fbpx

BURNALONG PRIVACY POLICY

Effective Date: 1/17/2024

Burnalong, Inc.® (“Burnalong”) values your privacy. Tivity Health, Inc.® (“Tivity”) owns and operates Burnalong websites, online platforms, mobile applications, and other services that link to this Privacy Policy (collectively, the “Services”). Burnalong, Tivity and its subsidiaries are referred to as “we,” “us,” or “our.”  

PLEASE READ THIS PRIVACY POLICY CAREFULLY BEFORE USING THE SERVICES. 

We value and respect the privacy of our customers, visitors, and users of the Services and our workforce (including employees, job applicants, contractors, consultants, and any owners, officers, or other members of our organization (collectively, “Personnel”)) (all together, “you” or “your”). The purpose of the following Privacy Policy (“Privacy Policy”) is to provide you with information about our policies regarding the collection, processing, use, storage, and disclosure of information when you use our Services or that we otherwise collect from our Personnel. This Privacy Policy also describes the choices you can make about our use of your information.  

When you use the Services, you are consenting to the collection and use of your information as described in this Privacy Policy, though we may ask for specific consent to particular uses of your information or collection of specific types of sensitive information. By accessing or using the Services, you represent and warrant that you are at least sixteen (16) years old and possess the legal right and ability to agree to the following Privacy Policy. If you do not agree to all of the terms and conditions of this Privacy Policy, you should not access or use the Services or disclose any Personal Information (defined below) through the Services. By using the Services and accepting these terms, you agree to the terms of this Privacy Policy and the collection and use of information in accordance with this Privacy Policy. 

From time to time, we may revise or modify this Privacy Policy, by posting the amended version including the effective date of the updated version. You should regularly review this Privacy Policy whenever you access, visit, and/or use the Services. If you do not agree to be bound by this Privacy Policy or any subsequent modifications, you should not access or use our Services or disclose any Personal Information through our Services. This Privacy Policy is incorporated into and governed by our Terms of Service, including its applicable limitations on damages and the resolution of disputes, which is accessible within the footer of our websites. 

Depending upon where you live, additional terms and protections may apply. Click here for U.S. state-specific terms and protections.  Click here for location specific terms and protections if you live in the European Economic Area or United Kingdom. 

1. HOW TO CONTACT US

If you have any questions or concerns about our use of your Personal Information (defined below) or wish to communicate with our senior privacy official or senior security official, please do not hesitate to contact us by email at [email protected]. If you wish to exercise your privacy rights please visit Your Privacy Choices or call us toll-free at 1-877-614-3111.   

2. HOW WE COLLECT PERSONAL INFORMATION

While using, accessing, or otherwise engaging with our Services, we may collect or ask you to provide us with certain personally identifiable information (“Personal Information”). Personal Information is information that identifies, relates to, describes, can reasonably be associated with, or can reasonably be linked to a particular individual or household.  

We collect information from you both when you provide it voluntarily and also automatically when you use our Services.  We may also collect Personal Information from other sources, as described below. 

We collect Personal Information from you and any devices (including mobile devices) you use when you use our Services, register for an account with us, provide us information on a web form or over the telephone, update or add information to your account, or when you otherwise correspond with us or interact with us through the Services or engage or connect with us through one of our social media pages.  Please remember that any information that you disclose in public comments, forums, or other areas where users can submit comments (“Forums”) becomes public, is not maintained or treated as confidential, and you should exercise caution when deciding to disclose your Personal Information. 

You may link your wearable device account information to your Burnalong profile. If you link your wearable device profile, these services may include collection of certain information such as your exercise, activity, sleep, or health data, including respiration, blood pressure, oxygen saturation, the number of steps you take, distance traveled, calories burned, weight, heart rate, sleep stages, active minutes, and any other information to which you grant us access. 

In addition, we also collect Personal Information about you from third parties in connection with our Services, including from the following sources: 

  • Our customers, including the organization that sponsors your membership, e.g., employers, health plans and others, and their service providers (collectively, your “Sponsoring Organization”).
  • Business partners, including participating fitness locations 
  • Data analytics service providers
  • Email, chat, and other communications service providers
  • Customer service providers
  • Advertising providers
  • Social networking platforms
  • Promotional partners 

3. INFORMATION WE COLLECT AND HOW WE USE PERSONAL INFORMATION

We may collect the following categories of Personal Information from you, depending on your interactions with our Services and the choices you make, as further described below:  

