PRIVACY POLICY

WUNDABAR PILATES

Effective Date: January 1, 2020

WundaBar Pilates and its affiliates and partners (including but not limited to operators of WundaBar Pilates Franchise) (collectively “we” or “us” or “our” as appropriate) respect your privacy. This Privacy Policy outlines the information we collect, and how we use and share such information. We encourage you to contact us with any questions. By using our Websites, you accept the practices set forth in this Privacy Policy.

When does this Privacy Policy apply?

This Privacy Policy applies to information we collect through electronic and digital means, including through any and all of our websites, including www.wundabar.com and the subdomains and mobile versions thereof, and any applications, platforms or services accessible on the websites and the websites of our service providers; such as the scheduling sites we use to schedule your workouts (collectively, our “Websites”). Our Websites may contain links to third-party sites that are not owned or controlled by us. You should be aware when you leave our Websites and read the privacy statements of those sites as those policies will apply to you and your information collected there.

What information do we collect?

We collect information you provide to us through various means while using our Websites. The information we may collect includes personally identifiable information, such as your name, home address, billing address, other payment information, membership information, date of birth, email address, telephone number, and other information. We also may collect non-personally identifiable information you provide, such as your gender and age. We collect information from you when you sign up with us and/or use any of our service providers’ sites to, for example, sign up for a class or otherwise give us information. We also collect information when you fill out a franchise information form or when you submit a success story.

We may use electronic tags. When you visit or use our Websites, we may send one or more “cookies” or other tags that are sent to your computer to enable us to recognize your browser on future visits and/or monitor the use of our Websites.

We may also collect log information as you use our Websites, including your IP (Internet Protocol) address, browser type, computer type, type of mobile device (as applicable), the service provider for your mobile device, your navigation on our Websites, the time and date of your use of the Websites, and other similarly anonymous information. We do not link any such information to your personally identifiable information.

What do we use your information for?

We use your information to provide products, services and information and improve our services. We may use your information to provide communications to you concerning us and/or our services, and/or for business purposes such as data analysis, audits, fraud monitoring and prevention, to develop new products and services, and to enhance, improve, and/or modify our Websites. Additionally, if you make a Franchise Inquiry, we use your information to better understand your questions/inquiry about becoming a WundaBar Franchisee. If you provide a success story, we will contact you and possibly use your submitted information on our Website as a success story. We may use non-personally identifiable information for any purpose, except where we are required to do otherwise by applicable law. To the extent we do combine any non-personally identifiable information with personally identifiable information, we will treat the combined information as personally identifiable information so long as it remains combined.

We may disclose also your personal information to appropriate third parties if we are required to do so by law, including (i) to comply with legal process, (ii) to protect our rights, (iii) to investigate breaches of the Terms and Conditions (as defined below), or (iv) in the event of an emergency.

How do we protect this information?

Any information you submit is used for only the purpose you identified. We use a variety of industry standard physical, technical, and administrative security measures to ensure the safety of your information. If you have any reason to believe your interaction with us is no longer secure (for example, if you feel the security of any account you might have with us or our service providers has been compromised), please immediately notify us of the problem.

Do we disclose any information to outside parties?

Other than sharing the information between ourselves (i.e., with and from WundaBar franchisees and affiliates), we may share your information with outside third parties only to the extent you have given us permission to do so. When you submit a success story, for example, you are agreeing to allow your story to be posted on our Websites. Similarly, if you post comments, information, or other materials on any messages boards, blogs, social media pages, or other services offered by us or third parties, please note that any such information will become public information and may be available to users of our Websites, the websites on which you post, and/or the general public. We may also share information you post to our website to your friends associated with your social media accounts, your social media service, or other members in connection with your social sharing. We urge you to be careful about the information you share in a public manner.

Your Nevada Privacy Rights:

Nevada law allows consumers to direct certain businesses not to sell their personally identifiable information to third parties to license or sell that information to additional third parties. We do not sell your information to such data resellers and have no plans to do so. However, if you are a Nevada resident, you may submit such opt-out requests to hello@wundabar.com. To be effective, your request must include your full name, address, phone number, and email address. WundaBar Pilates will endeavor to respond to your verified request within 60 days of receiving the request. However, due to unforeseen circumstances, WundaBar Pilates may need to extend this period by up to 30 days. If an extension is reasonably necessary, WundaBar Pilates will notify you of this during the initial 60-day period.

