Last Updated: September 8th, 2020
Welcome to PostureHealth, a website and desktop application (collectively, the “Site”) operated by PostureHealth, Inc. (the “Company”).
The Site provides the Service as explained in our Terms & Conditions.
“Company” means PostureHealth, Inc. 149 New Montgomery Street, San Francisco, CA 94105, USA.
“GDPR” means that General Data Protection Regulation Act. (This is a law that applies in the European Economic Area (EEA).)
“Data Controller” means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal information are, or are to be, processed. The Company is the Data Controller for the personal data you submit via the Site.
“Data Processor” means any natural or legal person who processes the data on behalf of the Data Controller.
Data Subject is any living individual who is using our Site.
Principles for Processing Personal Data
Our principles for processing personal data subject to the GDPR are:
What information do we collect?
When you register to use the Service via the Site you'll be asked to provide certain information about you, such as your name, phone number, and email.
This app includes the functionality of video recording a user‘s exercise sessions. This feature will only be enabled after getting explicit consent from the user. This feature doesn’t store or record any video of the user.
This app includes the functionality of video recording a user‘s exercise sessions. This feature will only be enabled after getting explicit consent from the user immediately before an exercise session by means of a dedicated screen. You can either agree to record your exercise session or record all sessions for 24 hours. If you choose to record your exercise session, the video recording will automatically end with the exercise session and can be stopped at any time by cancelling the exercise session. If you choose to record for 24 hours, any exercise session you begin within the 24 hours will be automatically recorded. If you decide to allow the recording, please ensure that no other persons are visible in the camera frame or those persons also consent to this agreement.
The video recordings will be processed to improve the functionality of the app. In particular, the following processing steps will occur:
If you sign up via a social network like Facebook, your agreement (and our access to your information) takes place when you instruct, accept, or allow Facebook to register you for the Site or otherwise connect you to the Site. We will collect such information as you allow based on your social media settings and the policies of the social media site. We may also collect information to verify your social media credentials.
Our third-party billing service provider will also collect information such as your full name, credit card number, and billing address.
We and our third-party service providers may collect certain information about your use of our Site. For example, we may collect and/or use:
Where do we store your information?
Your information may be stored in our own servers or in servers owned by third-party cloud storage providers.
How do we use your information?
Information we collect from you might be used:
Legal Basis for Collecting and Processing Personal Data
Our legal basis for collecting and using the personal data described in this Policy depends on the personal data we collect and the specific context in which we collect the information:
Please be aware that if you do not provide personal data we may be unable to provide some Services to you.
Cookies are small files that include an anonymous unique identifier. Cookies let us recognize your browser and remember certain information about you in order to personalize your experience of our Site.
We may use both persistent and session cookies. Persistent cookies remain on your computer after you close your session and until you delete them; session cookies expire when you close your browser.
A tracking pixel is a tiny pixel-sized image that allows us to track your Site visits, advertising impressions, and other types of Internet activity. It's also sometimes called a web bug, beacon, or page tag.
Do We Use Google AdWords or other remarketing methods?
We may use the Google AdWords remarketing service to advertise on third party websites (including Google) to previous visitors to our Site. It could mean that we advertise to previous visitors who haven’t completed a task on our site, for example using the contact form to make an enquiry. This could be in the form of an advertisement on the Google search results page, or a site in the Google Display Network.
You can set preferences for how Google advertises to you using the Google Ad Preferences page.
Do We use Google Analytics?
For more information on Google Analytics or to opt-out of having your information shared through Google Analytics, visit: http://www.google.com/intl/en/analytics/privacyoverview.html.
We use this information to make our Site easier to find on the Internet and to improve our Site by learning which pages and features are interesting to our visitors. We treat this information as non-personal information and do not attempt to connect it to personally identifiable information, except as otherwise required by law.
Do we transfer your data to other countries?
