We and third party service providers on our behalf collect information about your location when you use or access MINDBODY Services. The degree of precision of the location data varies depending on the source of such information. Those sources include:
We collect and use this location-related data in order to
You may disable the collection and use of your location data through your browser-, operating system- or device-level settings. Consent concerning location data may be withdrawn at any time by changing these settings.
CATEGORIES OF PERSONAL INFORMATION
Personal Information we collect or obtain includes:
Personal Information we may display but do not collect, store or use includes:
We collect information about you whenever you use the MINDBODY Services, for example:
From other sources
We may use your Personal Information for legitimate business purposes, including:
We will engage in these activities to comply with a legal obligation or because we have a legitimate interest.
To the extent that we process your Personal Information based on your consent, you may withdraw your consent at any time.
TRACKING AND ADS
SOCIAL MEDIA FEATURES AND WIDGETS
Our websites offer publicly accessible message boards, blogs, and community forums. Please keep in mind that if you directly disclose Personal Information through MINDBODY public message boards, blogs, or forums, this information may be collected and used by others. To request removal of your Personal Information from our blog or community forum, contact us at firstname.lastname@example.org. In some cases, we may not be able to remove your Personal Information or some content (if, for example, it is reposted by another user), in which case we will let you know if we are unable to do so and why.
You can log in to some of the MINDBODY Services using sign-in services such as Facebook Connect or an Open ID provider. These services will authenticate your identity and provide you the option to share certain Personal Information with us such as your name and email address to pre-populate our sign up form. Some services like Facebook Connect give you the option to post information about your activities on our websites to your profile page to share with others within your network. In addition, when using some of our mobile applications we may allow you a chance to tell friends about our services by accessing the contacts in your Facebook or other social media account.
TESTIMONIALS, RATINGS, & REVIEWS
If you submit testimonials, ratings or reviews to the MINDBODY Services, any Personal Information you include may be displayed in the Service. If you want your testimonial removed, please contact us at email@example.com. We also partner with third-party service providers to collect and display ratings and review content on our web site.
The security of Personal Information is a high priority at MINDBODY. We seek to use reasonable technical, administrative and physical safeguards to protect Personal Information within our organization. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have any questions about the security of your interaction with us please refer to our Security Policy [https://www.mindbodyonline.com/security-policy]
4051 Broad Street Suite 220
San Luis Obispo, CA 93401
For the EEA, you may also:
Contact our Data Protection Officer responsible for your country or region, if applicable, at firstname.lastname@example.org.
Lodge a complaint with a data protection authority for your country or region or where an alleged infringement of applicable data protection law occurs. A list of data protection authorities is available at http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080
How to access, correct, delete or exercise other rights regarding your Personal Information.
Where applicable law allows for such a request, if you would like to request to access, correct, object to the use, restrict or delete Personal Information that you have previously provided to us, or if you would like to request to receive an electronic copy of your Personal Information for purposes of transmitting it to another company (to the extent this right to data portability is provided to you by applicable law), you may contact MINDBODY at email@example.com with the subject line “Data Subject Request.” We will respond to your request consistent with applicable law.
For your protection, we may only implement requests with respect to the Personal Information associated with the particular email address that you use to send us your request, and we may need to verify your identity before implementing your request. We will try to comply with your request as soon as reasonably practicable. Moreover, where you are an End User, MINDBODY may need to forward your request and refer you to your Subscriber who may be better placed to address your request.
Please note that we may need to retain certain information for recordkeeping purposes and/or to complete any transactions that you began prior to requesting a change or deletion (e.g., when you make a purchase or enter a promotion, you may not be able to change or delete the Personal Information provided until after the completion of such purchase or promotion). We may retain residual information, such as records to document that your request has been fulfilled.
If you are under 18 years of age and a user of the MINDBODY Services, you may also be entitled to ask us to remove content or information that you have posted to the MINDBODY Service by submitting a request to firstname.lastname@example.org. Please note that your request does not ensure complete or comprehensive removal of the content or information if doing so infringes on the rights of another user.
If you are a customer of one of our Subscribers and would no longer like to be contacted by one of our Subscribers, or would like request the exercise of a right as set out above in relation to Personal Information held by a Subscriber, please contact the Subscriber directly.
Your choices regarding our use and disclosure of information.
Information you provide may be used by MINDBODY for marketing purposes such as one-off promotional emailing, mobile text messages, direct mail, and sales contacts. We give you many choices regarding our use and disclosure of your Personal Information for marketing purposes. You may opt-out from:
We will try to comply with your request(s) as soon as reasonably practicable. Please also note that if you do opt-out of receiving marketing-related emails from us, we may still send you messages for administrative or other purposes directly relating to your use of the MINDBODY Services, and you cannot opt-out from receiving those messages.
Our mobile applications may also send push notifications to your mobile device. If you have previously consented to receiving push notifications and no longer wish to receive them, you can also turn push notifications off at the device level. The applications may also request access to your device’s calendar application, storage, Bluetooth, camera, and microphone. If you have previously allowed access to your device’s calendar and no longer wish to allow access, you may edit the application settings at the device level.
EU-U.S. Privacy Shield and Swiss-U.S. Privacy Shield.
MINDBODY participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework, with the exclusion of the Frederick product which relies on standard contractual clauses. We are committed to subjecting all personal data received from European Union (EU) member countries and Switzerland, respectively, in reliance on each Privacy Shield Framework, to the Framework’s applicable Principles. To learn more about the Privacy Shield Frameworks, and to view our certification, visit the U.S. Department of Commerce’s Privacy Shield List. https://www.privacyshield.gov/list.
MINDBODY is responsible for the processing of personal data it receives under each Privacy Shield Framework and subsequently transfers to a third party acting as an agent on its behalf. MINDBODY complies with the Privacy Shield Principles for all onward transfers of personal data from the EU and Switzerland, including the onward transfer liability provisions.
With respect to personal data received or transferred pursuant to the Privacy Shield Frameworks, MINDBODY is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, we may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third-party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.
Under certain conditions, more fully described on the Privacy Shield website, you may be entitled to invoke binding arbitration when other dispute resolution procedures have been exhausted.
Use of Service By Minors
The MINDBODY Services are not directed or targeted at children under the age of sixteen (16), and we request that they do not provide Personal Information through the MINDBODY Services.