This website uses cookies
Read our Privacy policy and Terms of use for more information.
Privacy Policy
Last updated: Oct 18, 2026
NT ekspertai be procentų, MB, company code 306658727, registered office Aguonų g. 14, LT-03213 Vilnius, Lithuania, operates Orange Theory and is the controller of the personal data described in this policy ("we", "us").This policy covers the website orangetheory.cc, the Orange Theory newsletter in its free and paid versions, and the emails we send. It explains what personal data we process, why we process it, and your rights under the EU General Data Protection Regulation (GDPR) and other applicable laws.For any privacy question or request, email [email protected]. We have not appointed a data protection officer, as we are not required to.
We collect your email address, your subscription status and, if you pay, limited payment details from Stripe.
We use your email address only to send you the newsletter and service emails about your subscription. We never sell it, never share it with advertisers and never send promotional emails without your separate opt-in.
Our newsletter platform records whether emails are opened and links are clicked. We use this only in aggregate, as explained in section 5.
X and Reddit advertising pixels load on our website only if you accept them in the cookie banner.
We will never ask for your private keys, seed phrase or passwords.
You can access, correct, delete or export your data and object to its processing by emailing [email protected].
CategoryWhat it includesSourceSubscription dataEmail address; free or paid status; sign-up, renewal and cancellation dates; the page or campaign you signed up fromYou and our newsletter platformPayment dataName, billing country, card brand and last four digits, amounts, dates, payment and refund status. Full card numbers are handled by Stripe and never reach us.StripeCorrespondenceYour name, email address and the content of your messagesYouEmail engagement dataWhether and when an email was opened, which links were clicked, device or email client type, and approximate location derived from your IP addressOur newsletter platformWebsite analyticsPages viewed, referring site, browser, device type and country, reported in aggregateOur analytics providerAdvertising data (only if you accept)Cookie identifiers, ad click IDs, IP address, browser information, pages visited and actions such as signing upX and Reddit pixelsTechnical and security dataIP address, server logs and login timestampsOur newsletter platform and StripeWe do not ask for special categories of data, such as health information or political opinions. Please do not send them to us.
PurposeData usedLegal basis under the GDPRSending the newsletter you asked for, free or paidSubscription dataContract (Art. 6(1)(b))Running your paid subscription: payments, renewals, renewal reminders, refunds and receiptsSubscription and payment dataContract (Art. 6(1)(b))Service emails, such as security notices and changes to our TermsSubscription dataContract (Art. 6(1)(b)); legal obligation where the law requires notice (Art. 6(1)(c))Keeping accounting and tax recordsPayment dataLegal obligation (Art. 6(1)(c))Answering your messages and requestsCorrespondenceContract (Art. 6(1)(b)) or our legitimate interest in responding (Art. 6(1)(f))Measuring email engagement in aggregateEmail engagement dataLegitimate interests (Art. 6(1)(f)); see section 5Understanding how the website is usedWebsite analyticsLegitimate interests (Art. 6(1)(f))Measuring our X and Reddit ads and showing our ads to past visitorsAdvertising dataConsent (Art. 6(1)(a))Security, fraud prevention and enforcing our Terms, such as stopping redistribution of paid essaysTechnical, security and subscription dataLegitimate interests (Art. 6(1)(f))Establishing, exercising or defending legal claimsThe data relevant to the claimLegitimate interests (Art. 6(1)(f))Where we rely on legitimate interests, you can object at any time (section 10). Where we rely on consent, you can withdraw it at any time; this does not affect processing before the withdrawal.You need to give us your email address to receive the newsletter, and payment details to buy a paid subscription. Everything else is optional.
Email measurement. Our newsletter platform, beehiiv, adds a small invisible image to each newsletter email and routes links through its own servers. This shows whether an email was opened and which links were clicked. We use it in aggregate to see which essays are read and to fix delivery problems. The only individual use is removing addresses that have not opened any email for a long period, so we stop sending to inactive inboxes. To stop opens being recorded, set your email app to block remote images, or email us to object.Advertising pixels (only with your consent). If you click "Accept" in our cookie banner, our website loads the X pixel and the Reddit pixel. The Reddit pixel is loaded through Google Tag Manager, which also loads only after you accept. The pixels tell X and Reddit when a visitor arriving from one of our ads views a page or subscribes, so we can measure which ads work, and let us show our ads on X and Reddit to people who have visited our website. If you do not accept, these pixels do not load. You can change your choice at any time through the "Cookie settings" link [insert link] at the bottom of every page.When the pixels load, we and X, and we and Reddit, are jointly responsible for collecting and transmitting this data. X and Reddit are solely responsible for what they do with it afterwards, under their own privacy policies.We never upload your email address to advertising platforms, for example to build custom or lookalike audiences.Website analytics. We use [insert analytics provider], a privacy-friendly analytics service that does not use cookies or store IP addresses and shows us only aggregate statistics, such as page views and referring websites.