  • Identifiers. Your name, email address, postal address, telephone number, unique personal identifier, and Internet Protocol (IP) address. 
  • Interactions. Records of products or services obtained, considered, or other consuming histories. 
  • User data. Any data entered voluntarily into a form on the Services, as well information about your activity levels.  This may include information about your gym memberships, your height, weight and age, and your personal workout goals; your fitness activities, including the frequency and durations of participation in classes, programs, communities and your wellness habits.  If you connect a wearable device to your Burnalong profile, this may also include information such as your exercise, activity, sleep, or health data.  
  • Financial Information. Your name, billing address, and payment information (including credit or debit card type, expiration date, and certain digits of your card number).  
  • Internet or other electronic network activity information. For example: 
  • Browsing history. Data about the webpages you visit. 
  • Search history. Data about the search terms you enter.
  • Device, connectivity, and configuration data. Data about your device and nearby networks, including regional and language settings. 
  • Cookies, pixel tags and other tracking technologies. Data that a website (or online service) stores on your browser about your visit to our website or other websites you visit. 
  • Geolocation data, which may include Sensitive data (precise geolocation data) if you have enabled the location tracking features. Data about your device’s location, which is inferred from your IP address and your postal address, and if you have enabled the location tracking features, data from your device may also be gathered pertaining to GPS signals, device sensors, WiFi access points, and cellular tower IDs. If you have enabled the location tracking features, location data may be collected when the mobile application is closed or not in use to enable the mobile application to promptly display nearby fitness locations, reduce check-in times, and automatically keep track of your route, distance, and speed stats. 
  • Professional or employment-related information. Data is collected from Personnel, such as your career history, and license credentials if you are applying for a job position that requires a license. 
  • Personnel Sensitive Personal Information. Data collected from Personnel may include sensitive personal information such as social security number, state identification card/driver’s license, passport number, financial account information or bank account information, racial or ethnic origin.   
  • If you are a Content Provider, you may also submit information including a profile picture, certifications, and videos of yourself when you create your profile and provide content. 
  • Educational information. Data collected from individuals seeking or maintaining employment through our organization. 
  • Demographic data. Data about you such as your age (date of birth), preferred language, and other data reflecting your consumer preferences and characteristics. 

Your Personal Information is used by us to provide our Service to you, enhance your relationship with us, respond to your requests, tailor offerings to you, communicate with you about products, services, special offerings, and events or programs offered by us or our marketing partners that may be of interest to you. We may also use this information to analyze and manage our businesses, including to protect our own rights and interests, such as to resolve any disputes, enforce our Terms of Service, or to respond to legal process. We generally process your information when we need to do so to fulfill a contractual obligation or where we or someone we work with needs to use your Personal Information for a reason related to our/their business. These interests are further detailed in the chart below. We only process Personal Information for these interests after considering the potential risks to your privacy. 

Information collected through use of our Services 

 

 

Categories of Information 

Description of category 

How We Use Information 

Categories of Third Parties with Whom we Disclose Information (discussed further in Disclosure of Information below) 

Account Information (Identifiers, Interactions, User data, Internet or electronic network activity information) 

This is the Personal Information that is provided by you to enable you to login and access your account and/or our Services and by your Sponsoring Organization for eligibility purposes. This may include your name, address, email address, and phone number.  

 

Registering for an account is an optional service provided by some of our Services. Some of the Personal Information we will ask you to provide is required in order to create your account.  

  • To provide, maintain, personalize and improve our Services. 
  • To respond to your questions and requests. 
  • To create, maintain and personalize your account with us. 
  • To provide support. 
  • To allow you to participate in interactive features of our Services when you choose to do so. 
  • To contact you with newsletters, marketing or promotional materials and other information that may be of interest to you.  

 

  • Software and Service Providers 
  • Service and offering-related service providers 
  • Affiliates 
  • Analytics service providers 
  • Your Sponsoring Organization   
  • Burnalong Users, as applicable 
  • In connection with business transactions 

Email Registration Information (Identifiers, User Data) 

 

You or your Sponsoring Organization may provide your email address in order to receive information, news and alerts via email.  

  • To contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. 
  • Software and service providers 
  • Affiliates  
  • Marketing service providers 
  • Advertising service providers 
  • Your Sponsoring Organization   
  • In connection with business transactions 

Customer Service Information (Identifiers, User Data) 

This includes any Personal Information that you choose to provide, whether by phone, email, mail, or chat, to our customer service representatives or other Tivity employees when making a request for information or otherwise contacting us through the Services. 

  • To provide, maintain, operate, personalize, and improve our Services. 
  • To respond to your questions and requests.  
  • To provide support.  
  • To allow you to participate in interactive features of the Services when you choose to do so. 
  • Software and service providers 
  • Service and offering-related service providers  
  • Your Sponsoring Organization, if needed to resolve your inquiry 
  • In connection with business transactions 

Qualification Information (Identifiers, User data, Demographic data) 

This is the Personal Information that you provide if you choose to determine if you qualify to participate in certain Services. This includes your name, date of birth, email, phone number, and zip code. 

