Privacy Policy

Bendy Fit Inc.

Effective Date: June 26, 2026
Last Updated: June 26, 2026

Table of Contents

1. Who We Are
2. Information We Collect
3. How We Collect Information
4. How We Use Your Information
5. SMS / Text Message Communications (A2P Compliance)
6. Email Communications
7. Sharing and Disclosure of Information
8. Third-Party Services and Integrations
9. Cookies and Tracking Technologies
10. Data Security
11. Data Retention
12. Your Privacy Rights
13. Children's Privacy
14. Health and Fitness Information Notice
15. Links to Third-Party Websites
16. Changes to This Privacy Policy
17. Contact Us

1. Who We Are

This Privacy Policy applies to Bendy Fit Inc., doing business as BendyFit ("BendyFit," "we," "our," or "us"), a company headquartered at:

300 Broadway
Bethpage, New York 11714

We operate the website bendyfit.com and sell the BendyBar — a clinically-inspired oscillating resistance bar — directly to consumers across the United States.

This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you visit our website, make a purchase, subscribe to our communications, or interact with us in any way. By using our website or services, you agree to the terms of this Privacy Policy.

2. Information We Collect

We collect the following categories of personal information:

2.1 Identifiers

• Full name
• Email address
• Mailing and shipping address
• Phone number (including mobile phone number)
• IP address
• Device identifiers and browser information

2.2 Commercial Information

• Products purchased or considered
• Order history and transaction records
• Payment information (processed securely by our payment processor — we do not store full credit card numbers)
• Return and refund history

2.3 Communications and Preferences

• Customer service inquiries and correspondence
• Email subscription preferences
• SMS/text message opt-in status and preferences
• Survey responses and product reviews

2.4 Internet and Network Activity

• Pages viewed on bendyfit.com
• Time spent on pages
• Referring URLs
• Search terms used on our site
• Click data and interaction history
• Shopping cart activity

2.5 Geolocation Data

• General location data derived from your IP address (not precise GPS location)

2.6 Inferences

• Preferences and interests inferred from your browsing and purchase behavior

We do not collect Social Security numbers, driver's license numbers, financial account numbers, or other sensitive government identifiers directly.

3. How We Collect Information

We collect your personal information through the following methods:

Directly from you:

• When you create an account or checkout as a guest
• When you complete a purchase
• When you subscribe to our email list
• When you provide your mobile number and opt in to receive SMS communications
• When you contact us by phone, email, or through our contact form
• When you submit a product review or respond to a survey
• When you enter your number into a web form (including our quiz or lead forms)

Automatically through technology:

• Cookies and similar tracking technologies when you visit our website
• Analytics tools (including Google Analytics and Meta Pixel)
• Session recording or heatmap tools (if applicable)

From third-party sources:

• Our e-commerce platform (Shopify)
• Shipping and fulfillment partners
• Payment processors
• Marketing platforms and advertising networks (for purposes of ad targeting and measurement)

4. How We Use Your Information

We use the personal information we collect for the following business purposes:

• Fulfilling orders: Processing, shipping, and delivering your purchases; sending order confirmations, tracking information, and receipts
• Customer service: Responding to your inquiries, resolving disputes, and processing returns or refunds
• SMS and email communications: Sending order updates, shipping notifications, promotional offers, and other communications for which you have opted in (see Sections 5 and 6)
• Account management: Creating and maintaining your customer account
• Marketing and advertising: Sending promotional emails, running targeted advertising on Meta (Facebook/Instagram), Google, and TikTok; creating custom and lookalike audiences based on customer data
• Website improvement: Analyzing how visitors use our website; improving product listings, user experience, and site performance
• Fraud prevention: Detecting and preventing fraudulent transactions and unauthorized access
• Legal compliance: Complying with applicable laws, regulations, court orders, and law enforcement requests
• Business operations: Internal analytics, record-keeping, and business planning

We do not use your personal information to make solely automated decisions that produce legal or similarly significant effects about you without human review.

5. SMS / Text Message Communications (A2P Compliance)

This section specifically addresses our text message (SMS/MMS) program and is required for A2P 10DLC compliance under CTIA guidelines and the Telephone Consumer Protection Act (TCPA).

5.1 Opt-In Consent

By providing your mobile phone number and submitting a form, completing a purchase, or checking an opt-in box on our website, you expressly consent to receive recurring automated text messages from BendyFit at the mobile number you provide. This includes, but is not limited to:

• Order confirmations and shipping updates
• Product recommendations and promotions
• Abandoned cart reminders
• New product announcements
• Wellness tips and exercise content
• Exclusive offers for BendyFit subscribers

Consent to receive text messages is not a condition of purchase.