Your California Privacy Rights:

This Policy describes how information obtained from California consumers, including visitors to the WundaBar Pilates (“WundaBar Pilates”, “we”, “us” or “our”) website found at wundabar.com (“Website”), our mobile application (“Application” or “App” or “Apps”), and our company-owned and franchised-locations, where applicable is collected, used, and disclosed.  This Policy also explains how you can make requests to know about your personal information and delete your personal information.  Please note that this Policy applies to information collected by us and/or independently owned and operated franchised locations, where applicable.

Terms included in this Policy, including but not limited to, Personal Information and Service Provider, carry the same meaning in this Policy as they do in the California Consumer Privacy Act of 2018, California Civil Code sections 1798.100 et seq. (“CCPA”).  Additionally, and to protect your privacy, we do not sell, share, or rent your Personal Information in any way, as outlined in Section 7 below.   If our business practices should change in the future, we will inform you of this change before selling your Personal Information and provide you with instructions on how you can opt-in.

California’s Shine the Light Law

Subject to certain limits under California Civil Code section 1798.83, California residents may ask us to provide them with (i) a list of certain categories of personal data that we have disclosed to third parties for their direct marketing purposes during the immediately preceding calendar year, and (ii) the identity of those third parties. California residents may make one request per calendar year.

Except with respect to the limited exceptions described in the Privacy Policy, we do not share your personal information with any third parties for direct marketing purposes.  To make this request, you may contact us at the mail or email address listed in the “Contact Us for More Information” section below. In your request, please state that you are a California resident and provide a current California address for our response. Please allow up to thirty (30) days for a response. We reserve our right not to respond to such requests submitted to addresses other than those specified in the “Contact Us for More Information” section below.

CALIFORNIA’S CONSUMER PRIVACY ACT

1. California Residents’ Rights Under the California Consumer Privacy Act

If you are a California resident, you have certain rights regarding information that is treated as Personal Information under the CCPA.

    The right to know what categories of Personal Information are being collected or disclosed and the categories of sources of that Personal Information

You have the right to know what categories of Personal Information we collect, sell, or disclose about you, as well as the categories of third parties who received your Personal Information and the categories of sources of that Personal Information.  These categories are described in the “Categories of California Consumers’ Personal Information Collected or Disclosed” section below.  We are also required to provide to you, before or at the point of collection, with a general notice about the categories of Personal Information collected by us and how we intend to use the collected Personal Information.

    The right to access collected Personal Information

You have the right to request that we provide a copy of your Personal Information that we collected or disclosed in the preceding twelve (12) months. Only you, or someone you legally authorize to act on your behalf, may make a request related to your Personal Information. You may submit a maximum of two requests in a 12-month period.

You must provide sufficient information to enable us to reasonably verify your identity or that of your authorized agent. We will only use the Personal Information provided in your request to verify your identity or that of your authorized agent.  Please note that we cannot provide any Personal Information in response to a request if we cannot verify your or your authorized agent’s identity, or your authorized agent’s authority to make the request on your behalf, and/or if we cannot confirm that the collected Personal Information relates to you.

You are not required to create an account with us before submitting a verifiable request..  After receiving and verifying your request, we will provide the following information (depending on your request):

    The categories of Personal Information collected about you in the preceding twelve (12) months.

    The sources of that Personal Information by category.

    The business or commercial purpose(s) for collecting that Personal Information.

    The categories of third parties with whom we shared that Personal Information, if applicable.

    The specific pieces of Personal Information collected about you.

If we disclosed your Personal Information for a business purpose, we will provide:

    The categories of Personal Information disclosed for a business purpose in the previous twelve (12) months and the categories of third parties, if applicable, to whom the Personal Information was disclosed.

See the “Methods for Submitting CCPA Requests to Us” section below for information on how you can exercise your right to access collected Personal Information. For more information, see also the “Response Timing and Format” section below.

    The right to request deletion of Personal Information

With certain exceptions, you have the right to request that we and our service providers (where applicable) delete Personal Information we or our service providers collected or maintained. Once we receive and verify your request, we will delete and instruct any applicable service providers to delete your Personal Information from our records, unless an exception applies.

We and our service providers may deny a verified deletion request if we must maintain your Personal Information to:

    Complete the transaction or provide a good or service requested by you for which we collected the Personal Information, or otherwise perform a contract between us.

    Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for that activity.

    Debug to identify and repair errors that impair existing intended functionality of our systems.

    Exercise a legal right provided for by law, including exercising or ensuring free speech rights.

    Comply with the California Electronic Communications Privacy Act (California Penal Code sections 1546 to 1546.4).

    Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest if:

        the research adheres to all other applicable ethics and privacy laws;

        deleting the Personal Information is likely to make the research impossible or seriously impair it; and

        you provided informed consent during the initial data collection.

    Enable our internal use in a manner that you would reasonably expect based on your relationship with us.