 

  • To respond to your questions and requests. 
  • To contact you with newsletters, engagement, marketing, or promotional materials and other information that may be of interest to you. 
  • To gather analysis and assess trends and interests. 
  • Software and Service Providers 
  • Affiliates 
  • In connection with business transactions  
  • Your Sponsoring Organization  
  • Burnalong Users, as applicable 

Usage Data (Identifiers, User data, Demographic Data, including Sensitive Data, if you choose to share it with us) 

This includes Personal Information that you provide, as well as data about how you used our Services, the frequency and duration of your participation in classes, programs, communities and your wellness habits.  As applicable, this also includes Personal Information from your wearable device account if you choose to connect it to your Burnalong account.  

 

When you work out with other Burnalong users, we will display your profile image, name and wearable device data (if applicable) as described above, shown in leader boards and within group goals or Challenges 

 

When you post to the Services, such as to comment on a blog post, your first name, last initial and city along with any information that you post to our website or app, including, without limitation, reviews, comments, and text will be available to, and searchable by, all website, app and Services visitors. 

  • To provide, maintain, personalize and improve our Services. 
  • To respond to your questions and requests. 
  • To create, maintain and personalize your account with us. 
  • To provide support. 
  • To allow you to participate in interactive features of our Services when you choose to do so. 
  • To gather analysis and assess trends and interests. 
  • To contact you with newsletters, marketing or promotional materials and other information that may be of interest to you.  
  • Software and Service Providers 
  • Affiliates 
  • In connection with business transactions  
  • Your Sponsoring Organization, if applicable 
  • Burnalong Users, as applicable 

Job Application, Personnel, and Business Contact Information (Identifiers, User data, Professional or employment-related information, Educational information) 

 

This is the Personal Information and Sensitive Personal Information that you may provide and that is collected when you engage with our Services, including if you choose to apply for and/or accept a job position with us through the Services or otherwise provide Personal Information as part of business contact information. This includes your name, phone number, postal address, email address, career and educational history, and may include, with respect to Personnel, your Social Security number, state identification card/driver’s license number and other information needed to pay you, verify your identity, provide you benefits or otherwise act in accordance with our relationship. We may ask for your license credentials if you are applying for a job position that requires a license.  

 

If you are a Content Provider, we may also collect a description of you and the name and location of the gym or studio you work at (or your location if you are not affiliated with a gym or studio). When you create your profile as a Content Provider, you may also submit information including a profile picture, certifications, and a video of yourself. 

  • To assess your job application and respond to you concerning a job position, at our discretion.  
  • To provide Services 
  • To facilitate your relationship with us. 

 

  • Software and service providers 
  • Affiliates 
  • Human resources software and/or service providers 
  • In connection with business transactions  
  • If you are a Content Provider, we will display your profile image, name, and the name of the business you work at/your location, if available, when users search for sessions or when users use your videos. When you post to the Services, such as to comment on a blog post, your first name, last initial and city along with any information that you post to our website or app, including, without limitation, reviews, comments, and text will be available to, and searchable by, all website, app and Services visitors. 

Payment and Purchasing Information (Identifiers, Interactions, User data) 

We may use third parties to collect Personal Information if you make a purchase through our Services. The exact Personal Information collected will vary depending on the payment method but will include information such as: 

·  Name; 

·  Credit or debit card type, expiration date, and certain digits of your card number; 

·  Billing and shipping addresses; and 

·  Postal code. 

Please note that we do not collect or maintain the above payment information and you should refer to the privacy policies of our payment gateways and processors. We may also collect information concerning the products purchased or considered, or other purchasing or consuming histories or tendencies. 

  • To process payments and provide you with the products purchased.  
  • To respond to your questions and requests. 
  • To provide customer support. 
  • To provide with more relevant content and advertisements. 
  • To send you personalized emails, including news, announcements, reminders and opportunities from Tivity.  
  • Software and service providers 
  • Affiliates 
  • Service or offering-related service providers 
  • In connection with business transactions 

Demographic Data 

 

We may collect such Personal Information when you contact us or respond to our communications to you, provide feedback or post on a forum through our Services, including if you leave a comment on articles posted on the Services.  

 

  • To provide, maintain, personalize, and improve our Services. 
  • To provide customer support.  
  • To monitor the usage of our Services. 
  • To gather analysis and assess trends and interests. 
  • Software and service providers 
  • Affiliates 
  • Service or offering-related service providers 

Location Information (Identifiers, User data, Geolocation data, which may include Sensitive data in the form of precise geolocation data if you have enabled certain location tracking features) 

 

We may collect general location information, including geolocation and fitness center check-in/check-out times, if you use features on our Services that provide location-based services.  

