01Introduction

This Privacy Policy explains how M12Invest LLC d/b/a STR Like The Best ("Company," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit strlikethebest.com (the "Site"), purchase our products or services, or otherwise interact with us. This Privacy Policy applies to all visitors, users, and customers of the Site, regardless of location.

By using the Site, you acknowledge that you have read and understand this Privacy Policy, our Terms of Use, and our Disclaimer. If you do not agree with the practices described in this Privacy Policy, please discontinue use of the Site immediately.

We are committed to protecting your privacy, being transparent about our data practices, and complying with applicable federal and state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), the Virginia Consumer Data Protection Act ("VCDPA"), the Colorado Privacy Act ("CPA"), the Connecticut Data Privacy Act ("CTDPA"), the Texas Data Privacy and Security Act ("TDPSA"), and all other applicable state comprehensive privacy laws (collectively, "Applicable Privacy Laws").

02Information We Collect

We collect personal information in the following ways: (a) information you provide to us directly, (b) information collected automatically through your use of the Site, and (c) information from communications and interactions with us.

2.1Information You Provide Voluntarily

When you interact with us, you may voluntarily provide:

• Name
• Email address
• Phone number
• Mailing or billing address
• Payment information (processed securely through third-party payment processors; we do not store full payment card numbers)
• Account credentials
• Form submissions, including coaching applications and intake forms
• Customer service messages and inquiries
• User-generated content, such as testimonials or reviews submitted with your consent
• Any other information you choose to provide

2.2Information Collected Automatically

When you access or use the Site, we may automatically collect:

• Device information (device type, model, unique device identifiers)
• IP address
• Browser type and version
• Operating system
• Pages viewed, time spent on pages, and navigation paths
• Referring and exit URLs
• Click behavior, scroll data, and interaction data
• Date and time of access
• Approximate geolocation derived from IP address
• Error logs and diagnostic data

We collect this information through cookies, pixels, web beacons, and similar tracking technologies as described in Section 3 below.

2.3Communication Data

When you communicate with us via email, SMS, phone, or support channels, we may collect:

• Email content and metadata
• SMS message content
• Phone number and call records
• Customer service logs
• CRM records and engagement history

2.4Sensitive Personal Information

We do not intentionally collect sensitive personal information (such as Social Security numbers, financial account credentials, precise geolocation, racial or ethnic origin, religious beliefs, health information, sexual orientation, or biometric data). If we collect any category of sensitive personal information in the future, we will update this Privacy Policy, obtain your consent where required by Applicable Privacy Laws, and limit our use of such information to the purposes disclosed at the time of collection.

03Cookies and Tracking Technologies

We use cookies and similar technologies to operate and improve the Site, personalize your experience, analyze usage patterns, and support our advertising and marketing efforts.

3.1Types of Cookies We Use

A. Essential Cookies

These cookies are necessary for the Site to function properly. They enable core features such as security, session management, and accessibility. You cannot opt out of essential cookies.

B. Analytics Cookies

We use analytics tools, including Google Analytics, to understand how visitors use the Site. These cookies help us measure traffic, identify popular content, and improve site performance. Analytics data may be collected in aggregate or pseudonymized form.

C. Advertising and Retargeting Cookies

We use advertising cookies and tracking pixels from third-party partners, which may include:

• Meta (Facebook) Pixel
• TikTok Pixel
• Google Ads remarketing tags

These tools allow us and our advertising partners to serve targeted advertisements, build custom and lookalike audiences, retarget visitors who have previously interacted with the Site, and measure advertising performance.

3.2Managing Cookies

You can manage your cookie preferences by adjusting your browser settings to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of the Site. In addition, you may opt out of interest-based advertising through the following mechanisms:

• Network Advertising Initiative: optout.networkadvertising.org
• Digital Advertising Alliance: optout.aboutads.info
• Enabling Global Privacy Control ("GPC") in your browser

04How We Use Personal Information

We use the personal information we collect for the following business and commercial purposes:

• Providing, maintaining, and improving our products and services
• Processing purchases and transactions
• Communicating with you, including via email, SMS, and customer support channels
• Personalizing content, recommendations, and user experience
• Analyzing website performance, user behavior, and marketing effectiveness
• Conducting targeted advertising campaigns and building custom or lookalike audiences
• Preventing fraud, enhancing security, and enforcing our terms
• Complying with legal obligations and responding to legal process
• Managing internal business operations, including record-keeping and auditing

We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice and, where required, obtaining your consent.

05How We Share Personal Information

We may disclose your personal information to the following categories of third parties for the business and commercial purposes described in this Privacy Policy:

5.1Service Providers

We engage third-party service providers who perform services on our behalf, including payment processing (such as Stripe and PayPal), email and SMS marketing, CRM management, website hosting, analytics, and customer support. These service providers are contractually obligated to use personal information only as directed by us and are prohibited from using it for their own purposes.

