We are committed to protecting your privacy as a user (referred to as “User“, “you” or “your“), and we take our responsibility regarding the security of your Personal Data (defined below) very seriously. We will be clear and transparent about the Personal Data we are collecting and what we will do with that Personal Data.
This is the Privacy Policy of THE BOOK RETREAT (hereafter referred to as “us,” “we,” “the Company,” or “Book Retreats”). This Privacy Policy describes how your personal information is collected, used, and shared when you use our website (thebookretreat.com) or any of our branded apps, social media pages, online shop, or any of our products or services (together, the “Service”).
By using the Service, you agree to the collection, use and disclosure of your information as described in this Privacy Policy. We may modify this Privacy Policy from time to time. Your continued use of the Service constitutes your agreement to any updated Privacy Policy on a prospective basis.
When you use the Service, we collect the following types of personal information:
PERSONAL DATA
We may ask for and collect your Personal Data (either directly through your use of the Service or when you communicate with us in any other way, or indirectly through our third party partners or providers) in a number of ways to provide you with the products or services that you request. We may also collect information from you automatically when you visit our Platform.
“Personal Data” has the meaning given in the Data Privacy Law applicable to you, and includes any information or opinion relating to you which allows us to identify you, such as your name, phone number, social media name or ‘handle’, postal address, email address, details of products or services you have purchased, payment details and information about your access to our website.
Specifically, we may (either directly or indirectly) collect the following categories of Personal Data:
- first and last names, email address and date of birth (these are mandatory information which we require when opening a user account on the Platform (“User Account”));
- other information such as country of residence, and gender, home address and telephone number;
- information you provide about yourself and any preferences in your User Account;
- information about yourself which you choose to post or share in the Forum;
- information about your purchases of products and services from us or our third party partners who may provide or promote their own products or services through the Service;
- payment information, such as your credit card, if you purchase something directly on the website;
- information about your use of the Service;
- communications with us or directed to us via letters, emails, chat services, calls, and social media;
- where you have selected particular services or features on the app (such as your height, weight, age), your photos, audio, contacts and calendar information, as well as your social network information (including credentials and any information from your public posts about Heat Dance or your communications with us);
- when you have elected to sign up and log into the Service using a third-party account you created (e.g. through Facebook, Google, or Apple), information you have agreed to make available to us (e.g. name, email address, profile information, preferences); and
- your location where:
- the IP address of your computer or device is used to determine your geographic location so that we can customize your experience on the Platform (e.g. language settings); and
- you elect to use location-based features on the Platform (in particular, the Heat Dance App) and turn on the location services settings on your device or computer (e.g. GPS and/or Bluetooth) so that we can track your real-time geographic location to record your fitness activities (for example, your running route).
Linked Devices – Users may choose to connect a third party device (like an Apple Watch or fitness tracker) and enable that device to share location data (e.g. running route), fitness activity, or health information (e.g. heart rate, steps, water intake) it collects with Heat Dance. You can manage what data your device shares with Heat Dance in the settings panel or relevant application (e.g. Apple Health) on that device.
Children – Users must be of legal age in their respective countries and not under 18 years old, or you must have consent from your parent or guardian. Individuals are not allowed to sign up for a User Account on the Platform without verifying that they are 18 years or older. If you are a parent or legal guardian of a child who is under 18 years old who you believe has provided Personal Data to Heat Dance, please contact us at the Legal Contact below if you want to exercise any of the rights available under applicable Data Privacy Law as set out below.
Account Registration Information – In order to sign up for a free trial or make a purchase, you must create an account by providing us with your email address and a password. You may also create a username and upload an avatar to use for comments or forums.
Payment Information – You must also provide valid payment card information if you wish to sign up for a free trial, subscription, or make any other purchase. Except for the name associated with your card and information about the transaction (e.g., time of transaction, amount), payment card information is collected directly by a third-party payment vendor and is not received or stored by us.
