Privacy Policy
IMPORTANT PRIVACY INFORMATION
In order to provide the service, we will ask you to enter your date of birth, gender, current weight and height, target weight, fitness level, problem areas, workouts, and food preferences, as well as answer certain lifestyle-related questions. We also automatically collect from your device language settings, IP address, time zone, type and model of a device, device settings, operating system, Internet service provider, mobile carrier, hardware ID, Facebook ID, and other unique identifiers (such as IDFA and AAID). We need this data to provide our services, analyze how our customers use the service, to serve ads.
For improving our service and serving ads, we use third party solutions. As a result, we may process data using solutions developed by Amplitude, Facebook, Google, Twitter, Pinterest, Verizon Media. As a result, some of the data is stored and processed on servers of such third parties. This enables us to (1) analyze different interactions (how often users make subscriptions, the average weight and height of our users, how many users chose a particular area for improvement); (2) serve ads (and are able to show them only to a particular group of users, for example, to users who have already made a purchase). Consequently, we, in particular, better understand in what of our features and content you see the most value and are able to focus on them to enhance your experience and increase the quality of our products.
Please read our Privacy Policy below to know more about what we do with data (Section 2), what data privacy rights are available to you (Section 5) and who will be the data controller (Section 12). If any questions will remain unanswered, please contact us at hello@mypilatesplan.com.
PRIVACY POLICY
This Privacy Policy explains what personal data is collected when you use MyPilatesPlan websites and mobile applications (the "Website", “App”, together the "Service"), how such personal data will be used, shared, and how you can control it.
BY USING THE SERVICE, YOU PROMISE US THAT (I) YOU HAVE READ, UNDERSTAND AND AGREE TO THIS PRIVACY POLICY, AND (II) YOU ARE OVER 16 YEARS OF AGE (OR HAVE HAD YOUR PARENT OR GUARDIAN READ AND AGREE TO THIS PRIVACY POLICY FOR YOU). If you do not agree, or are unable to make this promise, you must not use the Service.
Any translation from English version is provided for your convenience only. In the event of any difference in meaning or interpretation between the English language version of this Privacy Policy available at mypilatesplan.com/privacy-policy, and any translation, the English language version will prevail. The original English text shall be the sole legally binding version
“GDPR” means the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
“EU/EEA” includes all current member states to the European Union and the European Economic Area.
“Process”, in respect of personal data, includes to collect, store and disclose to others.
“CCPA” means the California Consumer Privacy Act of 2018.
1. CATEGORIES OF PERSONAL DATA WE COLLECT
We collect data you give us voluntarily (for example, by answering questions about your partner). In addition, we collect data automatically (for example, your IP address). We also may receive data about you from third parties.
1.1. Data you give us
You provide us information about yourself in the process of ordering a personalized workout program. For example: email, your goals, mood, name, and preferences.
1.2. Data we collect automatically
1.2.1. Data about how you found us
We collect data about your referring app or URL (that is, the app or place on the Web where you were when you tapped on our ad).
1.2.2. Device and Location data.
We collect data from your device. Examples of such data include: language settings, IP address, time zone, type and model of device, device settings, operating system, Internet service provider, mobile carrier, hardware ID, and Facebook ID.
1.2.3. Usage data
We record how you interact with our Service. For example, we may log your taps/clicks on certain areas of the interface, the features and content you interact with, how often and for how long you use the Service, and your workout programs orders.
1.2.4. Advertising IDs
We collect your Apple Identifier for Advertising (IDFA) or Google Advertising ID (AAID) (depending on the operating system of your device) when you access our Website from a mobile device. You can typically reset these numbers through the settings of your device's operating system (but we do not control this).
1.2.5. Transaction data
When you make payments through the Service, you need to provide financial account data, such as your credit card number, to our third-party service providers. We do not collect or store full credit card number data, though we may receive credit card-related data, data about the transaction, including: date, time and amount of the transaction, the type of payment method used.