  • To provide you with location-based services. 
  • To monitor the usage of our Services. 
  • To gather analysis and assess trends and interests.  
  • Software and service providers 
  • Affiliates 
  • Your Sponsoring Organization, if applicable 
  • Service or offering-related service providers 
  • Analytics providers 
  • In connection with business transactions 

Usage Information (Interactions, Internet or electronic network activity information, Geolocation data) 

This can be Personal Information and non-Personal Information that is collected about you when you are using our Services, and this may include:  

  • Information about your interactions with our Services, which includes the date and time of any information you enter into our Services and your interactions with other users of our Services and what content or features you interacted with. 
  • User content you post to our Services including messages you send and/or receive in the Forums and your interactions with our customer service team and other users.  
  • Technical data which may include URL information, cookie data, web beacons and other tracking technology information, the website you were visiting before you visited the Services, your IP address, the types of devices you are using to access or connect to our Services, unique device IDs, device attributes, network connection type (e.g., WiFi, 3G, LTE, Bluetooth) and provider, network and device performance, browser type, language, and operating system. Further details about the technical data that is processed by us can be found below. 

We or our third-party partners use common tracking tools (including cookies, web beacons, and pixels) which we and our third-party service providers may use to collect information about the pages you view, our Services functions that you access, the buttons and icons you click, and to make it easier and more efficient for you to use our Services, and to market to you and/or provide advertising content that we think may be of interest to you. 

 

You can choose whether to accept cookies by changing the settings on your browser or device.  For more information regarding your choices with respect to cookies and other tracking technologies, please see Your Rights and Choices Regarding Your Information below. However, if you choose to disable this function, your experience with our Services may be impaired and some features may not work as they were intended. When we use cookies or other similar technologies, we may set the cookies ourselves or ask third parties to do so to help us.  

  • To optimize the display of our Services on your device.  
  • To create, maintain and personalize your experience.  
  • To provide, maintain, personalize, and improve our Services 
  • To provide customer support. 
  • To monitor the usage of our Services 
  • To allow you to participate in interactive features of our Services when you choose to do so.  
  • To gather analysis and assess trends and interests.  
  • To detect, prevent, and address technical issues. 
  • To provide you with content and advertising in which we think you will be interested. As part of this customization, we may observe your behaviors on the Services or on other websites.  
  • To help maintain the safety, security, and integrity of our Services and technology assets.  
  • Software and service providers 
  • Analytics providers 
  • Advertising service providers 
  • In connection with business transactions  

Third Party Data (Identifiers, Internet or electronic network activity information) 

This includes both Personal Information and non-personally identifiable data from our affiliates, customers, partners or vendors, data brokers, or public sources. 

  • To provide, maintain, operate, personalize, and improve the Services. 
  • To monitor the usage of the Services. 
  • To gather analysis and assess trends and interests. 
  • To work with our service providers who perform certain business functions or services on our behalf. 
  • Software and Service Providers 
  • Analytics Providers 
  • Marketing Service Providers 
  • Advertising Service Providers 
  • In connection with business transactions 

User Generated Content  

We invite you to post content on our Site or App, including your comments, pictures, and any other information that you would like to be available on our Site or App. If you post content to our Site or App, all of the information that you post will be available to all visitors to our Site or App. If you post your own content on our Site, App or Services, your posting may become public and Burnalong cannot prevent such information from being used in a manner that may violate this Privacy Policy, the law, or your personal privacy. 

  • To provide, maintain, personalize and improve our Services. 
  • To respond to your questions and requests. 
  • To create, maintain and personalize your account with us. 
  • To provide support. 
  • To allow you to participate in interactive features of our Services when you choose to do so. 
  • To gather analysis and assess trends and interests. 
  • To contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. 
  • Software and Service Providers 
  • Affiliates 
  • In connection with business transactions  
  • Your Sponsoring Organization, if applicable 
  • Burnalong Users, as applicable 

Generally, you control the amount and type of information you voluntarily provide to us when using the Services. You are not required to provide us with any Personal Information as a visitor to the Services. When you register for an account, make a request for information, or otherwise communicate with us via the Services (as discussed in Account Information, Email Registration Information and Customer Service Information in the table above), you may be required to provide us with certain Personal Information such as your name, email address, company name, as applicable. We will offer you choices when we ask for Personal Information whenever reasonably possible. Any information you provide may be combined with demographic and other information that is available to allow us to better communicate with you and enhance your experience. If we combine or associate information from other sources with Personal Information that we collect through the Services, we will treat the combined information as Personal Information in accordance with this Privacy Policy. 

Anonymized Information. We may collect non-personally identifiable Usage Information via cookies, web beacons, and similar technologies as further described in the Usage Information section above when you visit our Services. We may also use anonymized and aggregated information that may be created or derived from your Personal Information or usage of our Services for purposes that include data analysis, improving our Services, advertising, and developing new features and functionality within our Services. We may further use such anonymized and aggregated information to conduct aggregate or research analysis to enhance, protect, and make informed decisions on the Services.  

