top of page

 

PRIVACY POLICY

 

Effective Date: December 1, 2023
Last Updated: October 15, 2026

 

1. Introduction

Core Collective (“Core Collective,” “we,” “us,” or “our”), operated by Core Collective LLC, is a business located in North Dakota.

This Privacy Policy describes how personal information may be collected, used, disclosed, and retained through https://www.corecollectivegf.com, including its user accounts, content-upload features, public posts, and related services (collectively, the “Services”).

This Policy is intended to describe our practices for users in the United States. Additional privacy rights and obligations may apply depending on where you live, the nature of our business, the information involved, and the features you use.

Because the specific technical configuration of the website has not been confirmed for this document, the descriptions below identify categories of information that may be involved. Before publication, this Policy must be checked against the website's actual practices and revised wherever necessary.

Where consent is required by law, we will seek that consent separately. Merely visiting the website does not constitute consent where affirmative consent is legally required.

 

2. Personal Information We May Collect

The categories of information collected depend on the features you use and the information you choose to provide.

 

2.1 Information you provide

Depending on the website's actual functionality, information you provide may include:

  • Account information: Name, username, email address, password credentials, and other information provided during registration or account management.

  • Profile information: Profile photograph, biography, preferences, or other details you choose to add to your account.

  • User Content: Text, comments, images, photographs, videos, files, posts, and other materials you submit or upload.

  • Communications: Messages, inquiries, support requests, feedback, and reports you send to us.

  • Other information: Information voluntarily provided through forms or other available features.

We collect only the information that our actual systems and interactions obtain. We do not intend this list to imply that every category is necessarily collected.

 

2.2 Information collected automatically

When you access the Services, the website or its providers may collect technical or usage information, depending on the configuration. This may include:

  • Internet Protocol (IP) address.

  • Browser type, device type, and operating system.

  • Pages visited and interactions with website features.

  • Dates, times, and referring webpages.

  • Diagnostic, performance, and security logs.

  • General location information inferred from technical data, where available.

 

2.3 Cookies and similar technologies

The website may use cookies, local storage, pixels, or similar technologies if configured to do so.

These technologies may support login sessions, essential website functions, user preferences, security, performance measurement, analytics, or other disclosed purposes.

You may be able to control cookies through your browser settings or a website consent tool, if provided. Blocking certain cookies may affect website functionality.

Where required by applicable law, we will obtain consent before using non-essential cookies or similar technologies and provide required opt-out mechanisms.

 

2.4 Information from other sources

If the Services support third-party login, account connections, or integrations, we may receive information from those services when you authorize the connection or otherwise permit the disclosure.

 

3. How We Use Personal Information

Depending on the features you use and the information involved, we may use personal information for the following purposes:

  • To register, authenticate, maintain, and manage user accounts.

  • To provide the Services and the features you request.

  • To display and manage profiles, posts, uploads, and other User Content according to relevant settings.

  • To respond to questions, support requests, and complaints.

  • To communicate about account activity, service changes, and important notices.

  • To detect, investigate, and address fraud, abuse, spam, security incidents, and violations of our Terms of Service.

  • To maintain, troubleshoot, evaluate, and improve the Services.

  • To protect the rights, safety, and property of Core Collective, users, and others.

  • To comply with applicable laws, legal obligations, and lawful requests.

  • To carry out other purposes disclosed when information is collected or otherwise permitted by law.

We will not use this list to imply that a particular activity occurs unless it reflects our actual practices.

 

4. Public Posts and User-Generated Content

The Services may allow you to publish content publicly or share it with other users.

When you choose to make content public, information included in that content may become visible to the audience associated with the relevant feature. Public content may be copied, downloaded, shared, indexed by search engines, or retained by third parties.

Consider carefully what you publish, especially if it includes personal details, photographs, contact information, or information about other people.

Removing content from the Services may not remove copies already made by others or third-party services.

Our social media accounts are public. 

Information used internally to administer accounts should be distinguished from information that users intentionally publish publicly.

 

5. How We Share Personal Information

We may disclose personal information in the circumstances described below, where applicable to our actual practices and permitted by law.

 

5.1 Publicly available User Content

Content you choose to publish publicly may be visible to other users and the general public.

The information displayed may include information contained within your posts, uploads, or profile, depending on the functionality and settings of the website.

 

5.2 Service providers

We may disclose information to third-party service providers that perform services on our behalf, if and when such providers are used. Examples may include:

  • Website hosting and infrastructure.

  • Account authentication and identity management.

  • File storage and content delivery.

  • Security, monitoring, and technical support.

  • Email and communication services.

  • Analytics or performance services.

Providers may process information as necessary to perform their services, subject to applicable agreements and law.

 

5.3 Legal and safety purposes

We may disclose information when it is reasonably necessary to comply with applicable law or legal process, respond to lawful requests, investigate suspected fraud or abuse, enforce our agreements, or protect the rights, property, and safety of Core Collective, users, or others.

 

5.4 Business transactions

Personal information may be transferred in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of the business, subject to applicable law and any required notices or protections.

 

5.5 With your direction or consent

We may disclose information when you direct us to do so, authorize the disclosure, or otherwise consent to it.