    Comply with our legal obligations.

    Otherwise use your Personal Information internally in a lawful manner that is compatible with the context in which you provided the information.

See the “Methods for Submitting CCPA Requests to Us” section below for information on how you can exercise your right to delete collected Personal Information.

    The right to be free from discrimination

You have the right to equal service, and we will not discriminate against you if you exercise your rights under the CCPA. However, under certain circumstances, we may offer you special discounts or other incentives for the right to continue to collect or use your Personal Information.  In that event, we will notify you of the relevant program’s material terms and obtain your voluntary opt-in consent to the program.

2. Categories of California Consumers’ Personal Information Collected or Disclosed

We collect a variety of categories of Personal Information about California consumers, their household, and/or their devices from both online and offline (such as hard-copy forms) sources.  We will not collect additional categories of Personal Information or use the Personal Information we collect for materially different, unrelated, or incompatible purposes without providing advance notice.

In particular, the following types of Personal Information we may have collected and reason for collection in the last twelve (12) months includes but is not limited to:

    Your name, home address, billing address, other payment information, membership information, date of birth, age, gender, email address, telephone number, and other information, as applicable;

    We collect information from you when you sign up with us and/or use any of our service providers’ sites to, for example, sign up for a class or otherwise give us information. We also collect information when you fill out a franchise information form or when you submit a success story;

    Your transaction history relating to the use of  WundaBar, purchase of certain products or other information you wish to share with us and integrate with the Site;

    Computer data or files, often called “cookies,” which may be sent by your web browser and stored on an individual computer to allow our server to “recognize” you through the navigation of the Site and for us to credit your account for various online transactions;

    Computer data files, often called “web beacons” that are collected from emails or links on third-party sites that allow our server to evaluate the popularity of those links or the information contained in emails or on third-party sites; and

    Log information as you use our Websites, including your IP (Internet Protocol) address, browser type, computer type, type of mobile device (as applicable), the service provider for your mobile device, your navigation on our Websites, the time and date of your use of the Websites, and other similar information.

The information we may collect through your use of the Apps may depend on the version of the Apps or the country you are in, but this information may include, but is not limited to:

    Information to register for your App account, such as first name, last name, email address and other membership information related to WundaBar Pilates, as well as a username and password to access the App;

    Your activity history regarding your use of the Apps, such your visits to studios, participation in training activities, classes or utilization of other Wundabar Pilates products or services;

    Membership-related information, such as your home address, Wundabar Pilates studio location, membership number and or WundaBar OnDemand purchase history;

    Fitness-related information provided in the membership process, where applicable;

    Certain location or geolocation information pulled directly from your mobile device, your wireless carrier or certain third-party providers, to allow tracking of your activity. This collection and tracking may occur even when the Apps or other related applications are not actively open and running;

    Information regarding personal training sessions and communication with staff from WundaBar Pilates;

    Records of copies of your correspondence, if you contact us;

    Information provided by you when you participate in a survey or communication to you regarding your use of the Apps, or utilizing WundaBar Pilates services;

    Various account information related to your membership to allow you to update credit card, bank account, other payment information, or any other information regarding your profile, where applicable;

    If we offer alternative sign-ins, we may collect certain sign on information you have provided to third parties, such as Facebook or Twitter, when you sign on to use our Apps through these third parties; and

    Computer data or files, often called “cookies,” which may be sent by your mobile device to allow our server to “recognize” you through the navigation of the Apps and for us to link your activity on the Apps with your membership.

We have shared the Personal Information listed above with the following partners, where applicable:

    Service providers, business partners, cloud platform providers

3. Methods for Submitting CCPA Requests to Us

You have the right to submit a verifiable request to us using the following methods:

    Written Request. You may submit a data privacy request by sending your request to WundaBar Pilates 12416 Ventura Blvd, Studio City CA 91604.

    Toll-Free Telephone Call. You may submit requests by calling our toll-free Data Privacy Request number at 888-693-5556. A member of our team will process your request as applicable

    Studio locations. If you are at any of our studio locations in California, you will be asked to submit the data privacy request using either of the two options referenced above

4. Verification Process

Once we receive a request to know or to delete, we must verify your identity before we can respond.  You may be required to provide the following information for verification purposes and efficiency when applicable:

    Your first and last name

    Your e-mail address

    Your telephone number

    Your studio location, if applicable

If you submit either a request to know specific pieces of Personal Information collected, or a request to delete sensitive, irreplaceable, or otherwise valuable Personal Information, you (or your authorized agent, if applicable) will be required to provide a signed declaration affirming your identity (or your authorized agent’s identity, if applicable).