4. DISCLOSURE OF INFORMATION

We disclose non-Personal Information with third parties at our discretion. We do not sell or rent any Personal Information (including the Personal Information of consumers under 16 years of age) with third parties and have not done so in the past twelve (12) months. In connection with our Services, we may disclose your Personal Information with certain third parties who we engage for business purposes to help us run our business and perform the Services, including under the following circumstances:    

  • Software and service providers we use to manage and process your information, for example, hosting providers, analytics providers and payment processors. 
  • Affiliates, subsidiaries and customers (for certain Services, this may include your health plan). 
  • Service or offering-related service providers, such as our vendors and instructors. 
  • You Sponsoring Organization, for administrative purposes and billing purposes. If applicable, your Sponsoring Organization may receive personal information related to your use of the Services for management of your incentive or rewards program.  
  • Human resources software and/or service providers we use to support Tivity’s management of employees, contractors, and consultants (for example, a company utilized to assist with recruiting and evaluating potential job applicants, or a company whose services we use to manage timekeeping, payroll, and employee benefits).  
  • Analytics service providers, including Google Analytics, a service provided by Google, Inc., to gather information about how you and other users engage with our Services. For more information about Google Analytics, please visit www.google.com/policies/privacy/partners.  
  • Marketing service providers we may use to communicate with you.  
  • Advertising service providers. 
  • Trusted partners that offer services that may be of interest to you. 
  • Other third parties with whom you expressly request us to disclose your Personal Information. 

In addition to performing our own analytics and providing content and advertisements on our Services and elsewhere online, we may work with third parties and other vendors who provide us with information and services relating to our advertising and analytics. These service providers may set and access their own tracking technologies on your device (including cookies and web beacons) and may otherwise collect or have access to information about you. Some of these parties may collect Personal Information over time when you visit the Services or other online websites and services. We may disclose Usage Information or other de-identified data about visitors with third-party advertising companies, analytics providers, and other vendors for analytics and advertising purposes. In some cases, we may customize messages to you based on information that we have about you. We do not, however, sell or use Personal Information about you for targeted advertising on third-party websites. 

Additionally, we will disclose your Personal Information to third parties where required by law, where it is necessary in connection with our Services or products, or where we have another legitimate interest in doing so. If we are subject to a merger or acquisition with/by another company, we may provide information to them in connection with the transaction.  

5. HOW WE SAFEGUARD YOUR INFORMATION

The security of your data is important to us but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security. Any transmission of Personal Information is at your own risk. 

6. HOW LONG WE STORE YOUR INFORMATION

We will retain your Personal Information for as long as is necessary for the legitimate business purposes set out in this Privacy Policy. We will retain and use your Personal Information to the extent necessary to comply with our legal, accounting, or reporting obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes and enforce our legal agreements and policies. Following termination or deactivation of your account on the Services, we may retain your Personal Information for a reasonable time for archival purposes. Additionally, we may continue to store your Personal Information contained in our standard back-ups.  

We also will retain Usage Information for internal analysis purposes. Usage Information is generally retained for a shorter period of time, except when Usage Information is used to strengthen the security or to improve the functionality of our Services or products or we are legally obligated to retain Usage Information for longer periods. 

7. YOUR RIGHTS AND CHOICES REGARDING YOUR INFORMATION

Marketing Preferences. You can opt out from receiving future marketing communications from us at any time by using the unsubscribe function in the email you receive from us or by contacting us as set forth in How to Contact Us above. Please allow sufficient time for your preferences to be processed. Even if you opt out of receiving marketing messages, we may still contact you for transactional purposes like confirming or following up on an order or service request. If you later opt back in to receive marketing communications from us, we will remove your information from our opt-out databases. 

Personalized Advertising.  You may opt out of how companies unaffiliated with us use tracking tools and collect your information while visiting our websites by visiting each of their privacy policies and following instructions there. Generally, you can opt out of the collection of data across unaffiliated sites over time for interest-based advertising and other purposes from companies participating in the Digital Advertising Alliance (DAA) Consumer Choice Page at www.aboutads.info/choices and from members of the Network Advertising Initiative (NAI) at www.networkadvertising.org/choices. You also may opt out of receiving interest-based ads from Amazon, Facebook and Google. You will continue to see ads on each platform, but they will not be personalized as a result of your actions on our website. Please visit the links below if you wish to opt out or update your preferences:  

Please note that we and other companies may still collect information when you are online, and opting out through these mechanisms does not opt you out of being served advertising. You will continue to be served generic ads while online.  

Geolocation. The precise geographic location of your device may be transmitted to our servers in real time any time that our mobile applications are running (even if you are not actively using an app or it is minimized on your device). You may stop allowing us to have access to your device’s location information by accessing the app’s location settings on your device and setting your device not to provide its location with us.  