We may transfer to, and store the data we collect about you in, countries other than the country in which the data was originally collected, including the United States, Canada or other destinations outside the European Economic Area (“EEA”). Those countries may not have the same data protection laws as the country in which you provided the data. When we transfer your data to other countries, we will protect the data as described in this Policy and comply with applicable legal requirements providing adequate protection for the transfer of data to countries outside the EEA.
If you are located in the EEA, we will only transfer your personal data if:
You may request more information about the safeguards that we have put in place in respect of transfers of personal data by contacting us.
How Do We Respond to "Do Not Track" Signals?
We may track your browsing behavior to better tailor suggestions and information for you.
Some third-party sites also keep track of your browsing activities when they serve you content, which enables them to tailor what they present to you.
You can opt out of certain tracking by adjusting the settings on your browser. However, many websites (including the Site) may not respond to such signals.
There are also browser extensions that may block tracking. Again, they may not be effective in all cases.
How long do we store your information?
We will retain your personal information only for as long as is necessary for the purposes set out in this Policy.
We will retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.
We intend to store some of your information and User Content indefinitely.
What about links to other websites?
We may provide links to or compatibility with other websites. However, we’re not responsible for the privacy practices employed by those websites or the information or content they contain, or for any interactions with such websites or their users.
How do we protect your information?
We use Site-appropriate physical, electronic, and other procedures to safeguard and secure the information we collect. However, please be aware that the Internet is an inherently unsafe environment, and that hackers are constantly working to defeat security measures.
Thus, we cannot guarantee that your information will not be accessed, disclosed, altered or destroyed, and you accept this risk.
How can you protect your information?
We urge you to take steps to keep your personal information safe by not sharing it with others or posting it online.
Do we disclose any information to outside parties?
We do not sell, trade, or otherwise transfer to outside parties your Personally Identifiable Information (PII) for commercial or marketing purposes.
We may share your PII with third-party processors, which can include:
We will, if required by a valid court order, provide your personal information in a civil or criminal proceeding.
We will not share any PII that we have collected from or regarding you except as described below.
Information Disclosed in Connection with Business Transactions. If we are acquired by a third party as a result of a transaction such as a merger, acquisition or asset sale or if our assets are acquired by a third party in the event we go out of business or enter bankruptcy, some or all of our assets, including your PII, may be disclosed or transferred to a third party acquirer in connection with the transaction.
Information Disclosed for Our Protection and the Protection of Others. We cooperate with government and law enforcement officials or private parties to enforce and comply with the law. We may disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate: (i) to respond to claims, legal process (including subpoenas); (ii) to protect our property, rights and safety and the property, rights and safety of a third party or the public in general; and (iii) to stop any activity that we consider illegal, unethical or legally actionable activity.
The Company works with certain third-parties to provide specific functionality within the Site.
By using the Site, you also authorize the engagement of these third parties as sub-processors of your data.
If you object to the sub-processors’ handling of your data on the terms indicated at the links, please terminate your use of the Site.
Cloud Service Provider
Amazon Web Services, Inc.
Cloud Service Provider
You may contact these sub-processors directly to have any information they store about you erased.
Not Intended for Children
Our Site is not intended for children under the age of 18 We do not knowingly or specifically collect information from or about children under the age of 18.
Notice for Minors
If you are under the age of 18, and If our Site publicly displays your content, at any time you can delete or remove your content using the deletion or removal method within our Site. If you have questions about how to remove your content, or you need assistance, you can contact us here. Although we offer deletion capability, you should be aware that your removal of your content may not ensure complete or comprehensive remove the content or information posted through the Site, especially if it has been shared by others. Also, there may be circumstances in which the law does not require or allow removal even if requested.
Data Protection Rights
If you are a resident of the European Economic Area (EEA), you have certain data protection rights. If you wish to be informed what personal data we hold about you and if you want it to be removed from our systems, please contact us.
In certain circumstances, you have the following data protection rights:
If you are resident in the European Economic Area and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.
If you wish to withdraw your consent to process your personal data, please contact us. If you withdraw your consent, this will not make processing which we undertook before you withdrew your consent unlawful.