VYRTŪOSITI
Privacy Policy
Effective: March 27, 2026 | Last Updated: March 27, 2026
This Privacy Policy describes how VYRTŪOSITI LLC, a single-member limited liability company organized under the laws of Arizona ("VYRTŪOSITI," "we," "us," or "our"), collects, uses, shares, and protects your personal information when you visit our websites at marcuslefton.com and marcuslefton.com/mastery, subscribe to the Mastery in Motion newsletter, complete a performance diagnostic, submit an application or intake form, engage our coaching or consulting services, or otherwise interact with us. By using our websites or services, you acknowledge that you have read and understand this Policy.
01
Information We Collect
We collect information you voluntarily provide, information collected automatically through your use of our websites, and information obtained from third-party sources.
Information You Provide Directly
- Name (legal name and/or preferred name)
- Email address
- Phone number (when provided during application, engagement, or text-based communications)
- Diagnostic application and intake form responses, including self-reported performance constraints, goals, and primary system limitations.
- Performance diagnostic responses collected through interactive assessment tools on our websites (e.g., the Mastery in Motion diagnostic), which may include self-reported data about cognitive patterns, energy levels, physical capacity, recovery habits, and vocational performance.
- Coaching engagement data, including session notes, action items, progress metrics, and communications exchanged during active engagements.
- Biometric and health-related data you voluntarily share during engagements, such as HRV readings, CO2 tolerance scores, sleep data, blood work results, and other physiological markers (see Section 02).
- Payment and billing information processed through our third-party payment providers (see Section 04).
- Text messages and SMS communications exchanged during active engagements.
Information Collected Automatically
- IP address, browser type, device identifiers, and operating system.
- Pages viewed, time spent on pages, referring URLs, and navigation patterns.
- Cookies and similar tracking technologies (see Section 08).
- Email engagement data, including open rates and click-through activity, collected through our email service provider.
Information from Third Parties
- Scheduling platform data collected when you book a session through our third-party scheduling provider (e.g., TidyCal).
- Analytics data from website hosting and performance platforms.
02
Sensitive, Health-Related, and Pre-Engagement Data
Certain engagements involve the voluntary disclosure of health-related or biometric data, including but not limited to heart rate variability, blood chemistry panels, respiratory metrics, sleep architecture data, and psychological self-assessments. This information is central to the performance architecture methodology we deliver.
Important: We collect health-related and biometric data only with your informed, voluntary participation. This data is used exclusively to deliver, refine, and personalize your engagement. We do not sell, rent, license, or share your health-related data with any third party for marketing, advertising, or commercial purposes. Health and biometric data is stored in secured, access-restricted systems and is handled with a heightened standard of care consistent with industry best practices for sensitive personal information.
Pre-Engagement Data: Before any formal engagement begins, we may collect self-reported performance and health-related information through diagnostic applications and intake forms. This pre-engagement data is treated with the same standard of care as engagement data.
03
How We Use Your Information
We use the information we collect for the following purposes:
- To deliver, manage, and improve our coaching, consulting, and performance architecture services.
- To process and respond to diagnostic applications, intake forms, and engagement inquiries.
- To administer and score performance diagnostics and deliver results to you.
- To personalize your experience and tailor engagement protocols to your specific data and objectives.
- To process payments and manage billing through third-party payment processors.
- To communicate with you regarding scheduling, session preparation, and engagement administration.
- To create anonymized, aggregated data for research, content development, and methodology refinement (individual identities are never disclosed without explicit consent).
04
How We Share Your Information
We do not sell your personal information. We share personal data only in the following limited circumstances:
- Service Providers: Third-party vendors who assist with website hosting, email delivery, payment processing, scheduling, and analytics. These providers are contractually or operationally bound to use your data only as necessary to perform services on our behalf.
- Payment Processors: We do not directly store your payment credentials. All transactions are processed through third-party providers (such as Stripe or PayPal) that maintain their own security standards.
- Professional Advisors: Attorneys, accountants, or other professionals as needed for business operations, subject to confidentiality obligations.
- Legal Requirements: When required by law, regulation, legal process, or governmental request.
- Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets.
- With Your Consent: We may share information in other circumstances where you have provided explicit written consent, including the use of testimonials or case studies.
05
International Data Processing
VYRTŪOSITI is based in Arizona, United States. In the course of operating our business, certain service providers who support administrative or operational functions may be located outside the United States.
Scope of International Access: Overseas service providers do not have access to client health data, biometric information, session notes, or engagement-specific performance records. Their access is strictly limited to operational data necessary to support business functions.
06
Communications: Email, SMS, and Text Messaging
Newsletter: When you subscribe to the Mastery in Motion newsletter, you consent to receive periodic email communications. You may unsubscribe at any time.
SMS/Text: During active coaching engagements, we may communicate with you via SMS or text message for session scheduling, progress updates, and accountability check-ins. We do not use SMS for marketing purposes.
07
AI and Automated Tools
In the course of delivering our services, we may use artificial intelligence tools or large language models to assist with research, content development, and strategic analysis.
- We do not input personally identifiable client information (including names, contact details, health data, or session-specific performance data) into third-party AI systems without your knowledge.
- AI-generated outputs used in your engagement are reviewed and validated by your performance architect before being applied. No automated system is used as the sole basis for decisions that materially affect your health protocols or service delivery.
08
Cookies and Tracking Technologies
Our websites use Essential, Analytics, and potentially Marketing cookies to enhance functionality, analyze site traffic, and improve your experience. Most browsers allow you to manage cookie preferences; however, disabling certain cookies may limit website functionality.
09
Data Retention and Deletion
We retain your personal information for as long as necessary to fulfill the purposes for which it was collected:
- Active clients: Engagement data, session records, and health-related information are retained for the duration of the engagement plus 36 months, unless otherwise requested.
- Applicants and leads: Intake form and diagnostic application data are retained for up to 24 months following your last interaction.
- To request deletion of your data, contact us at the address in Section 11. We will respond to verified requests within 30 days.
10
Data Security
We implement reasonable administrative, technical, and physical safeguards designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. If we become aware of a security breach affecting your personal information, we will notify you in accordance with applicable law, including Arizona data breach notification requirements.
11
Contact & Your Rights
Depending on your jurisdiction, you may have the right to access, correct, or delete your personal information, or opt out of certain processing. If you have questions about this Privacy Policy, wish to exercise your data rights, or need to report a concern, please contact us at:
12
Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of the State of Arizona, without regard to its conflict of law provisions. Any disputes arising under or in connection with this Policy shall be subject to the exclusive jurisdiction of the state and federal courts located in Maricopa County, Arizona.