Privacy Policy
Effective: March 24, 2026
About us
“We”, “us” or “our” means CRG Opco, LLC, and its affiliates, d/b/a Central Rock Gym, with its principal place of business at: 299 Barber Ave, Worcester, MA 01606, USA.
About this privacy policy
Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you interact with us, including through our website (https://centralrockgym.com), mobile experiences, physical locations, and related services (collectively, the “Services”).
This policy also applies when you engage with us through sales, marketing (including email and SMS), events, waivers, or in-gym experiences.
This Privacy Policy does not apply to aggregated or anonymized data that cannot reasonably be used to identify you.
What personal information we collect and how we collect it
We collect personal information in the following ways:
- Information You Provide Directly
- Name, email address, phone number, mailing address
- Date of birth
- Emergency contact information
- Payment information (processed by third-party providers)
- Participant Agreement (sometimes known as “Waiver”), registration, and orientation form information
- Survey responses, promotions, and event participation
- Communications with us (email, SMS, written, phone, in person)
- Automatically Collected Information
- IP address
- Browser type and device information
- Pages visited, time spent, and usage patterns
- Cookies and similar technologies
- Cookies We use cookies and similar tracking technologies to enhance your experience. You can control cookies through your browser settings, though some features may not function properly if disabled.
How we use your personal information
We may use your personal information to:
- Provide and manage memberships, facility access, bookings, and services
- Process transactions and payments
- Communicate with you (including customer service and support)
- Send marketing communications (e.g. email, SMS, promotions, offers), with your opt-in
- Personalize your experience and recommend services
- Improve our Services, operations, and customer experience
- Maintain the safety and security of our facilities and users
- Administer promotions, contests, and events
- Detect and prevent fraud or misuse
- Comply with legal obligations and enforce our policies
What is our legal basis for processing
Where required by applicable law, we process your personal information based on:
- Your consent (e.g., marketing, SMS)
- Performance of a contract (e.g., memberships, bookings)
- Legitimate business interests (e.g., improving services, security)
- Legal obligations
How we share your personal information
We may share your information:
- With our service providers (e.g., payment processors, marketing platforms like Mailchimp, analytics providers)
- With vendors supporting our operations or communications
- In connection with a business transaction (e.g., merger, acquisition)
- When required by law or legal obligation, or to protect rights, safety, or property
We do not sell your personal information.
Your marketing choices (including SMS)
You may opt in to receive marketing communications via email and/or SMS (text messages).
By providing your phone number and/or email, and opting in, you consent to receive recurring automated marketing messages from Central Rock Gym. Message and data rates may apply. Message frequency may vary.
You can opt out at any time by:
- Clicking “unsubscribe” in emails
- Replying STOP to SMS messages
- Contacting us directly
Even if you opt out of marketing, we may still send transactional or service-related messages.
We will not share your personal information with third parties for their own direct marketing without your consent.
Retention of your data and deletion
We retain personal information as long as necessary to:
- Provide our Services
- Meet legal, accounting, or regulatory requirements
- Resolve disputes and enforce agreements
Retention periods depend on the type and sensitivity of the data.
You may request deletion of your personal information, subject to legal or contractual obligations or technical constraints (e.g. data archiving).
International transfers
Your information may be transferred to and processed in the United States and other countries where we or our service providers operate.
We take appropriate safeguards to protect your information in accordance with applicable laws.
Your data protection rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your data
- Object to or restrict certain processing
- Request data portability
- Withdraw consent at any time
To exercise your rights, contact us using the details below.
You may also have the right to file a complaint with a regulatory authority.
Children’s privacy
We do not knowingly use personal information from children without appropriate parental or guardian consent.
If you believe a child has provided us with personal information without consent, please contact us so we can remove it.
Security
We take reasonable measures to protect your personal information. However, no system is completely secure, and we cannot guarantee absolute security.
Third-party links
Our Services may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to review their policies.
Changes to this privacy policy
We may update this Privacy Policy from time to time. Updates will be posted on this page with a revised effective date.
Contact us
CRG Opco LLC (Central Rock Gym)
299 Barber Ave
Worcester, MA 01606, USA
Email: [email protected]
Marketing opt-out: [email protected]