Cookies. Cookies are small pieces of information (data files) that are downloaded onto your computer or mobile device when you visit the Services. These technologies are able to store a unique identifier for a device to allow an online service provider to recognize the device whenever the device is used to visit the site. We and our third-party partners may use cookies to recognize your web browser when you visit the Services. As noted above in “Information We Collect and How We Use Personal Information,” you can choose whether to accept cookies by changing the settings on your browser or device. However, if you choose to disable cookies, your experience with our Services may be impaired and some features may not work as they were intended.  

Additionally, Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked. You can enable or disable Do Not Track by visiting the preferences or settings page of your web browser. However, these features are not yet uniform, so we do not currently respond to such features or signals. Therefore, if you select or turn on a “do not track” feature in your web browser, we and our third-party providers may continue collecting information about your online activities as described in this Privacy Policy. 

You can choose to limit the data that third party services (e.g., social media platforms) disclose to us using the options provided to you by the applicable third party service (for example, the options provided by a third party social media platform when you connect your social media account with our Services).  You can also disconnect your use of our Services from the third-party service at any time using the options provided to you by the applicable third-party service.  Please note, however, that if you disconnect from the third-party service, that will not delete the data we may have previously collected while you were connected.  

Depending on where you live, you may have certain rights with respect to Personal Information that we have collected and used under certain circumstances. Please see State Specific Rights below for additional information about those rights and how to exercise them with respect to your Personal Information. Please click here if you live in the European Economic Area or United Kingdom. 

Data associated with your interactions and activities through the Services may be   deleted if you utilize a Tivity mobile application through Apple’s App Store and request deletion of your account through the mobile application. After authentication and confirmation of the deletion request, your data related to the Services will be deleted. You will be informed of how long it will take to delete the account and provided confirmation of when deletion has been completed.  

8. TRANSFER OF DATA; SPECIAL NOTICE TO NON-U.S. USERS

The Services are intended solely for individuals located within the United States, European Economic Area and United Kingdom. If you are located outside of the United States, and choose to provide information to us, please note that we transfer the data, including Personal Information, to the United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. We will take all the steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.  Click here for additional information about location specific terms and protections if you live in the European Economic Area or United Kingdom. 

If you are located in a country outside the United States and choose to use our Services, you thereby consent to the general use and disclosure of such information as provided in this Privacy Policy and to the transfer to and/or storage of that information within the United States.  

9. SENSITIVE PERSONAL INFORMATION

Unless you agree with this Privacy Policy, we ask that you not send us, and you not disclose, any sensitive personal information as this term is defined under applicable data protection and privacy laws (for example, social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, precise geolocation, criminal background or trade union membership) on or through the Services or otherwise to us. 

If you send or disclose any sensitive personal information to us (e.g., for employment-related purposes, or as described above), you consent to our processing and use of such sensitive personal data in accordance with this Privacy Policy. If you do not consent to our processing and use of such sensitive personal information, you must not submit such content to our Services. 

10. POLICY ON CHILDREN’S INFORMATION

Our Services are not created for or intended for use by anyone under the age of 16 (“Children” or “Child”), and the use of Burnalong+™ is limited to users 18 years of age and older. By using the Services, you represent that you are at least 16 years old (or 18 years old for Burnalong+).  If you do not meet this age requirement, then you must not access or use our Services. 

We do not knowingly collect personally identifiable information from anyone under the age of 16, and we do not target the Services to Children. If you are a parent or guardian and you are aware that your Child has provided us with Personal Information, please contact us though one of the methods listed under How to Contact Us, above. If we become aware that we have collected Personal Information from Children without verification of parental consent, we will take reasonable steps to remove that information from our servers. 

For more information about the Children’s Online Privacy Protection Act (“COPPA”), which applies to websites that direct their services to children under the age of thirteen (13), please visit the Federal Trade Commission’s website https://www.ftc.gov/tips-advice/business-center/guidance/complying-coppa-frequently-asked-questions 

11. LINKS TO OTHER SITES

Our Services may contain links to third-party websites, content, products, and services (“Linked Sites”). If you click on one of those links, you will be taken to websites we do not control. This Privacy Policy does not apply to the information practices of third parties that we do not own or control including but not limited to the Linked Sites. You understand that these Linked Sites are not under our control and are not subject to our Privacy Policy, and you should exercise caution when deciding to disclose any Personal Information through those Linked Sites. You should read the privacy policies of third-party websites carefully. We are not responsible for the content, privacy policies, actions or security of third-party websites including the Linked Sites, and you acknowledge that your use and access of these Linked Sites is solely at your own risk. 