Information Collected Automatically – Each time you visit the Service, we automatically collect certain information about your device and your interaction with the Service. This may include your viewing activity, your IP address, location information, your browser type, your Internet service provider (ISP), referring/exit pages, your operating system, date/time stamps, and related metadata.
Comments – We may offer the ability to provide comments or to post messages in a forum. Any posts you make will be publicly available.
Other Information – You may also choose to provide other information about yourself in connection with surveys, contests, special offers, customer support inquiries, and other communications with us.
HOW WE USE YOUR PERSONAL INFORMATION
The Personal Information we collect and the practices described above are done in an effort to provide you with the best experience possible, protect you from risks related to improper use and fraud, and help us maintain and improve Company offerings. We may use your Personal Information to:
- Fulfill your orders and deliver content to you;
- Send you marketing communications (depending on your preferences);
- Track progress on fitness activity that contributes to functionality of the Service;
- Provide customer support to you;
- Analyze how the Service is being used for troubleshooting and improvements;
- Communicate with you through our customer service team;
- Security, health, administrative, crime prevention/detection and legal purposes;
- Collect debts, prevent fraud, and protect the integrity of the Service;
- Enforce our legal rights;
SHARING DATA & PERSONAL INFORMATION
DISCLOSURES TO THIRD PARTIES
We may disclose your information to the following types of third parties:
Service Providers
We share Personal Information with service providers so that they can provide us with services, including identity verification, fraud detection and prevention, security threat detection, payment processing, customer support, data and website use analytics, advertising, marketing, data processing, network infrastructure, storage, transaction monitoring, and tax reporting. Heat Dance shares your Personal Information with these service providers only so that they can provide us with services as specified in our contracts with them, and we prohibit our service providers from using or disclosing your Personal Information for any other purpose.
More specifically, we use Google Analytics to collect information regarding visitor behavior and visitor demographics on our Site and Services. For more information about Google Analytics, please visit www.google.com/policies/privacy/partners/. You can opt out of Google’s collection and processing of data generated by your use of the Services by going to http://tools.google.com/dlpage/gaoptout.
Professional Advisors
The Company may share your Personal Information with our professional advisors, including legal, accounting, or other consulting services for purposes of audits or to comply with our legal obligations.
Additionally, the Company may share your Personal Information as required or permitted by law to comply with a subpoena or similar legal process or government request, or when we believe in good faith that disclosure is legally required or otherwise necessary to protect our rights and property or the rights, property or safety of others, including to law enforcement agencies, and judicial and regulatory authorities.
In the event of a proposed or consummated merger, acquisition, reorganization, asset sale, or similar corporate transaction, or in the event of a bankruptcy or dissolution, your Personal Information may be transferred as part of such a transaction or event.
Third Party Websites
While you are using this Service, you may be linked or directed to other third party sites outside of the Service that are beyond our control. For example, you might click on a link or banner ad that will take you off the Service. These links and banners may take you to sites of advertisers, sponsors and co- branding partners. Similarly, you may click on a social media button that you find on our website that will direct you to a third party social media platform. We are not responsible for the privacy practices or the content of these (or any) third party websites or platforms. This Privacy Policy applies only to the information collected by us.
The Public
We may publicly disclose aggregated user statistics and other information, which is not considered personal information. If you comment on a video or participate in a forum, your comment will be shared publicly.
TARGETED ADVERTISING
We may use your personal information to provide you with targeted advertisements or marketing communications we believe may be of interest to you.
You can limit the use of your information for purposes of targeted advertising using a number of methods:
- Via the Digital Advertising Alliance’s tool available at aboutads.info, which lets you opt-out of interest-based ads on websites.
- Via AppChoices mobile app, available at https://www.youradchoices.com/appchoices, which lets you opt-out of interest-based ads in mobile apps.