5.2 Message Frequency

Message frequency will vary. You may receive up to 10 messages per month depending on your activity and opt-in category. Typical frequency is 3–10 messages per month. We will notify you of any material changes to frequency.

5.3 Message and Data Rates

Message and data rates may apply. Standard carrier messaging and data charges will apply to all text messages we send to you and that you send to us. These charges are billed by and payable to your mobile carrier. BendyFit is not responsible for these charges.

5.4 Opt-Out Instructions

You may opt out of receiving SMS messages from us at any time by replying to any text message with any of the following keywords:

• STOP
• CANCEL
• END
• QUIT
• UNSUBSCRIBE

Upon receipt of your opt-out request, we will send you a one-time confirmation message and immediately stop sending future text messages to your number. You may also opt out by:

• Emailing us at info@bendyfit.com with "SMS Opt-Out" in the subject line
• Calling us at 1-877-BENDY-11 (1-877-236-3911)

5.5 Help

For help with our SMS program, reply HELP to any of our messages. You may also contact us directly:

• Email: info@bendyfit.com
• Phone: 1-877-BENDY-11 (1-877-236-3911)

5.6 No Sharing of Mobile Data — Required Disclosure

We will not sell, share, or disclose your mobile phone number or SMS opt-in consent data to third parties or affiliates for their own marketing or promotional purposes.

All other categories of data sharing are described in Section 7 of this Privacy Policy. Text messaging originator opt-in data and SMS consent information will not be shared with any third party for marketing purposes, without exception.

5.7 Supported Carriers

Our SMS program supports most major U.S. carriers, including but not limited to: AT&T, T-Mobile, Verizon Wireless, Sprint, Boost Mobile, Cricket Wireless, Metro by T-Mobile, and US Cellular. Carrier support is not guaranteed for all carriers. We are not liable for delayed or undelivered messages.

5.8 Program Termination

BendyFit reserves the right to modify or discontinue its SMS program at any time. We will provide notice of material changes where required by applicable law.

6. Email Communications

If you subscribe to our email list or make a purchase, you may receive marketing emails from BendyFit. You can unsubscribe at any time by:

• Clicking the "Unsubscribe" link at the bottom of any marketing email we send
• Emailing us at info@bendyfit.com

Transactional emails (order confirmations, shipping notifications, receipts) may be sent regardless of your marketing email preferences, as they are necessary to fulfill your order.

We comply with the CAN-SPAM Act. Our commercial emails include:

• Our physical mailing address
• A clear unsubscribe mechanism
• Accurate "From" and subject line information

7. Sharing and Disclosure of Information

We do not sell your personal information in the traditional sense. We may share your information with the following categories of third parties under the circumstances described below:

Service Providers: We share personal information with vendors and service providers who help us operate our business, including:

• E-commerce and payment processing (Shopify, Shopify Payments)
• Shipping and fulfillment partners (UPS, FedEx, USPS)
• Customer relationship management / SMS / email platforms (GoHighLevel)
• Marketing and advertising platforms (Meta, Google, TikTok)
• Analytics providers (Google Analytics)
• Product review platforms (Judge.me)
• Customer support tools

These service providers are contractually obligated to use your information only as directed by us and consistent with this Privacy Policy.

Business Transfers: If BendyFit is involved in a merger, acquisition, asset sale, or bankruptcy proceeding, your personal information may be transferred to the successor entity. We will provide notice before your information becomes subject to a materially different privacy policy.

Legal Compliance: We may disclose your information when required to do so by law, court order, subpoena, or governmental authority, or when we believe disclosure is necessary to protect our rights, prevent fraud, or ensure the safety of our customers or the public.

With Your Consent: We may share your information for purposes not listed above with your explicit prior consent.

We do not share your personal information with:

• Data brokers or list aggregators
• Third-party marketers who will use it for their own independent marketing
• Any party for the purpose of selling SMS opt-in data

8. Third-Party Services and Integrations

Our website and operations rely on the following categories of third-party services, each of which may collect and process data independently under their own privacy policies:

We encourage you to review the privacy policies of any third-party services you interact with through our platform.