5.2Advertising Partners

We share certain personal information, including IP addresses, device identifiers, browsing behavior, and website activity data, with advertising partners such as Meta/Facebook and Google for the purpose of delivering targeted advertisements and measuring advertising performance. As noted above, this sharing may constitute a "sale" or "sharing" under the CCPA/CPRA and other Applicable Privacy Laws.

5.3Categories of Personal Information Disclosed

In the preceding twelve (12) months, we may have disclosed the following categories of personal information for business purposes:

• Identifiers (name, email address, IP address, device identifiers)
• Internet or other electronic network activity information (browsing history, interaction data, referral URLs)
• Commercial information (purchase history, products or services considered)

5.4Categories of Personal Information Sold or Shared

In the preceding twelve (12) months, we may have "sold" or "shared" (as those terms are defined under the CCPA/CPRA) the following categories of personal information to advertising partners for cross-context behavioral advertising:

• Identifiers (IP address, device identifiers, cookie IDs)
• Internet or other electronic network activity information (browsing behavior, website activity, click data)

We do not sell personal information for monetary consideration. We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.

5.5Other Disclosures

We may also disclose personal information when required by law, in response to a subpoena or court order, to protect the rights and safety of any person, or in connection with a merger, acquisition, or sale of assets.

06Email and SMS Marketing

By providing your email address or phone number, you consent to receive marketing emails, text messages, product updates, promotional offers, and service notifications from us.

Message and data rates may apply to SMS communications. Message frequency varies.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Replying STOP to any SMS message
• Emailing us at [email protected]

Opting out of marketing communications does not affect transactional or service-related messages that are necessary to fulfill our obligations to you.

07Data Retention

We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including to:

• Deliver purchased products and services
• Process and record transactions
• Maintain business and financial records
• Comply with legal, regulatory, and tax obligations
• Resolve disputes and enforce agreements
• Improve our products, services, and user experience

When personal information is no longer needed for any of these purposes, we will delete, anonymize, or de-identify it in accordance with our data retention schedule and Applicable Privacy Laws.

08International Data Transfers

The Site is operated from the United States. If you access the Site from outside the United States, your personal information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Site, you consent to the transfer of your personal information to the United States.

09Your Privacy Rights Under Applicable State Laws

Depending on your state of residence, you may have certain rights with respect to your personal information under Applicable Privacy Laws. This section summarizes rights that are common across multiple state privacy laws, followed by state-specific supplemental rights where applicable.

9.1General Consumer Rights

If you are a resident of a state with a comprehensive privacy law, you may have the right to:

• Access: Confirm whether we are processing your personal information and obtain a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate personal information.
• Deletion: Request deletion of personal information we have collected from or about you, subject to certain exceptions.
• Data Portability: Obtain a copy of your personal information in a portable, readily usable format (where technically feasible).
• Opt Out of Sale/Sharing: Opt out of the "sale" or "sharing" of your personal information, as those terms are defined under Applicable Privacy Laws.
• Opt Out of Targeted Advertising: Opt out of the processing of your personal information for purposes of targeted advertising.
• Opt Out of Profiling: Opt out of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
• Non-Discrimination: Exercise your privacy rights without receiving discriminatory treatment from us.

9.2How to Exercise Your Rights

To exercise any of the rights described in this section, please submit a verifiable request by contacting us at:

Email: [email protected]

When you submit a request, we will take reasonable steps to verify your identity before responding. Verification may require you to provide information that matches the personal information we have on file. We will respond to your request within the timeframes required by Applicable Privacy Laws (generally 45 days, which may be extended by an additional 45 days where reasonably necessary).

9.3Authorized Agents

You may designate an authorized agent to submit a privacy request on your behalf. If an authorized agent submits a request, we may require the agent to provide proof of authorization (such as a signed written authorization or power of attorney) and may also require you to verify your identity directly with us.

9.4Right to Appeal

If we decline to take action on your privacy request, you have the right to appeal our decision. To appeal, please contact us at [email protected] with the subject line "Privacy Appeal." We will respond to your appeal within the timeframes required by Applicable Privacy Laws. If your appeal is denied, you may contact your state attorney general to submit a complaint.

10Supplemental Notice for California Residents (CCPA/CPRA)

This section provides additional information required under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, for California residents.

10.1Categories of Personal Information Collected

We have collected the following categories of personal information (as defined by the CCPA/CPRA) in the preceding twelve (12) months:

• Identifiers: name, email address, phone number, IP address, account credentials, device identifiers.
• Internet or Other Electronic Network Activity Information: browsing history, search history, interaction data, referring URLs, click and scroll behavior.
• Commercial Information: records of products or services purchased, obtained, or considered.
• Geolocation Data: approximate location derived from IP address.
• Inferences: inferences drawn from the above categories to create a profile reflecting preferences, behavior, or interests.

10.2Sale and Sharing of Personal Information

We do not sell personal information for monetary consideration. However, our use of advertising tracking technologies (such as the Meta Pixel and Google Ads tags) may constitute a "sale" or "sharing" of personal information under the CCPA/CPRA for purposes of cross-context behavioral advertising.

We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.

