beacon does not receive anything from your phone, and neither we nor PassKit learn your location from it. On iPhone this feature relies on the location permission you granted to Apple Wallet; you can turn it off at any time in your phone's settings, or by removing the pass, and your membership is unaffected either way.

4. Cookies and Tracking Technologies

Our public marketing pages — the pages describing our gym, classes, memberships, and recovery services — use cookies and similar technologies to analyze site traffic and understand how people use the site. Specifically, those pages load:

• Google Analytics 4, which measures pages viewed, time on page, referring site, device type, and approximate location.
• The Meta Pixel, which records that you viewed a page or completed a signup, so we can measure our advertising. The same events are also sent to Meta directly from our servers through the Meta Conversions API; both copies carry a shared event ID so Meta counts the visit once rather than twice.
• Klaviyo's onsite script, which recognizes you if you have previously given us your email address, so our email and text messages can reflect what you looked at.

Your member portal and the page that reveals a referral prize also load this same set: both are member-facing pages, not part of the signup, payment, waiver, check-in, or daycare flows below.

Our signup and payment pages, the waiver document and waiver kiosk, the public check-in and daycare pages, insurance enrollment, and the Wellhub account-linking page carry none of the above: they load no Google, Meta, or Klaviyo script at all.

You can control cookies through your browser settings, and browser-level ad-blocking or tracking-prevention tools will stop most of the above. Blocking them does not affect your ability to use the site or your membership.

5. Email and SMS Communications

By providing your email address or phone number, you may receive promotional emails, text messages, or other communications from us. You can opt out of marketing emails by clicking the "unsubscribe" link in any email. You can opt out of SMS messages by replying "STOP." Opting out of marketing communications will not affect transactional messages related to your membership or services.

Mobile phone numbers and SMS opt-in consent are collected solely for communications between you and Bionic Barbell. We do not share, sell, rent, or transfer mobile numbers, SMS opt-in consent, or any SMS-related personal information to third parties or affiliates for their marketing or promotional purposes. SMS opt-in data is excluded from any third-party sharing described elsewhere in this Privacy Policy. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. Full mobile messaging terms — including program description, message frequency, opt-out, and help instructions — are available in our Mobile Messaging Terms.

6. Data Security

We implement reasonable administrative, technical, and physical security measures to protect your personal information. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We may also retain information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

Two specific records are worth naming:

• Wellhub check-in log. Each time a Wellhub member checks in, we record the time, the door that opened, your member ID and first name, the Wellhub check-in token, and the result of the check. We need this to prove visits to Wellhub for payment and to resolve billing disputes with them. We keep these records for as long as they are needed to support Wellhub billing and to resolve disputes.
• SMS consent records. When you opt in to text messages we record your name, phone number, IP address, and the time you consented. We keep this for as long as you remain opted in, and for a period afterwards, because we may need it to demonstrate that you gave consent.

8. Your Rights

Depending on your location, you may have certain rights regarding your personal information, including the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of marketing communications
• Request a copy of your data in a portable format

To exercise any of these rights, please contact us using the information below.

9. Children's Privacy

Our website and services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately and we will take steps to delete such information. Our childcare services collect only the minimum information necessary (child's name and parent/guardian association) to ensure safe check-in and check-out.

10. Third-Party Links

Our website may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Effective Date" at the top of this page. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us:

Telshor Operating Partners, LLC (DBA Bionic Barbell)
900 N Telshor Blvd
Las Cruces, NM 88011
Email: support@bionicbarbell.com
Phone: (575) 202-6498