Privacy Policy

Who this policy covers

The site is published under the name HTX FightCamp LLC, operating as HTX FightCamp, for training questions about Tampa, Florida. The contact address printed on this website is 1814 N 15th Street, Tampa, FL 33605, United States. You can use the inquiry form, call +1 (813) 919-7649, or email [email protected]. The form is also how you ask for access, correction, or deletion of an inquiry you already sent. This policy does not confirm that training is scheduled at the contact address.

Information the form collects

When you submit the form, the server can store:

Your name. Your email address. A phone number, only if you type one. The training interest you select. The message you write. The fact that you checked the consent box. The time the inquiry was received, in UTC. A random inquiry id. A content hash used to recognize a duplicate sent within 24 hours. A hash of the network address, not the raw address. A hash of the browser user-agent string, not the raw string. A mail status field, mail_status, which records whether a notice was not configured, pending, accepted by a mail server, or refused. That field is not a delivery receipt from an inbox.

The form also contains a hidden anti-spam field and a signed timestamp. If the hidden field is filled, the inquiry is rejected and that extra text is not stored as a lead. The timestamp is checked and is not written into the inquiry line. It is not a cookie. A separate private file stores the one-time form nonce and the inquiry id for up to 7200 seconds so the same submission cannot be saved twice. That file does not store your name, email, phone, or message. Rate-limit records store only the hashed network address and timestamps.

The site does not ask for payment card numbers, government identifiers, or health records. If you choose to describe an injury in the message, that text is stored with the message because you included it. Do not send information you do not want in the inquiry file.

Why it is stored

The purpose is to let an operator read a training question and, if they can, reply. The same file is the record used if you later ask for a copy or for deletion. Inquiries are not used by this application to build an advertising audience, and they are not sold.

Rate-limit records store only hashed network addresses and timestamps. They exist to slow repeated submissions. They are not a marketing list.

Who can read it

There is no public admin page and no member login that displays leads. The inquiry file sits in a directory outside the website folder, readable by the person who administers the server. The mailbox named for notices is [email protected]. The application sends that notice only when mail transport is configured on the server, with credentials kept outside the website folder. A stored inquiry is not the same thing as a message that arrived in that inbox. Saving the inquiry does not reserve training.

Hosting staff may be able to access server files and logs according to the host's own terms. This application does not name a specific host because the deployment target is chosen at launch. The intended hosting pattern is documented for FASTPANEL, which typically uses Apache with an Nginx proxy. Server access logs kept by that host can contain IP addresses even though the inquiry file stores only a hash. Those logs are controlled by the host, not by a switch on this page.

Where it is kept, and for how long

Leads are written as JSON lines in a private directory outside the public site files. The default retention period is 90 days from the received time. Nothing on this website deletes those lines on a schedule. An operator removes older lines by running scripts/purge-leads.php from the server command line. The same person can delete one inquiry with scripts/delete-lead.php and the inquiry id. Retention can be changed with the LEAD_RETENTION_DAYS setting. This policy's stated period remains 90 days unless that setting is changed and this page is updated. A line with an unreadable time is kept, not deleted.

Backups taken by the host may keep a copy longer than the live file. This site cannot promise that every backup expires on day 90.

Access, correction, and deletion

Use the same form, or email [email protected]: include the email address you used, describe whether you want a copy, a correction, or deletion, and state that the message is a privacy request. The form request is stored like any other inquiry. Fulfilling it depends on someone who can open the private file. This page does not promise a turnaround time. Do not send extra identity documents through the form.

If mail delivery is working, a reply can come to the email you provided. If it is not working, the request still sits in the private file until someone with server access reads it or an operator runs the cleanup script after the retention period.

Children

The site is written for adults asking about adult training. It is not directed to children under 13, and the form should not be used to send a child's personal information. If an operator finds that a submission is about a child, they should delete it rather than build a youth program record from this form.

Security

The application escapes output, limits message size, checks the origin of the form post, and refuses to keep the lead file inside the public folder. Those are ordinary measures. They are not a promise that a breach is impossible, and they are not a compliance certification.

Cookies and other sites

Cookie behavior is described in the cookie policy. The short version: this application does not set a cookie. Use of the site is also covered by the terms and conditions.

This policy should be revised if the form fields change, if a mailbox vendor is named, or if the host starts adding its own trackers.