Legal
Privacy policy.
Last updated: 29 July 2026 · Effective: [effective date]
Draft for legal review. This template is a starting point prepared for Weber Performance Nutrition LLC and is not legal advice. Bracketed items must be completed and the whole document reviewed and approved by qualified counsel before publication. Requirements vary by jurisdiction (including Colorado, other U.S. states such as California, and any international visitors).
1. Who we are
Weber Performance Nutrition LLC (“Weber Performance Nutrition,” “we,” “us”) is a sports-dietetics practice based in Colorado Springs, Colorado. We also provide EXCEND™, a clinical nutrition software platform, to dietitians and programs. This policy describes how we handle information collected through this website and in the ordinary course of our business.
This policy covers the public website and general business contacts. It does not govern protected health information — see the next section.
2. Health information and HIPAA
Protected health information (PHI) that Weber Performance Nutrition handles as part of clinical care, and the PHI that the EXCEND™ platform holds on behalf of the practices that use it, is governed by the Health Insurance Portability and Accountability Act (HIPAA) and by our separate [Notice of Privacy Practices] and applicable business associate agreements — not by this website privacy policy.
Please do not submit clinical or health details through the website inquiry forms. Those forms are for scheduling and general inquiry only. Any exchange of PHI takes place through a secure, HIPAA-appropriate channel.
3. Information we collect
Information you provide
- Contact and inquiry details you submit through our forms — such as your name, email address, sport or event, practice or organization, and the content of your message.
- Information you provide by email or when you become a client or customer, including [billing and payment details processed by our payment provider — see Section 5].
Information collected automatically
- Basic technical and usage data such as IP address, device and browser type, pages viewed, and referring pages, collected through [analytics provider, if any] and standard server logs.
4. How we use information
- To respond to inquiries and provide the services you request.
- To operate, maintain, secure, and improve the website and the EXCEND™ platform.
- To process payments and administer accounts, where applicable.
- To send administrative or service communications, and — only with your consent where required — updates about our services.
- To comply with legal obligations and enforce our terms.
[State the legal bases for processing where required — e.g., consent, contract, legitimate interests, legal obligation.]
5. How we share information
We do not sell your personal information. We share it only with service providers who process it on our behalf under contract, and where required by law:
- Hosting. The EXCEND™ platform runs on Microsoft Azure. [Confirm website hosting provider.]
- Form delivery. Website inquiries are delivered by our form provider, [Web3Forms or chosen provider].
- Payments. Payments are processed by [Stripe or chosen payment processor], who handle your card details directly under their own privacy terms. We do not store full card numbers.
- Analytics. [Analytics provider, if any.]
- Legal and safety. Where required by law, or to protect rights, safety, and the integrity of our services.
6. Cookies and analytics
[Describe the cookies and similar technologies actually used. If analytics or non-essential cookies are used, add a consent mechanism where required and list categories, purposes, and retention. If the site uses only strictly necessary cookies, state that.]
7. Retention
We keep personal information for as long as needed to fulfill the purposes described in this policy, to comply with legal, tax, and record-keeping obligations, and to resolve disputes. [Specify retention periods or the criteria used to set them.]
8. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to object to or restrict certain processing, and to withdraw consent. [Tailor to applicable law — e.g., Colorado Privacy Act, other U.S. state laws, GDPR/UK GDPR — and describe how to exercise rights and appeal.]
Rights relating to protected health information are handled under HIPAA through our Notice of Privacy Practices, not this policy.
9. Security
We use administrative, technical, and physical safeguards designed to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Security measures for the EXCEND™ platform are described on our security page.
10. Children
The website is not directed to children, and we do not knowingly collect personal information from children through it. [If minor athletes are seen in the practice, describe how their information and any required parental consent are handled — likely under HIPAA and separate intake documents rather than this policy.]
11. Changes to this policy
We may update this policy from time to time. We will post the updated version here and revise the “last updated” date above. [Describe how material changes are communicated.]
12. Contact us
Questions about this policy or your information can be directed to Weber Performance Nutrition LLC at sarah@weberperformancenutrition.com, Colorado Springs, Colorado. [Add postal address and, if applicable, a data protection contact.]