We never sell your personal data or rent out our subscriber list.
We never share your email address with advertisers or upload it to advertising platforms.
We never send promotional emails unless you have separately opted in.
We never ask for your private keys, seed phrase, wallet passwords or account passwords.
We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.
We share personal data only with the recipients below, and only as far as needed for the purposes in section 4.RecipientRoleWhat they doLocationbeehiiv, Inc.ProcessorHosts our website and subscriber list, sends our emails and measures email engagementUSAStripeProcessor for payments; independent controller for fraud prevention and its own legal obligationsProcesses payments, renewals and refundsEU and USA[Analytics provider]ProcessorProduces aggregate website statistics[Location]X Corp. and its affiliatesJoint controller for collection through the pixel; independent controller afterwardsAd measurement and showing our ads, only with your consentUSA and other countriesReddit, Inc.Joint controller for collection through the pixel; independent controller afterwardsAd measurement and showing our ads, only with your consentUSA and other countriesGoogle (Tag Manager)Service providerLoads the Reddit pixel, only with your consentEU and USAOur accountants and legal advisersBound by confidentialityAccounting, tax and legal adviceLithuania and the EUAuthorities and courtsIndependent controllersWhere the law requires us to disclose dataWhere the law appliesA buyer of the ServiceController after the transferIf Orange Theory is sold or transferred; we will tell you firstTo be confirmed at the timebeehiiv's current list of sub-processors is published at subprocessors.beehiiv.com.
Some recipients, including beehiiv, Stripe, X, Reddit and Google, process data outside the European Economic Area, mainly in the United States. For these transfers we rely on an adequacy decision of the European Commission, including the EU-US Data Privacy Framework where the recipient is certified under it, or on the European Commission's Standard Contractual Clauses with any additional safeguards required. You can ask us for more information, or for a copy of the relevant safeguards, at [email protected].
DataHow long we keep itSubscription and email engagement dataWhile you are subscribed. We delete it within 12 months after you unsubscribe or your subscription ends, except a minimal record of your email address and unsubscribe date, which we keep so we do not email you again. You can ask us to delete that record too.Payment and invoice recordsAs long as Lithuanian accounting and tax law requires, generally 10 yearsCorrespondenceUp to 3 years after our last exchangeAdvertising dataCookies expire as listed in our Cookie Policy; X and Reddit keep data under their own policiesWebsite analyticsAggregate statistics only, with no personal data keptData needed for a legal claimUntil the claim is resolved and the limitation period has expired
Under the GDPR you have the right to:
access the personal data we hold about you and receive a copy;
have inaccurate data corrected;
have your data deleted;
restrict processing in certain cases;
receive your data in a portable format, or have it sent to another controller;
object to processing based on legitimate interests, including email measurement; and
withdraw your consent at any time, for example to advertising pixels through "Cookie settings".
To exercise any of these rights, email [email protected] from the address you subscribed with. We will reply within one month and may ask you to confirm your identity. It is free of charge.Complaints. You can complain to the State Data Protection Inspectorate of the Republic of Lithuania (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos g. 17, LT-10312 Vilnius, [email protected], vdai.lrv.lt, or to the data protection authority in the EU country where you live or work. We would appreciate the chance to address your concern first.Residents of the United States. Depending on your state, you may have additional rights under state privacy laws. We honour access, correction and deletion requests from every subscriber, wherever they live. We do not sell personal information, and we use advertising pixels only if you accept them; you can change that choice at any time through "Cookie settings".
Orange Theory is only for people aged 18 or over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has subscribed, email us and we will delete their data.
We use reputable providers with appropriate technical and organisational security measures, limit access to subscriber data to the people who run Orange Theory, and protect our accounts with strong passwords and two-factor authentication. No method of transmission or storage is completely secure, but we will notify you and the authorities of a personal data breach where the law requires.We will never ask for your private keys, seed phrase or passwords. If anyone does so in our name, it is not us: do not respond, and report it to [email protected].
We may update this policy when our services, providers or the law change. The "Last updated" date at the top shows the latest version. We will email subscribers about material changes before they take effect.Contact: NT ekspertai be procentų, MB, Aguonų g. 14, LT-03213 Vilnius, Lithuania · [email protected]