1.2.6. Cookies
A cookie is a small text file that is stored on a user's computer for record-keeping purposes. Cookies can be either session cookies or persistent cookies. A session cookie expires when you close your browser and is used to make it easier for you to navigate our Service. A persistent cookie remains on your hard drive for an extended period of time. We also use tracking pixels that set cookies to assist with delivering online advertising.
Cookies are used, in particular, to automatically recognize you the next time you visit our Website. As a result, the information, which you have earlier entered in certain fields on the Website may automatically appear the next time when you use our Service. Cookie data will be stored on your device and most of the times only for a limited time period. Learn more in our Cookie policy
2. FOR WHAT PURPOSES WE PROCESS PERSONAL DATA
We process your personal data:
2.1. To provide our Service
This includes enabling you to use the Service in a seamless manner and preventing or addressing Service errors or technical issues. For this purpose, we, in particular, will send you your personalized workout program to your email, which you will indicate during the purchase.
To host personal data and enable our Service to operate and be distributed we use Amazon Web Services (AWS), which is a hosting and backend service provided by Amazon.
2.2. To customize your experience
We process your personal data, such as your goals, to adjust the content of the Service and make offers tailored to your personal preferences.
2.3. To provide you with customer support
We process your personal data to respond to your requests for technical support, Service information or to any other communication you initiate. For this purpose, we may send you, for example, notifications or emails about the performance of our Service, security, payment transactions, notices regarding our Terms of Service or this Privacy Policy.
2.4. To communicate with you regarding your use of our Service
We communicate with you, for example, by emails. These may include, for example, emails with information about the Service.
The services that we use for these purposes may collect data concerning the date and time when the message was viewed by the users, as well as when they interacted with it, such as by clicking on links included in the message.
2.5. To research and analyze your use of the Service
This helps us to better understand our business, analyze our operations, maintain, improve, innovate, plan, design, and develop the Service and our new products. We also use such data for statistical analysis purposes, to test and improve our offers. This enables us to better understand what features and sections of the Service our users like more, what categories of users use our Service. As a consequence, we often decide how to improve the Service based on the results obtained from this processing.
What third-party services we use for this purpose?
We use Facebook Analytics, which is a service provided by Facebook that allows us to use different analytical tools. On Facebook Analytics we get, in particular, aggregated demographics and insights on how many people access the Service and users' interactions within the Service. Learn more about Facebook’s approach from its Privacy Policy.
To analyse how visitors use our Website and to measure effectiveness of some ads we use Google Analytics, a web analysis program of Google. In order to provide us with analytics, Google Analytics places cookies on your device. On Google Analytics we get, in particular, aggregated information on the data you enter on our Website and users' interactions within the Website. Google allows you to influence the collection and processing of information generated by the Google, in particular, by installing a browser plug-in, available here. You can read more about how Google uses information here.
2.6. To send you marketing communications
We process your personal data for our marketing campaigns. We may add your email address to our marketing list. As a result, you will receive information about our products, such as for example, special offers. If you do not want to receive marketing emails from us, you can unsubscribe following instructions in the footer of the marketing emails.
We use Klaviyo a multi-channel marketing platform, to deliver emails to our users.
2.7. To personalize our ads
We and our partners, including Facebook and Google, use your personal data to tailor ads and possibly even show them to you at the relevant time. For example, if you have accessed our Service, you might see ads of our products, for example, in your Facebook's feed.
How to opt out or influence personalized advertising
On our Website, you can use Consent Management Platform to make your choice whether to allow us to store or access information on your devices via cookies and other tracking technologies for the purpose of delivering interest-based advertising. You can open Consent Management Platform by clicking on Privacy button in the right lower corner of the Website.
iOS: On your iPhone or iPad, go to “Settings,” then “Privacy” and tap “Advertising” to select “Limit Ad Track”. In addition, you can reset your advertising identifier (this also may help you to see less of personalized ads) in the same section.
