Privacy Policy

Ordinary Epics ("we," "us," or "our") operates the website at ordinaryepics.com. This policy explains how we collect, use, and protect your personal information.

1. Information We Collect

Information you provide

• Intake forms — name, email, phone, location, age, training history, goals, and coaching preferences when you submit the athlete intake form.
• Contact forms — name, email, and message content.
• Testimonials — name, email, event details, and testimonial text.
• Email subscriptions — email address and first name when you sign up for content like the Race Plan Worksheet.
• Shop orders — name, email, shipping address, and payment details (processed by Stripe or PayPal; we do not store card numbers).
• Account sign-in — email address and, if you sign in with Google, your name and profile photo as provided by Google.

Information collected automatically

• Cookies — we use essential cookies to maintain your authentication session. We do not use third-party advertising or analytics cookies.
• Server logs — our hosting provider (Vercel) may collect IP addresses, browser type, and request timestamps in standard server logs.

2. How We Use Your Information

• Provide coaching services, process orders, and manage subscriptions.
• Send transactional emails (order confirmations, invoices, intake follow-ups).
• Send marketing emails you opted into (you can unsubscribe at any time).
• Respond to contact form inquiries.
• Improve our services and website.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

3. Third-Party Services

We use the following services to operate our business. Each has its own privacy policy:

• Supabase — database hosting and authentication.
• Stripe — payment processing for subscriptions, invoices, and shop orders.
• PayPal — alternative payment processing and coach payouts.
• Resend — transactional and marketing email delivery.
• Printful — merchandise fulfillment (receives shipping address for orders).
• Vercel — website hosting.
• Google — OAuth sign-in (we receive your name, email, and profile photo; we do not access your Google contacts, calendar, or other data).
• TrainingPeaks — training plan delivery for coached athletes (separate account required).

4. Data Retention

We retain your personal information for as long as necessary to provide our services or as required by law. Coaching records are retained for the duration of the coaching relationship and a reasonable period afterward. You may request deletion of your data at any time (see Section 7).

5. Data Security

We use industry-standard security measures including encrypted connections (HTTPS), secure authentication, and access controls. Payment information is processed directly by Stripe and PayPal and is never stored on our servers.

6. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us and we will delete it promptly.

7. Your Rights

You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information.
• Unsubscribe from marketing emails at any time.

To exercise any of these rights, email us at coach@ordinaryepics.com.

8. Changes to This Policy

We may update this policy from time to time. We will post the updated policy on this page with a new effective date. Continued use of our services after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this privacy policy, contact us at coach@ordinaryepics.com or use our contact form.