12. CHANGES TO THIS POLICY

This Policy is current as of the Effective Date set forth above. We may change this Privacy Policy from time to time, so please be sure to check back periodically. We will post any changes to this Policy on our website and app. If we make any changes to this Policy that materially affect our practices with regard to the Personal Information we have previously collected from you, we will endeavor to provide you with notice in advance of such change by highlighting the change on our website and app. 

STATE SPECIFIC RIGHTS: CALIFORNIA, COLORADO, CONNECTICUT, UTAH AND VIRGINIA PRIVACY NOTICE 

Depending on where you live in the United States, you may have certain rights with respect to Personal Information that we have collected and used under certain circumstances. This Privacy Notice provides additional information to residents of the states listed below, whose Personal Information is processed by us, pursuant to the applicable state-specific privacy laws, as they may be amended, including:  

  • California – California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”) 
  • Colorado – Colorado Privacy Act (“CPA”) 
  • Connecticut – Connecticut Data Privacy Act (“CTDPA”) 
  • Utah – Utah Consumer Privacy Act (“UCPA”) 
  • Virginia – Virginia Consumer Data Protection Act (“VaCDPA”) 

 

  1. CATEGORIES OF PERSONAL INFORMATION SOLD, TRANSFERRED AND SHARED 

Please see our Privacy Policy for information about our information collection practices. We generally do not “sell” or make available Personal Information for cross-context behavioral advertising for purposes of any given state privacy regulation. As set forth in the Privacy Policy, we disclose Personal Information to service providers, contractors and third parties for business purposes, including without limitation, for purposes of marketing, and other services performed on our behalf, to protect against fraud and malicious activity, and for other business purposes described in the Privacy Policy.  During the preceding twelve (12) months, we have disclosed the categories of personal information for business purposes as set forth in “Disclosure of Information” section of the Privacy Policy.  In addition, your information may be accessible to third parties with whom you interact or direct us to provide your information through our Services. 

Please note that a “sale” of Personal Information does not include those instances when such information is part of a merger, acquisition, or other transaction involving all or part of our business. If we sell all or part of our business or make a sale or transfer of assets or are otherwise involved in a merger or other business transaction, we may transfer your Personal Information to a third party as part of that transaction. If such transaction materially affects the manner in which your Personal Information is processed, we will notify you of such change prior to its implementation. 

  1. YOUR CHOICES 

You may have certain rights with respect to Personal Information that we have collected and used under certain circumstances, including the below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.   

  • Information. You can request that we provide you the following information regarding our use of your Personal Information in the past 12 months: 
  • The categories of your Personal Information that we have collected 
  • The purposes for which we have collected or used such Personal Information 
  • The categories of sources for the Personal Information we have collected about you 
  • The categories of third parties with whom we have disclosed your Personal Information  
  • If we have disclosed your Personal Information for a business purpose, a list identifying the Personal Information categories that each category of recipient obtained 
  • If we have shared your Personal Information, a list identifying the Personal Information categories that were shared 
  • Access. You can request that we provide you a copy of your Personal Information that we have collected in the past 12 months. 
  • Correction. You can request that we correct any inaccuracies in your Personal Information.  
  • Deletion. You can request that we delete your Personal Information collected in the past 12 months when we no longer need such data in connection with our Services (subject to certain exceptions that may apply under applicable law). 
  • Opt Out of Sale or Sharing. Under applicable law , you may have the right to opt out of the sale or the disclosing of your Personal Information. For clarity, however, we do not “sell” Personal Information.   
  • Non-Discrimination.  As defined under applicable law, you have the right to exercise your privacy rights without facing discrimination of service or product offerings. 

 

  1. EXERCISING YOUR PRIVACY RIGHTS  

If you are a resident of a jurisdiction where one or more of these rights are granted to you under applicable law, and you wish to exercise any such rights listed above, please contact us by either:  

 

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Information. Please understand that we are required to verify your request and may require you to provide some information to enable us to carry out such verification. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.  

When you, or someone legally authorized to act on your behalf, make a consumer request related to your Personal Information, you can expect the following:  

  1. We will verify your identity. You will need to provide us with certain information so that we can verify that you are who you say you are. Which information may depend on the type and sensitivity of information subject to the request. 
  1. We will confirm our receipt of your request within 10 days. If you have not received a response within a few days after that, please let us know by contacting us at the webpage or phone number listed above.  
  1. We will respond to your request within the legally required amount of time. If necessary, we may need additional time to respond where allowed by law, but we will reply either way within the legally required period and, if we need an extension, we will explain why. 
  1. In certain cases, a request may be denied. For example, if we cannot verify your identity or if providing you information could create an unreasonable risk to someone’s security (for example, we do not want very sensitive information disclosed inappropriately). If we deny your request, we will explain why we denied it.  
  1. If you disagree with our decision, you may have the Right to Appeal our decision.  To do so, please submit a copy of your request and an explanation of why you are appealing our decision to [email protected] or please call 1-877-614-3111.  Your appeal will be reviewed and we will respond to your appeal in writing within the legally required amount of time. If necessary, we may need additional time to respond where allowed by law, but we will reply either way within the legally required period and, if we need an extension, we will explain why.  