10.3Right to Opt Out of Sale/Sharing

You have the right to opt out of the sale or sharing of your personal information. To exercise this right:

• Email us at [email protected] with the subject line "Do Not Sell or Share My Personal Information"
• Enable Global Privacy Control (GPC) in your web browser

We honor GPC signals as valid opt-out requests. Upon receiving your request, we will cease sharing your personal information with advertising partners for cross-context behavioral advertising purposes.

10.4Right to Limit Use of Sensitive Personal Information

We do not currently collect or process sensitive personal information (as defined under the CCPA/CPRA) for purposes beyond those authorized under the law. If this changes, we will provide you with a "Limit the Use of My Sensitive Personal Information" mechanism.

10.5Financial Incentive Programs

We may offer promotions, discounts, or other programs that involve the collection of personal information in exchange for a financial benefit. To the extent any such program constitutes a "financial incentive" under the CCPA/CPRA, we will provide you with the material terms of the program before you opt in, and you may withdraw from the program at any time.

10.6Shine the Light

California Civil Code Section 1798.83 permits California residents to request a list of third parties to which we have disclosed personal information for their direct marketing purposes during the preceding calendar year. We do not disclose personal information to third parties for their own direct marketing purposes.

11Supplemental Notice for Virginia Residents (VCDPA)

If you are a Virginia resident, you have the following rights under the Virginia Consumer Data Protection Act, in addition to the general consumer rights described in Section 9:

• Right to opt out of the processing of personal data for purposes of targeted advertising, the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects.
• Right to appeal a denial of a consumer rights request. If we deny your appeal, we will provide you with information on how to submit a complaint to the Virginia Attorney General.

We will not process sensitive data (as defined by the VCDPA) without your consent. To exercise your rights, please contact us using the information provided in Section 9.2.

12Supplemental Notice for Residents of Other States

If you are a resident of Colorado, Connecticut, Texas, Oregon, Montana, Delaware, Iowa, Tennessee, Indiana, Kentucky, Rhode Island, Maryland, Minnesota, Nebraska, New Hampshire, New Jersey, Utah, or any other state with a comprehensive privacy law, you may have additional rights under the laws of your state. These may include:

• Right to opt out of targeted advertising, the sale of personal data, and profiling.
• Right to obtain a list of the categories of third parties to which personal data has been disclosed.
• Right to appeal a denial of a privacy request, with the right to contact your state attorney general if the appeal is denied.
• Right to opt in before processing of sensitive personal data, including data relating to racial or ethnic origin, religious beliefs, health conditions, sexual orientation, citizenship or immigration status, genetic or biometric data, personal data of a known child, or precise geolocation data.

We will respond to your requests in accordance with the requirements of the privacy law applicable in your state of residence. If you have questions about your rights under the law of your state, please contact us at [email protected].

12.1Universal Opt-Out Mechanisms

Several state privacy laws require us to honor universal opt-out mechanisms, such as the Global Privacy Control (GPC). We recognize and honor GPC signals received from your browser as a valid opt-out request for the sale and sharing of personal information and for targeted advertising, to the extent required by Applicable Privacy Laws. You can learn more about GPC at globalprivacycontrol.org.

13De-Identified and Aggregated Data

We may de-identify or aggregate personal information so that it can no longer reasonably be used to identify you. De-identified and aggregated data is not personal information, and we may use and disclose such data for any lawful purpose. We maintain de-identified data in de-identified form, take reasonable measures to ensure that de-identified data cannot be associated with any individual, and contractually obligate any recipients of de-identified data to comply with these requirements.

14Data Security

We implement commercially reasonable administrative, technical, and physical security measures designed to protect personal information from unauthorized access, disclosure, alteration, and destruction. These measures include encryption of data in transit, access controls, and regular security assessments.

However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. Your use of the Site acknowledges this inherent risk.

In the event of a data breach involving your personal information, we will notify you and applicable regulatory authorities as required by Applicable Privacy Laws.

15Children's Privacy

The Site is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under the age of 18 (or under the age of 16 for purposes of selling or sharing personal information under the CCPA/CPRA). If you are a parent or guardian and believe that a minor has submitted personal information to us, please contact us immediately at [email protected] so that we can take steps to delete such information.

16Third-Party Links and Services

The Site may contain links to third-party websites, services, or applications that are not operated or controlled by us. This Privacy Policy does not apply to any third-party websites or services. We are not responsible for the privacy practices of any third party. We encourage you to review the privacy policies of any third-party websites or services before providing them with your personal information.

17Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that a user does not wish to be tracked. Because there is no universally accepted standard for how to respond to DNT signals, we do not currently respond to DNT signals. However, we do honor Global Privacy Control (GPC) signals as described in Section 12.1 of this Privacy Policy.

18Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will post the updated Privacy Policy on this page with a revised "Last Updated" date. We may also notify you of material changes by email or through a notice on the Site. Your continued use of the Site after the effective date of the updated Privacy Policy constitutes your acceptance of the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information.

19Contact Information

If you have questions or concerns about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us at:

We will make every effort to respond to your inquiry in a timely manner and in accordance with Applicable Privacy Laws.