Android: To opt-out of ads on an Android device, simply open the Google Settings app on your mobile phone, tap “Ads” and enable “Opt out of interest-based ads”. In addition, you can reset your advertising identifier in the same section (this also may help you to see less of personalized ads).
To learn even more about how to affect advertising choices on various devices, please look at the information available here.
In addition, you may get useful information and opt out of some interest-based advertising, by visiting the following links:
Network Advertising Initiative – http://optout.networkadvertising.org/
Digital Advertising Alliance – http://optout.aboutads.info/
Digital Advertising Alliance (Canada) – http://youradchoices.ca/choices
Digital Advertising Alliance (EU) – http://www.youronlinechoices.com/
DAA AppChoices page – http://www.aboutads.info/appchoices
Browsers: It is also may be possible to stop your browser from accepting cookies altogether by changing your browser’s cookie settings. You can usually find these settings in the “options” or “preferences” menu of your browser. The following links may be helpful, or you can use the “Help” option in your browser.
We value your right to influence the ads that you see, thus we are letting you know what service providers we use for this purpose and how some of them allow you to control your ad preferences.
We use Facebook pixel on the Website. Facebook pixel is a code placed on the Website collecting data that helps us track conversions from Facebook ads, build targeted audience and remarket to people who have taken some action on the Website (for example, purchased a meal plan).
We also use Facebook Ads Manager together with Facebook Custom Audience, which allows us to choose audiences that will see our ads on Facebook or other Facebook’s products (for example, Instagram). Through Facebook Custom Audience we may create a list of users with certain sets of data, such as an IDFA, choose users that have completed certain actions on the Website. As a result, we may ask Facebook to show some ads to a particular list of users. As a result, more of our ads may show up while you are using Facebook or other Facebook’s products (for example, Instagram).
Facebook allows its users to influence the types of ads they see on Facebook. To find how to control the ads you see on Facebook, please go here or adjust your ads settings on Facebook.
We also use Twitter Ads provided by Twitter to deliver advertising. Twitter Ads allows us to choose specific audiences based on geographic areas or user’s interests. As a result, we may ask Twitter to deliver our ads to certain list of users. Twitter allows you to opt-out its internet-based advertising. Privacy Policy.
We use Pinterest Ads to deliver group-based advertisements. For example, you may see our ads if you are interested in specific services, information, or offers. For more information, please refer to the Pinterest Privacy Policy.
2.8. To process your payments
We provide paid products and/or services within the Service. For this purpose, we use third-party services for payment processing (for example, payment processors). As a result of this processing, you will be able to make a payment for a personalized workout program and we will be notified that the payment has been made and will send you the program.
We will not store or collect your payment card details ourselves. This information will be provided directly to our third-party payment processors.
2.9. To enforce our Terms of Service and to prevent and combat fraud
We use personal data to enforce our agreements and contractual commitments, to detect, prevent, and combat fraud. As a result of such processing, we may share your information with others, including law enforcement agencies (in particular, if a dispute arises in connection with our Terms of Service).
2.10. To comply with legal obligations
We may process, use, or share your data when the law requires it, in particular, if a law enforcement agency requests your data by available legal means.
3. UNDER WHAT LEGAL BASES WE PROCESS YOUR PERSONAL DATA (Applies only to EEA-based users)
In this section, we are letting you know what legal basis we use for each particular purpose of processing. For more information on a particular purpose, please refer to Section 2. This section applies only to EEA-based users.
We process your personal data under the following legal bases:
3.1 Your consent
Under this legal basis we:
Send you marketing communications. You have the right to withdraw your consent any time by using the unsubscribe link in the footer of our emails. We will also send you push notifications if you allow us to. You can disable notifications any time in the settings of your device.
Store or access information on your devices via cookies and other tracking technologies. To withdraw your consent, you shall change your preferences on Consent Management Platform. You can open Consent Management Platform by clicking on Privacy button in the right lower corner of the Website.
