.navmo_panel_link_inner { height: 1lh; vertical-align: middle; align-items: center; overflow: visible; } .navmo_panel_link_visual { height: 1cap; align-self: center; transform: translateY(calc((1lh - 1em) / 2)); }

Privacy
Policy

Last updated: May 15, 2026

This Privacy Policy explains how jawsnelson.com ("the Website", "we", "us") collects, uses, and protects information from visitors. We respect your privacy and aim to keep data collection to a minimum.

1. Controller

The party responsible for this website under the EU General Data Protection Regulation (GDPR) is:

Julie Nelson
[Street Address]
[City, State, ZIP]
United States
Email: mo[at]jawsnelson.com

2. Scope

This policy applies to visitors from anywhere in the world. Because the Website is accessible in the European Union, we comply with the GDPR for visitors located in the EU/EEA.

This Website presents the professional services of Julie Nelson, including personal training, brand consulting for sports brands, and movement direction for sports industry campaigns.

3. Hosting and Content Delivery

3.1 Website Hosting (Webflow)

The Website is hosted on Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA. When you visit the site, Webflow's servers automatically process technical data including:

IP address
Browser type and version
Operating system
Referrer URL
Date and time of access

This data is processed on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in operating a functional and secure website. Webflow's privacy policy: https://webflow.com/legal/privacy

3.2 Media Delivery (Bunny.net)

Videos and other media files are delivered via Bunny.net, operated by BunnyWay d.o.o., Cesta komandanta Staneta 4A, 4290 Tržič, Slovenia (EU). When you load media on this Website, Bunny.net processes your IP address and technical request data to deliver the content from a server geographically close to you.

We have entered into a Data Processing Agreement with Bunny.net. Bunny.net's privacy policy: https://bunny.net/privacy

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in fast and reliable media delivery).

4. Analytics (Umami)

We use Umami Analytics to understand how visitors use our Website. Umami is a privacy-focused, cookieless analytics tool. It does not use cookies, does not track you across websites, and does not collect personally identifiable information.

Umami collects anonymized data such as:

Page views
Referrer
Browser and device type (general)
Country (derived from IP, which is not stored)

IP addresses are processed only momentarily to determine country and are not stored.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in understanding website usage). Because Umami does not store personal data or use cookies, no consent is required.

Umami website: https://umami.is

5. Contact Form

The contact form is used for general business inquiries related to personal training, brand consulting, and movement direction services.

Please do not submit sensitive personal information through this form, including but not limited to health, medical, or fitness-related information. For inquiries involving health-related details (e.g. injuries, medical conditions, or training restrictions), please contact us directly by email at [contact email], where we can discuss your situation in an appropriate setting.

When you submit the contact form, your data is processed through Google Forms, a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

The following information is collected when you submit the form:

Name
Email address
Type of inquiry (e.g. personal training, brand consulting, movement direction)
Subject / message content
Any other information you voluntarily provide

This data is transferred to and stored on Google's servers, which may be located in the United States. Google is certified under the EU-U.S. Data Privacy Framework, which provides a legal basis for transferring personal data from the EU to the United States.

Legal basis: Your explicit consent (Art. 6(1)(a) and Art. 49(1)(a) GDPR), which you provide by checking the consent box before submitting the form.

Google's privacy policy: https://policies.google.com/privacy

You can withdraw your consent at any time by emailing [contact email]. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6. Business Communication After Initial Contact

Following an initial inquiry, further communication (proposals, briefings, scheduling, contracts) typically takes place by email or video call. For brand and campaign clients, project-specific data processing may be governed by separate agreements (e.g. NDAs, service contracts, or data processing agreements where applicable).

For personal training clients, any health-related information you choose to share during onboarding or sessions is handled confidentially and only used to provide the requested service. Such information is not stored on this Website or in Google Forms.

7. Your Rights (EU/EEA Visitors)

If you are located in the EU/EEA, you have the following rights regarding your personal data:

Right of access (Art. 15 GDPR) – to know what data we hold about you
Right to rectification (Art. 16 GDPR) – to correct inaccurate data
Right to erasure (Art. 17 GDPR) – to have your data deleted
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR) – to processing based on legitimate interest
Right to withdraw consent at any time
Right to lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at mo[at]jawsnelson.com.

8. Your Rights (California Visitors)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete it, and the right to opt out of any sale of personal information. We do not sell personal information.

To exercise these rights, contact us at [contact email].

9. Data Retention

Server logs (Webflow, Bunny.net): typically retained for a short period (days to weeks) for security and operational purposes
Analytics data (Umami): aggregated, no personal data retained
Contact form submissions (Google Forms): retained as long as necessary to respond to your inquiry and for follow-up communication, then deleted
Client data (after engagement): retained as required by applicable tax, accounting, or contractual obligations, then deleted

10. Children's Privacy

The Website is not directed at children under 16. We do not knowingly collect personal data from children. Personal training services for minors are arranged exclusively with the involvement of a parent or legal guardian.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available at this URL, with the date of the last update shown above.