- Using platform specificopt-out features:Google: https://adssettings.google.com/ Facebook: https://www.facebook.com/about/ads
- By configuring your browser settings and/or mobile settings to restrict third-party cookies and/or the use of the advertising ID associated with your mobile device for interest-based advertising purposes.
The options described above must be set on each of your devices in order to apply. Not all companies that serve interest-based ads participate in the ad industry opt-out programs described above, so even after opting-out, you may still receive some cookies and interest-based ads from other companies.
EMAILS
When you create an account, you may receive certain emails:
Transaction Emails: When you first create an account, we may send you a welcome email that provides information about your subscription and your account. If you make a purchase, we may send you an email confirming your purchase. We may also send you other emails concerning your account status and renewals. You may not opt out of transactional emails.
Marketing Emails: Depending on your preferences, we may send you emails letting you know about new programs or features, or promotions. You may opt out of these emails at any time in your account settings.
COOKIES
When you access Company’s Services, we may make use of the standard practice of placing tiny data files called cookies, flash cookies, pixel tags, or other tracking tools (herein, “Cookies”) on your computer or other devices used to visit Heat Dance. We use Cookies to help us recognize you as a customer, collect information about your use of the Service to better customize our services and content for you, and collect information about your computer or other access devices to assess and improve our services and advertising campaigns. Most browsers allow you to block and delete Cookies. Please note that if you reject some types of cookies, you may not be not be able to use some of Heat Dance’s services.
By using our Platform you agree that, unless you have set your computer’s browser to reject them, we can place the types of cookies set out in the table below on your device, and use that data in accordance with this policy.
We use cookies (such as HTTP and HTML5) and similar technologies (such as web beacons and JavaScript) to: (i) customize and improve Users’ use of the Service; (ii) deliver content tailored to Users’ interests and the manner in which they browse our platform; and (iii) manage our Service and other aspects of our business.
For SMS texts, Cookies are used to determine if a shopping cart has been abandoned and might be used to send text messages with those types of message if user opts-in to marketing messages.
Strictly Necessary Cookies
These cookies are necessary for the Platform to work, and enable you to move around the Platform and use the services and features. Disabling these cookies will encumber the Platform’s performance and may make these services and features unavailable. Strictly necessary cookies are used to collect session ID and authentication data. During the time you visit the Platform, our web server assigns your browser a unique identifier string so as not to confuse you with other visitors. These are session cookies (i.e., which expire when you close your browser session). These cookies are never stored permanently on your computer and disappear when you close your browser. To use some of our Platform without issue you need to have these cookies enabled.
We set out a list of the cookies that we currently use:
Name: UserID
Function: Used in connection with customer login
Duration: Session (cookie will be removed after browser session ends)
Name: accessToken
Function: Used in connection with customer login
Duration: Session (cookie will be removed after browser session ends)
Name: _HD_session
Function: Used in connection with customer login
Duration: 37.5 hours
Name: Shopify Cookies
Function: Heat Dance uses Shopify for ecommerce services in relation to the products sold on the Platform. Please refer to their cookies policy for further information.
Functional Cookies
Functional cookies allow the Platform to help maintain your session and remember the choices you have made in order to provide functionality for your benefit. Functional cookies are used to collect information about your language preferences and other preferences indicated during your use of the Service. For example, functional “session” cookies allow the Service to remember settings specific to you, such as your country selection, which ultimately improves your web experience. Functional cookies also include persistent cookies which are used to remember your preferences when you subsequently visit our Platform.
We set out a list of the cookies that we currently use:
Name: UserID
Function: Used in connection with customer login
Duration: Session (cookie will be removed after browser session ends)
Name: accessToken
Function: Used in connection with customer login
Duration: Session (cookie will be removed after browser session ends)
Name: locale
Function: Display corresponding language to the user
Duration: 30 days from creation of locale cookie
Name: _HD_session
Function: Used in connection with customer login
Duration: 37.5 hours
Analytic Cookies
Analytic cookies are used to gather statistics about the use of the Platform in order to improve the performance and design of the Platform and our services. For these purposes, analytic cookies collect information about your device type, operating system type, browser type, domain, other system settings, IP address, referring URLs, information on actions taken on the Platform and the dates and times of your visits, as well as the country and time zone in which your device is located.