5. Authorized Agents

An authorized agent is either a natural person or a business entity registered with the California Secretary of State that a consumer has authorized to act on his or her behalf.  You may use an authorized agent to submit a request to know or request to delete. Your agent will need to provide: either (1) a power of attorney; or (2) your written permission to allow the authorized agent to submit the request on your behalf and verification of your identity.

6. Response Timing and Format

    Acknowledgement of receipt of request

We will confirm receipt of a request from you within ten (10) days. This confirmation will provide information about how we will process the request, including a description of our verification process and an approximation of when we will send you a substantive response.

    Substantive response

We will respond to a verifiable request from you within forty-five (45) days.  If we cannot respond in that time, we will notify you in writing that we need an additional forty-five (45) days and explain the reason for the needed additional time.  If you have an account with us, we will respond to that account. If you do not have an account with us, we will deliver the written response by mail or e-mail, at your option.

Any disclosures we provide will cover only the 12-month period preceding our receipt of your verifiable request. If we cannot comply with your request, we will explain why. If you have requested to know specific Personal Information we collected, we will provide that information to you.

We do not charge a fee to process or respond to a verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why and provide you with a cost estimate before completing the request.

7. We Do Not Sell Your Personal Information

To protect your privacy, we do not sell, share, or rent your Personal Information as such terms are defined under the CCPA.  In the event that our business practices should change in the future, we will inform you of this change before selling your Personal Information and provide instructions on how you can opt-in.     

8. Metrics Regarding CCPA Requests and Responses During the Previous Calendar Year

At the end of each calendar year, starting in 2020, we will report as applicable regarding the number of requests to know or requests to delete that we received, complied with in whole or in part, or denied, and the median length of our response time.

9. Children Under the Age of 16

Our Website is not intended for children under 16 years of age. No one under age 16 may provide any Personal Information on the Website. We do not knowingly collect personal information from children under 16. If you are under 16, do not use this Website or provide any information on this Website.  If we learn we have collected or received Personal Information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us at executive@wundabar.com. This section supplements the language in the Privacy Policy under “Children’s Online Privacy Protection Act Compliance”.

10. Contact Us for More Information

California consumers who have questions or concerns about our privacy policies and practices may contact a trained representative through one of the following methods:

    818.878.8662    

    Email:  executive@wundabar.com

    Mail:

    WundaBar Pilates

    Attention: Data Protection Officer

    12416 Ventura Blvd

    Studio City, CA 91604 U.S.A.

When contacting us, please include in the communication or have available the information listed under the “Verification Process” section above. If using an authorized agent, please include in the communication or have available proof of authorization.

Residents of the State of California, under the California Civil Code, have the right to request from companies conducting business in California, a list of all third parties to which the company has disclosed personal information during the preceding year for direct marketing purposes. Except with respect to the limited exceptions described above, we do not share your personal information with any third parties for direct marketing purposes.

If you are a California resident and request information about how to exercise your third party disclosure choices, you must send a request to us with a preference on how our response to your request should be sent (email or postal mail).

California Do Not Track Notice Disclosures:

We do not track our users and visitors over time and across third party websites to provide targeted advertising. Consequently, we do not respond to Do Not Track (DNT) signals. Other third party websites may keep track of your browsing activities when they provide you with content, which enables them to customize what they present to you on their websites.

Children’s Online Privacy Protection Act Compliance:

We do not intentionally collect personally identifiable information about children under the age of 13 and assume all user accounts are opened by adults. If you are under the age of 18 (but at least 13 years of age) you may use this Website only under the supervision of a parent or legal guardian who agrees to be bound by Terms and Conditions posted on this Website (“Terms and Conditions”). Children under the age of 13 may not use this Website, and parents or legal guardians may not agree to the Terms and Conditions on their behalf. If you do not agree to (or cannot comply with) any of the Terms and Conditions, do not use this Website.

Changes to our Privacy Policy:

We reserve the right to modify our Privacy Policy at any time, so please review it frequently. If we do decide to change our Privacy Policy, we will post a notice that the Privacy Policy has changed on our Websites where appropriate, and/or notify you that the policy has changed through other means such as email. If you receive emails from us you do not wish to receive, you will be able to opt-out of such communications by using the unsubscribe feature contained in the emails. Your use of our Websites means you accept such changes.

Your consent:

By using any of our Websites, you consent to our Privacy Policy. The terms of this Privacy Policy apply to all information you share and/or have shared with us. If you would like to opt-out of the sharing of your information as described in this Privacy Policy, please contact us to do so. You may also opt-out or unsubscribe from communications we send to you. We will honor such requests as soon as possible after we receive them. However, please provide time for us to process such requests.