3.2. to perform our contract with you;
Under this legal basis we:
Provide our Service (in accordance with our Terms of Service)
Customize your experience
Manage your account and provide you with customer support
Communicate with you regarding your use of our Service
Process your payments
3.3. for our (or others') legitimate interests, unless those interests are overridden by your interests or fundamental rights and freedoms that require protection of personal data;
We rely on legitimate interests:
to communicate with you regarding your use of our Service
The legitimate interest we rely on for this purpose is our interest to encourage you to use our Service more often. We also take into account the potential benefits to you, which may lead you to a better and healthier lifestyle.
to research and analyze your use of the Service
Our legitimate interest for this purpose is our interest in improving our Service so that we understand users’ preferences and are able to provide you with a better experience (for example, to make the use of the Service easier and more enjoyable, or to introduce and test new features).
to send you marketing communications
The legitimate interest we rely on for this processing is our interest to promote our Service in a measured and appropriate way.
to personalize our ads
The legitimate interest we rely on for this processing is our interest to promote our Service in a reasonably targeted way.
to enforce our Terms of Service and to prevent and combat fraud
Our legitimate interests for this purpose are enforcing our legal rights, preventing and addressing fraud and unauthorised use of the Service, non-compliance with our Terms of Service.
3.4. to comply with legal obligations.
4. WITH WHOM WE SHARE YOUR PERSONAL DATA
We share information with third parties that help us operate, provide, improve, integrate, customize, support, and market our Service. We may share some sets of personal data, in particular, for purposes indicated in Section 2 of this Privacy Policy. The types of third parties we share information with include, in particular:
4.1. Service providers
We share personal data with third parties that we hire to provide services or perform business functions on our behalf, based on our instructions. We may share your personal information with the following types of service providers:
cloud storage providers (Amazon)
data analytics providers (Facebook, Google, Yandex)
marketing partners (in particular, social media networks, marketing agencies, email delivery services; including, Facebook, Google, TikTok, Pinterest, Twitter, Klaviyo)
We describe for what purposes and with which third-party service providers we share information in detail in Section 2 of this Privacy Policy.
4.2. Law enforcement agencies and other public authorities
We may use and disclose personal data to enforce our Terms of Service, to protect our rights, privacy, safety, or property, and/or that of our affiliates, you or others, and to respond to requests from courts, law enforcement agencies, regulatory agencies, and other public and government authorities, or in other cases provided for by law.
4.3. Third parties as part of a merger or acquisition
As we develop our business, we may buy or sell assets or business offerings. Customers’ information is generally one of the transferred business assets in these types of transactions. We may also share such information with any affiliated entity (e.g. parent company or subsidiary) and may transfer such information in the course of a corporate transaction, such as the sale of our business, a divestiture, merger, consolidation, or asset sale, or in the unlikely event of bankruptcy.
5. HOW YOU CAN EXERCISE YOUR PRIVACY RIGHTS
To be in control of your personal data, you have the following rights:
Accessing / reviewing / updating / correcting your personal data. You may review, edit, or change, or request a copy of your personal data collected during your use of the Service at hello@mypilatesplan.com.
Deleting your personal data. You can request erasure of your personal data by sending us an email athello@mypilatesplan.com.
You can ask us to stop using all or some of your personal data or limit our use thereof by sending a request athello@mypilatesplan.com.
Additional information for EEA-based users:
If you are based in the EEA, you have the following rights in addition to the above:
The right to lodge a complaint with supervisory authority. We would love you to contact us directly, so we could address your concerns. Nevertheless, you have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the EU Member State where you reside, work or where the alleged infringement has taken place.
The right to data portability. If you wish to receive your personal data in a machine-readable format, you can send respective request at hello@mypilatesplan.com.
6. AGE LIMITATION
We do not knowingly process personal data from persons under 16 years of age. If you learn that anyone younger than 16 has provided us with personal data, please contact us at hello@mypilatesplan.com.