These cookies are provided by our third-party analytics tool providers and the information obtained through these cookies will be disclosed to, or collected directly by, these third-party service providers. For more information about these service providers’ cookie and information practices (including the types of cookies used and their expiration date), please visit the following links:
Name: Emarsys
Function: Company uses Emarsys to help measure how Users interact with our Service and to help send Users emails. Please refer to their cookies policy for further information: https://www.emarsys.com/privacy-policy/
Name: Google Analytics
Function: Company uses Google Analytics to help measure how Users interact with our Service. Please refer to their cookies policy for further information: https://policies.google.com/privacy
Name: Facebook Custom Audiences
Function: Company uses Facebook Custom Audiences to deliver targeted advertisements to Users who use our Service. Please refer to their cookies policy for further information: https://www.facebook.com/policy.php
Name: Snap Custom Audiences
Function: Company uses Snapchat Custom Audiences to deliver targeted advertisements to Users who use our Service. Please refer to their cookies policy for further information: https://www.snap.com/en-US/ad-policies
Third Party Cookies
We partner with third parties to provide you with direct connections to certain social networks or features of social networks (such as the ability to “like” or share content from our site using your social media accounts) and to provide you with additional features. By using the Service or engaging with third-party plugins and widgets on our Service, such third parties may place session or persistent cookies on your device, or use similar technologies that will allow tracking of your activity on our site. These technologies may provide the third parties information about your visit so that they can present you with advertisements for Company products and services which may be of interest to you, when you visit other advertiser-supported websites, and can help us track the effectiveness of our marketing efforts. The use of these cookies is subject to such third-party’s own cookie policies linked below:
Name: Facebook connection
Function: the Company uses Facebook Connect to allow Users of the Platform to interact with and share content via Facebook’s social media platform. Please refer to their cookies policy for further information: https://www.facebook.com/policy.php
Name: Instagram
Function: the Company uses Instagram to allow Users of the Platform to interact with and share content via Instagram’s social media platform. Please refer to their cookies policy for further information: https://help.instagram.com/1896641480634370
Disabling and Removing Cookies
You can restrict or disable the use of cookies through your browser. Each type of browser offers ways to restrict and delete cookies. For more information on how to manage cookies through your browser, please visit the appropriate link below:
Furthermore, you can delete Flash cookies or adjust your Flash cookie settings by visiting the Adobe Flash Website Storage Settings Panel and Global Storage Settings Panel.
PROTECTING AND MANAGING YOUR DATA
Security
We implement and maintain reasonable security appropriate to the nature of the Personal Information that we collect, use, retain, transfer or otherwise process. We follow strict security procedures in the storage and disclosure of your Personal Data, which are designed to protect it against misuse, unauthorized access, modification or disclosure and accidental loss, destruction or damage. The data you provide to us is protected using SSL (Secure Socket Layer) technology. SSL is the industry standard method of encrypting Personal Data and credit card details so that they can be securely transferred over the internet.
We take measures to safeguard your Personal Information, although such safeguards may not always be adequate to prevent all breaches of security. Information transmitted on the Internet and/or stored on systems attached to the Internet is not 100% secure. As a result, we do not ensure, warrant or guarantee the security or integrity of such information. We will not be responsible for disclosure of any information due to errors in transmission or the unauthorized acts of third parties.
You help to maintain the security of your personally identifiable information stored in our systems by keeping your username and password confidential and protecting against unauthorized access to your password and to your computer. Be sure to sign off when finished using a shared computer
Retention of your Personal Data
We will not retain your data for longer than is necessary to fulfil the purposes for which it is being processed. To determine the appropriate retention period, we consider the amount, nature and sensitivity of the personal data, the purposes for which we process it, and whether we can achieve those purposes through other means.