 

5.6 Sale, targeted advertising, and other legally regulated disclosures

Core Collective does not sell personal information, shares information for targeted advertising, or uses technologies that trigger statutory opt-out rights.

 

6. Data Retention and Deletion

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, managing accounts and User Content, maintaining security, resolving disputes, enforcing agreements, and meeting legal obligations.

Retention periods may differ depending on the category of information, the feature involved, operational needs, and applicable law.

When information is no longer reasonably necessary, we will delete it, de-identify it, or otherwise dispose of it as appropriate and legally permitted.

Account or content deletion may not immediately remove information from backups, security logs, legally required records, or copies already retained by other users or third parties.

 

7. Information Security

We will describe and maintain appropriate safeguards for personal information consistent with applicable law and the actual systems used by the business.

No method of electronic transmission or storage can be guaranteed to be completely secure.

Users should protect their login credentials and promptly report suspected unauthorized account access to ashley@corecollectivegf.com

 

8. Your Privacy Rights and Choices

Depending on applicable law, you may have rights concerning personal information maintained about you.

These rights may include:

  • Requesting access to certain personal information.

  • Requesting correction of inaccurate personal information.

  • Requesting deletion of certain personal information.

  • Requesting a portable copy of certain information.

  • Opting out of certain sales of personal information, targeted advertising, or profiling where covered by applicable law.

  • Appealing a denial of a privacy rights request where required by applicable law.

  • Exercising applicable privacy rights without unlawful discrimination.

These rights are subject to applicable eligibility requirements, exceptions, verification procedures, and legal limitations. Not every right applies to every business or every type of information.

Submitting a privacy request

To submit a privacy request, contact:

Privacy Email: ashley@corecollectivegf.com

Please use the subject line “Privacy Rights Request” and identify the request you wish to make.

We may request information reasonable necessary to verify your identity or authority to act on another person's behalf. We will handle requests within the time required by applicable law.

If we decline a request, we will explain the reason and provide any applicable appeal instructions required by law.

Authorized agents may submit requests where permitted by applicable law, subject to any required verification.

Marketing communications

If we send optional marketing emails, you may unsubscribe using the instructions provided in the message or by contacting ashley@corecollectivegf.com. You may continue to receive essential account, security, transactional, or service-related communications.

 

9. North Dakota and Other State Privacy Laws

Core Collective operates in North Dakota. The privacy laws applicable to the Services depend on the nature of the business, the information collected, the number and types of individuals affected, and other statutory criteria.

North Dakota has a security-breach notification law, codified in Chapter 51-30 of the North Dakota Century Code. That law may require notice to affected residents when qualifying personal information is compromised and includes additional requirements in certain circumstances.

We will assess and respond to any qualifying security incident in accordance with applicable law.

Other federal or state privacy requirements may apply depending on the business and its activities. If applicable, we will provide additional disclosures and mechanisms for exercising privacy rights.

[Before publication, confirm which privacy statutes apply to Core Collective and whether any additional state-specific disclosures, opt-out mechanisms, or rights procedures are required.]

 

10. Children's Privacy

The Services are intended for individuals who are at least 18 years old, unless Core Collective expressly establishes a different minimum age through an appropriate policy.

We do not knowingly seek to collect personal information from children under 13 through a service directed at children. If we learn that we have collected personal information from a child under 13 without legally required consent, we will take appropriate steps to address it in accordance with applicable law.

If you believe a child has provided personal information in violation of this Policy, contact ashley@corecollectivegf.com.

Our studio periodically offers children’s classes, including but not limited to Family + Toddler Yoga. For events that welcome minors, the registration by parent guardian is required and guardian waiver serves as liability release for registered minor. 

Our studio captures photos and videos in classes and event sessions. Photo/video release authorization is provided at time of signing a waiver to attend class. 

 

11. Third-Party Websites and Services

The Services may contain links to third-party websites, applications, or services.

Those third parties operate under their own privacy policies and practices. We do not control independent third-party services and are not responsible for their privacy practices.

Review the applicable privacy policy before providing information directly to a third party.

 

12. Security Incidents and Legal Compliance

If a security incident occurs, we will assess the incident and take steps required by applicable law.

Depending on the information involved and the circumstances, applicable law may require notification to affected individuals, regulators, or other parties.

This Policy does not replace any separate legal obligation to investigate, report, or notify individuals about a security incident.

 

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in the Services, business operations, technology, or legal requirements.

We will update the “Last Updated” date when changes are made and provide additional notice or obtain consent where required by law.

Changes will take effect on the stated effective date or, if no separate effective date is specified, when posted, subject to applicable law.

We encourage you to review this Policy periodically.

​

14. SMS and Mobile Information

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

 

15. Contact Information

For questions about this Policy or to submit a privacy request, contact:

Core Collective
Legal Business Name: Core Collective, LLC
Website: https://www.corecollectivegf.com
Privacy Email: ashley@corecollectivegf.com
General Contact Email: ashley@corecollectivegf.com
Mailing Address: 2009 13th Ave N, Grand Forks, ND 58203

Please include “Privacy Request” in the subject line when contacting us about your personal information.

​

​

​

bottom of page