Legal

Privacy Policy

Last updated: October 2026

1. Introduction

SHIFT ("we," "us," or "our") operates the SHIFT platform and website located at totalshiftproject.com. This Privacy Policy describes how we collect, use, disclose, and protect information when you visit our website, create an account, or use any of our services, including coaching programs and facilitated access to independent licensed healthcare providers.

By using our website or services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this policy, please do not use our services.

This policy applies to information collected through our website and services. It does not apply to information collected by third parties, including independent healthcare providers, whose own privacy practices govern the handling of information you share directly with them.

2. Information We Collect

We collect several types of information in connection with your use of our services:

Personal Information

Information you provide to us voluntarily, including:

  • Name and contact details (email address, phone number, mailing address)
  • Information submitted through our contact form or program inquiry forms
  • Communications you send to us directly

Account Information

If you create an account with SHIFT, we collect:

  • Username and password (stored in hashed form)
  • Profile details you provide, such as your goals or program preferences
  • Account activity and program enrollment history

Payment Information

Billing and payment details are collected and processed through third-party payment processors. We do not store full payment card numbers on our systems. We may retain transaction records, billing addresses, and payment confirmation references.

Health-Related Information

If you participate in medical wellness programs, health intake information is collected and handled through our third-party medical platform partners. This information is governed primarily by those partners' privacy practices and applicable law. See Section 4 for more detail.

Website and Device Information

We automatically collect certain information when you visit our website, including:

  • IP address and approximate geographic location
  • Browser type and version
  • Operating system and device information
  • Pages visited, time spent on pages, and navigation paths
  • Referring URLs (the page that linked you to our site)
  • Date and time of your visit

This information is collected through cookies, web beacons, and analytics tools. See Section 7 for more information.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, operate, and maintain our website and services
  • To process enrollments and manage your account and program access
  • To communicate with you about your account, programs, support requests, and service updates
  • To process payments through our third-party payment processors
  • To facilitate your access to independent licensed healthcare providers through our medical platform partners, where applicable
  • To send program-related communications, educational content, and updates you have opted into (you may opt out at any time)
  • To analyze website usage, improve the performance and content of our website and services, and develop new features
  • To detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Use
  • To comply with applicable legal obligations and respond to lawful requests from public authorities

We do not sell your personal information to third parties for their independent marketing purposes.

4. Health Information

Where you participate in SHIFT's medical wellness programs, you may be asked to provide health intake information as part of the provider review process. This information is collected and handled through SHIFT's third-party medical platform partners, not stored independently by SHIFT.

Medical records and health information collected or generated by independent licensed healthcare providers through those platforms are subject to the privacy practices of those providers and the medical platform partners, as well as applicable law including any applicable state or federal health information privacy laws.

SHIFT is not a healthcare provider and does not independently make clinical determinations. SHIFT is not a covered entity under HIPAA solely by virtue of facilitating access to independent medical providers; however, our medical platform partners and the independent providers operating through them may have independent obligations under HIPAA and applicable state health privacy laws.

Please review the privacy practices of any third-party medical platform through which you receive care for a complete understanding of how your health information is handled.

5. Payment Information

Payments for SHIFT services are processed through third-party payment processors. When you submit payment information, it is transmitted directly to and processed by these processors. We do not store full credit card numbers or full debit card numbers on our systems.

We may retain non-sensitive payment-related information such as the last four digits of a payment method, billing address, transaction amounts, and confirmation identifiers for account management and record-keeping purposes.

Our payment processors are bound by applicable payment card industry standards (PCI-DSS) and their own privacy and security policies, which we encourage you to review.

6. Third-Party Providers

Our services involve a number of third-party providers. We share information with these providers only to the extent necessary to deliver our services and as permitted by applicable law. These providers include:

  • Medical platform partners: who facilitate access to independent licensed healthcare providers for medical wellness programs
  • Pharmacy partners: who fulfill prescription medications ordered by independent licensed providers
  • Payment processors: who process billing and subscription payments
  • Email and communications providers: who deliver program updates and support communications
  • Analytics providers: who help us understand website usage and improve our services
  • Website hosting and infrastructure providers: who support the operation of our platform

Each of these third parties has its own privacy policy governing its use of information. We encourage you to review their policies. SHIFT is not responsible for the privacy practices of third-party providers.

7. Cookies and Analytics

We use cookies and similar tracking technologies (such as web beacons and pixels) to improve your experience on our website and to understand how our website is used.

Types of Cookies We Use

  • Essential cookies: necessary for the website to function properly (e.g., session management)
  • Analytics cookies: help us understand how visitors interact with our website so we can improve it
  • Preference cookies: remember your settings and preferences for a more personalized experience

Third-Party Analytics

We may use third-party analytics services, such as Google Analytics, that place cookies on your browser to collect anonymized usage data. These services may combine information about your visits to this website with data from other websites you have visited. You can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on.

Managing Cookies

You may adjust your browser settings to decline some or all cookies or to alert you when cookies are being placed. Please note that disabling essential cookies may affect the functionality of our website.

8. Communications

If you opt in to program communications, we may send you:

  • Program enrollment confirmations and updates
  • Educational content related to nutrition, movement, and wellness
  • Information about new SHIFT programs or services
  • Administrative messages related to your account

You may unsubscribe from marketing and program communications at any time by clicking the unsubscribe link included in any email, or by contacting us at support@totalshiftproject.com. Please note that even after opting out of marketing communications, we may still send you transactional or administrative messages related to your account or active programs.

9. Data Security

We take reasonable and appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include the use of encryption for data in transit, access controls, and regular review of our security practices.

However, no method of data transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security of your information. In the event of a data breach that affects your rights and freedoms, we will notify you as required by applicable law.

You are responsible for maintaining the confidentiality of your account credentials. Please notify us immediately at support@totalshiftproject.com if you believe your account has been compromised.

10. Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you are a parent or guardian and believe that your child has provided personal information to us, please contact us at support@totalshiftproject.com and we will take steps to delete that information.

11. Your Rights

Depending on your location, you may have certain rights with respect to the personal information we hold about you. These may include the right to:

  • Access the personal information we hold about you
  • Correct inaccurate or incomplete personal information
  • Request deletion of your personal information, subject to certain exceptions
  • Object to or restrict certain processing of your personal information
  • Receive a portable copy of your personal information in a structured, machine-readable format
  • Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at support@totalshiftproject.com. We will respond to your request within a reasonable timeframe and as required by applicable law. We may need to verify your identity before processing certain requests.

Please note that rights related to health information collected by independent healthcare providers through our medical platform partners are governed by those providers' own privacy practices and applicable health information privacy law.

12. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or applicable law. When we make material changes, we will notify you by posting the updated policy on this page with a new effective date. For significant changes, we may also provide notice by email (if you have provided us with an email address) or by displaying a prominent notice on our website.

Your continued use of our services following the posting of changes constitutes your acceptance of those changes. We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We will make reasonable efforts to respond to privacy-related inquiries within 30 days.