We also consider the periods for which we might need to retain personal data in order to meet our legal obligations, or to deal with complaints and queries, and to protect our legal rights in the event of a claim being made.
When we no longer need your personal data, we will securely delete or destroy it. We will also consider if and how we can minimize over time the personal data that we use, and if we can fully anonymize your personal data so that it can no longer be associated with you or identify you, in which case we may use that information without further notice to you.
Information that you have shared in the Forum will remain public even after you have closed your Forum account. Where you choose to delete content that you have posted to the Forum, the information will not be deleted from third party websites, apps or internet search engine indexes instantly as removal of the content depends on third party policies.
CHILDREN
Users must be of legal age in their respective countries and not under 18 years old, or you must have consent from your parent or guardian to use the Service and share your Personal Data with us. Individuals are not allowed to sign up for a User Account on the Platform without verifying that they are 18 years of age or older. If you are a parent or legal guardian of a child who is under 18 years old who you believe has provided Personal Data to Sweat, please contact us if you want to exercise any of the rights available under applicable Data Privacy Law as set out herein.
YOUR PRIVACY RIGHTS
You may change your account information or close your account at any time by logging into your account and adjusting your account settings. If you close your account or request that we delete your account, you may lose access to content you have purchased. When you close your account, we may preserve your account information to (i) let you know about new offers and content; (ii) restore your account, if you ever wish to re-subscribe; and (iii) where we believe in good faith that preservation is necessary to enforce our rights.
Under certain circumstances, by applicable Data Privacy Law you may have the right to:
Transparency
You have the right to request information about whether we hold Personal Data about you, and, if so, what that information is and why we are holding/using it.
Access
You may request access to your Personal Data (commonly known as a “data subject access request”). This enables you to receive a copy of the Personal Data we hold about you and to check that we are lawfully processing it
Correction
You have the right to request correction of the Personal Data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
Erasure
You can request erasure of your Personal Data. This enables you to ask us to delete or remove Personal Data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your Personal Data where you have exercised your right to object to processing.
Object
You may object to processing of your Personal Data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation that makes you want to object to processing on this ground. You also have the right to object where we are processing your Personal Data for direct marketing purposes.
Automated Decision Making and Profiling
You may also object to automated decision-making including profiling, that is not to be subject of any automated decision-making by us using your Personal Data or profiling of you.
Restriction of Processing
You have the right to request the restriction of processing of your Personal Data. This enables you to ask us to suspend the processing of Personal Data about you, for example if you want us to establish its accuracy or the reason for processing it.
Transfer
Request transfer of your Personal Data in an electronic and structured form to you or to another party (commonly known as a right to “data portability”). This enables you to take your data from us in an electronically useable format and to be able to transfer your data to another party in an electronically useable format.
Withdraw consent
In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your Personal Data for a specific purpose, you have the right to withdraw your consent for that specific processing at any time by contacting us. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose or purposes to which you originally agreed, unless we have another proper and legitimate basis for doing so.
While you will generally not be required to pay a fee to access your Personal Data or to exercise any of your other statutory rights, we may charge a reasonable fee if your request for access is clearly completely unfounded, excessive or decline to comply with such requests where permitted by applicable Data Privacy Law.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it and to prevent unauthorized modification of your Personal Data.
You also have the right to lodge a complaint about our processing of your Personal Data with the body regulating data protection in the country or state / province in which you live. If the GDPR applies to our processing of your Personal Data, you have the right to lodge a complaint with a supervisory authority if you are not satisfied with how we process your Personal Data. Specifically, you can lodge a complaint in the Member State of the European Union of your habitual residence, place of work, or of the alleged violation of the GDPR.