9. Cookies and Tracking Technologies

We and our third-party partners use cookies, web beacons, pixels, and similar tracking technologies to:

• Remember your preferences and shopping cart
• Analyze website traffic and user behavior
• Deliver targeted advertising based on your interests
• Measure the effectiveness of our marketing campaigns

Types of cookies we use:

• Essential cookies: Required for the website to function (e.g., cart, checkout)
• Analytics cookies: Help us understand how visitors use the site (Google Analytics)
• Marketing cookies: Used to deliver relevant ads on third-party platforms (Meta Pixel, Google Ads, TikTok Pixel)
• Functional cookies: Remember your preferences and settings

How to control cookies:
You can manage or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our website. You may also opt out of interest-based advertising through:

• Google: myaccount.google.com/data-and-privacy
• Meta: facebook.com/ads/preferences
• NAI Opt-Out: optout.networkadvertising.org
• DAA Opt-Out: optout.aboutads.info

California residents may also use a Global Privacy Control (GPC) signal to communicate opt-out preferences automatically.

10. Data Security

We implement commercially reasonable administrative, technical, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for data in transit
• Secure storage through our third-party platform providers (Shopify)
• Access controls limiting who within our organization can access personal data
• Regular review of data collection and processing practices

No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach that affects your rights or interests, we will notify you as required by applicable law.

11. Data Retention

We retain your personal information for as long as necessary to:

• Fulfill the purposes for which it was collected (including providing products and services)
• Comply with legal, accounting, or tax obligations (typically 7 years for financial records)
• Resolve disputes and enforce our agreements
• Maintain opt-out records to honor your preferences

When your information is no longer needed, we will delete or anonymize it. SMS opt-in and opt-out records are retained for a minimum of 4 years to demonstrate compliance with TCPA and CTIA requirements.

12. Your Privacy Rights

12.1 All U.S. Residents

Regardless of where you live, you may:

• Opt out of marketing emails at any time via the unsubscribe link in any email
• Opt out of SMS communications by replying STOP (see Section 5.4)
• Contact us to request correction of inaccurate information
• Request deletion of your personal information, subject to legal retention requirements

12.2 California Residents (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You have the right to request that we disclose what categories of personal information we have collected about you, the sources, our business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Access: You have the right to request a copy of the specific personal information we have collected about you in the preceding 12 months.
• Right to Delete: You have the right to request that we delete your personal information, subject to certain exceptions.
• Right to Correct: You have the right to request that we correct inaccurate personal information we hold about you.
• Right to Opt Out of Sale/Sharing: We do not sell personal information in the traditional sense. However, our use of advertising pixels (Meta, Google, TikTok) may constitute "sharing" for cross-context behavioral advertising under CPRA. You may opt out by submitting a request to us or by using a Global Privacy Control (GPC) browser signal.
• Right to Limit Use of Sensitive Personal Information: To the extent we collect sensitive personal information, you have the right to limit its use to purposes reasonably necessary to provide the services you requested.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise your California rights, contact us at:

• Email: info@bendyfit.com (subject: "California Privacy Request")
• Phone: 1-877-BENDY-11 (1-877-236-3911)
• Mail: 300 Broadway, Bethpage, New York 11714

We will respond to verified requests within 45 days, with a possible 45-day extension when reasonably necessary. We will need to verify your identity before processing your request.

12.3 Residents of Other States

Many U.S. states have enacted or are enacting consumer privacy laws, including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), and others. Residents of these states may have rights similar to those described above. Please contact us to exercise any applicable rights.

13. Children's Privacy

Our website, products, and services are intended for individuals 18 years of age and older. We do not knowingly collect personal information from children under the age of 13. If we learn that we have inadvertently collected personal information from a child under 13, we will promptly delete that information.

If you believe we have collected information from a child under 13, please contact us immediately at info@bendyfit.com.

14. Health and Fitness Information Notice

The BendyBar is a physical fitness and mobility product. In using our website, you may voluntarily provide information about physical conditions, injuries, or wellness goals (e.g., through our product quiz or communications with our support team).

Important: BendyFit is not a healthcare provider, and no information we collect or share constitutes medical advice, diagnosis, or treatment. We are not a HIPAA-covered entity. Health-related information you voluntarily share with us will be treated with care and used only to help recommend appropriate products or exercise content — it will not be sold or shared with third parties for marketing purposes.

We strongly recommend consulting a qualified healthcare professional before beginning any new exercise or mobility program, particularly if you are recovering from injury or managing a medical condition.

15. Links to Third-Party Websites

Our website may contain links to third-party websites, including social media platforms, YouTube, and retailer sites. This Privacy Policy applies only to bendyfit.com. We are not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any external sites you visit.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or the services we offer. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email or prominent notice on our website (for significant changes)

Your continued use of our website or services after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically.

17. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or your personal information, please contact us:

BendyFit
Bendy Fit Inc.
300 Broadway
Bethpage, New York 11714

Email: info@bendyfit.com
Phone: 1-877-BENDY-11 (1-877-236-3911)
Website: bendyfit.com

We will respond to all inquiries within a reasonable time and within any timeframes required by applicable law.