Making a verifiable consumer request does not require you to create an account with us. We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request. 

USERS IN THE EUROPEAN ECONOMIC AREA and UNITED KINGDOM: YOUR PRIVACY RIGHTS 

This section outlines additional information for users in the European Economic Area and United Kingdom, and is intended to supplement, not replace, our Privacy Policy.  Please read the entire Privacy Policy, including this section, for a complete description of how we collect and process Personal Data.  Personal Data means any information relating to an identified or identifiable natural person, including Personal Information defined above).   

If you create a Burnalong account and reside in the EEA or United Kingdom, the data protections specified by the EEA’s General Data Protection Regulation or UK corollary, the Data Protection Act (collectively “GDPR”) may be applicable to you. In consequence, the following information discloses our legal basis for collecting and using your Personal Data and the rights guaranteed to you as an EEA and UK resident with respect to your Personal Data. As applicable, links to relevant sections of this Privacy Policy that give effect to GDPR requirements are included. Be advised: The GDPR represents a minimum set of data protection standards that the individual nations within the EEA are required to implement. The actual laws of the nation of the EEA where you reside may confer additional rights to you, which may not be included below. 

  1. A. LEGAL BASIS FOR PROCESSING

Our legal basis for collecting and processing your Personal Data depends on the personal information concerned and the specific context in which we collect it. We always seek your explicit consent before collecting and processing your Personal Data for the Services. In some cases, we also may have an independent legal basis for collecting and processing some or all of your Personal Data. For example, we collect and process Personal Data on behalf of your Sponsoring Organization as a data processor, and we collect and process Personal Data from third party sources that you consent to share with Burnalong as a data controller. 

We collect and process Personal Data for the purposes listed and described in more detail in our Privacy Policy. These purposes are subject to overriding individual rights guaranteed under the GDPR, listed below. If we are unable to deliver Services and simultaneously help you exercise your rights to the fullest extent, we will let you know the reasons why. At that point, you can decide either to close your Burnalong account, or withdraw your request to exercise those rights. 

In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person. An example is if we need to verify your identity or authority to access Personal Data to fulfill a data request. 

If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not (as well as of the possible consequences if you do not provide your personal information). 

If we collect and use your personal information in reliance on our legitimate interests (or those of any third party), this interest will normally be to operate our Services, to communicate with you about our Services and for other legitimate commercial interests, like those listed in the Privacy Policy. We may have other legitimate interests and if appropriate we will make clear to you at the relevant time what those legitimate interests are. 

If you have questions about or need further information concerning the legal basis on which we collect and process your personal information, please contact us by email to [email protected] subject line: GDPR Privacy.   

  1. INDIVIDUAL RIGHTS OF EEA and UK USERS
  1. i. Access

You may request access to your Personal Data through the Burnalong application.  

  1. Correction (Rectification) 

You can correct inaccurate/incomplete Personal Data that originates in our Services by editing information in your Account Profile. Personal Data that originates from other sources must be corrected at the source. 

iii. Object to, Limit, or Restrict Use of Data 

You can ask us to stop using all or some of your Personal Data or to limit some or all of our uses of it by changing your data sharing permissions in the application. If you wish to limit or restrict use of your Personal Data further, we may not be able to deliver Services. If that is the case, your remaining option may be to Close your Burnalong account by contacting [email protected]. 

  1. Deletion (Erasure)

In certain circumstances, you can request a right “to be forgotten” (this is a right to have your information deleted or our use of your data restricted). We will honor these requests unless we have to retain this information to comply with a legal obligation or unless we have an overriding interest to retain it. Please read Data Retention and Account Changes. 

  1. Portability

In certain circumstances, you can exercise the right to data portability (this is a right to obtain a transferable version of your Personal Data to transfer to another provider). 

  1. EXERCISING YOUR PRIVACY RIGHTS
  1. How to Contact Us   

 If you have a question about this Privacy Policy or wish to communicate with our designated privacy official, please do not hesitate to contact us by email at [email protected]. 

You may also submit data subject requests by:   

Note that our web privacy choices form is the best way to make an individual rights request with us.   

If you have questions about information your Sponsoring Organization shares with us, please contact your Sponsoring Organization.   

  1. How to Contact the Appropriate Authority 

If you are a resident in the EEA or UK and you are dissatisfied with how we have managed a complaint you have submitted to us, you can always contact the supervisory authority of your country of residence. You can find the list and contact details of national supervisory authorities here.