7. INTERNATIONAL DATA TRANSFERS
We do business globally. We may transfer personal data to countries other than the country in which the data was originally collected in order to provide the Service set forth in the Terms of Service and for purposes indicated in this Privacy Policy. If these countries do not have the same data protection laws as the country in which you initially provided the information, we deploy special safeguards.
In particular, if we transfer personal data originating from the EEA to countries with not adequate level of data protection, we use one of the following legal bases: (i) Standard Contractual Clauses approved by the European Commission (details available here), or (ii) the European Commission adequacy decisions about certain countries (details available here).
8. CHANGES TO THIS PRIVACY POLICY
We may modify this Privacy Policy from time to time. If we decide to make material changes to this Privacy Policy, you will be notified through our Service or by other available means and will have an opportunity to review the revised Privacy Policy. By continuing to access or use the Service after those changes become effective, you agree to be bound by the revised Privacy Policy.
9. FOR CALIFORNIA RESIDENTS
The California Consumer Privacy Act of 2018 (“CCPA”) provides additional rights to know, delete and opt-out, and requires us to disclose what personal information we have collected, used, and shared over the last 12 months.
Section 2 describes the personal information we have collected about you, including the sources of that information. We collect this information for the purposes described in Section 3. We share this information as described in Section 5.
Under CCPA you as a California resident have the following rights, which you may exercise by yourself or you may designate an authorized agent to make these requests on your behalf:
Right of Know. You have the right to request that we disclose to you the personal information we collect, use, or disclose.
Right to Delete. You have the right to request that we delete your personal information that we have collected from you.
Right to Opt-Out. CCPA requires that we maintain a separate webpage that allows you to opt out of the sale of your personal information, which can be accessed by clicking the link.
Right to Non-Discrimination. We will not discriminate against you for exercising any of these rights. We will not deny you our services, charge you different prices, or provide you a lower quality of services if you exercise your rights under the CCPA.
You may designate, in writing or through a power of attorney, an authorized agent to make requests on your behalf to exercise your rights under the CCPA. Before accepting such a request from an agent, we will require the agent to provide proof you have authorized it to act on your behalf, and we may need you to verify your identity directly with us.
To exercise any of your privacy rights, please send a request to hello@mypilatesplan.com.
California’s Shine the Light law gives California residents the right to ask companies once a year what personal information they share with third parties for those third parties' direct marketing purposes. Learn more about what is considered to be personal information under the statute.
To obtain this information from us, please send an email message to hello@mypilatesplan.com which includes “Request for California Privacy Information” on the subject line and your state of residence and email address in the body of your message. If you are a California resident, we will provide the requested information to you at your email address in response.
10. DATA RETENTION
We will store your personal data for as long as it is reasonably necessary for achieving the purposes set forth in this Privacy Policy (including providing the Service to you), which includes (but is not limited to) the period during which you have an account with the Website. We will also retain and use your personal data as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.
11. HOW “DO NOT TRACK” REQUESTS ARE HANDLED
Various browsers (including Internet Explorer, Firefox, and Safari) offer a DNT option that relies on a technology known as a DNT header that sends a signal to websites visited by the browser user about the user's DNT preference. You can usually access your browser's DNT option in your browser's preferences.
We currently do not support “Do Not Track” requests because no DNT standard has been adopted.
Our third-party services may collect information about you and your online activities over time and across our Services and other online properties. These third parties may not change their tracking practices in response to DNT settings in your web browser and we do not obligate these parties to honor DNT settings. To determine whether any of the third-party services honor the “Do Not Track” requests, please read their privacy policies.
12. PERSONAL DATA CONTROLLER
Menesko Ltd, a company registered under the laws of the Republic of Lithuania will be the controller of your personal data.
13. CONTACT US
You may contact us at any time for details regarding this Privacy Policy and its previous versions. For any questions concerning your account or your personal data please contact us at hello@mypilatesplan.com.
Effective as of: 07 June 2022