ADDITIONAL TERMS
CALIFORNIA
California consumers have the following rights under the CCPA with respect to their Personal Information. Please understand, however, that these rights are not absolute, and the Company may decline requests as permitted under applicable law: request information about the categories and sources of personal information collected about you, and the associated purposes for collection and third-party disclosures; request a copy of your personal information; request deletion of your personal information; and opt out of the sale of your personal information.
To exercise your right to access or delete your personal information, submit your request by sending a letter to [email protected]. Note that to process your request, we must be able to verify your identity as the owner of the account you are inquiring about. We may not be able to fulfill your request until we can do so. Although you do not need to have an account to submit a request, we may not be able to locate certain information to process your request if you don’t have one.
California’s “Shine the Light” law, Civil Code section 1798.83, requires certain businesses to respond to requests from California residents asking about the business’ practices related to disclosing Personal Information to third parties for the third parties’ direct marketing purposes. We do not disclose Personal Information to such entities, for such purposes.
We will not discriminate against you for exercising any of your rights under the CCPA.
The categories of Personal Data collected by the Company are described in Section 2 of the Privacy Policy and, for the purposes of the CCPA, correspond to the following categories of Personal Information listed in the CCPA:
Category | How We Obtain It |
Identifiers:first and last names, email address, home address, telephone number, where you have selected particular services or features on the Service, social network information. | Directly from you or linked third party accounts. |
Protected characteristics: age, gender, country of residence, medical conditions or requirements. | Directly from you and your devices. |
Commercial information: information about your purchases of products and services from us or our third party partners who may provide or promote their own products or services through the Platform. | Our own accounting records and from third party partners who may provide or promote their own products or services through the Platform. |
Biometric information: none | Directly from you, if you choose to enter these on the Platform. |
Internet or other similar network activity: information about your use of the Platform and your IP address, including information collected automatically through cookies (refer to Company’s Cookie Policy for more information; | Directly from you and your devices. |
Geo-location data: none | Directly from you and your device(s). |
Sensory Data: none | Directly from you, where you have selected particular services or features on the Service. |
Inferences drawn from other Personal Data: none | Directly from you and your devices. |
The categories of third parties with whom the Company shares each category of personal data are as follows:
Category | Who We Share It With |
Identifiers | Other companies and members within the Company; our trusted third party ancillary partners (identified on our website), whose products and services you obtain through our Service; third party social media platforms when you connect your User Account to your social media account or use social media plugins on our Service; other companies, contractors or agents that assist us in providing services to you, including our online e-commerce platform that allows us to sell and deliver our products and services to you; third parties that provide legal services, customer services and information technology support; and credit and debit card companies including third party payment gateway providers. |
Protected characteristics | Other companies and members within the Company; our trusted third party ancillary partners (identified on our website), whose products and services you obtain through our Service. |
Commercial information | Other companies and members within the Company; our trusted third party ancillary partners (identified on our website), whose products and services you obtain through our Service; other companies, contractors or agents that assist us in providing services to you, including our online e-commerce platform that allows us to sell and deliver our products and services to you; third parties that provide legal services, administration services, customer services and information technology support, and credit and debit card companies including third party payment gateway providers. |
Biometric information | Other companies and members within the Company; our trusted third party ancillary partners (identified on our website), whose products and services you obtain through our Service. |
Internet or other similar network activity | Other companies and members within the Company; our trusted third party ancillary partners (identified on our website), whose products and services you obtain through our Platform; third party social media platforms when you connect your User Account to your social media account or use social media plugins on our Service. |
Geo-location data | Other companies and members within the Company; our trusted third party ancillary partners (identified on our website), whose products and services you obtain through our Service; third party social media platforms when you connect your User Account to your social media account or use social media plugins on our Service. |
Sensory Data | Other companies and members within the Company; our trusted third party ancillary partners (identified on our website), whose products and services you obtain through our Service. |
Inferences drawn from other Personal Data | Other companies and members within the Company; our trusted third party ancillary partners (identified on our website), whose products and services you obtain through our Service; third party social media platforms when you connect your User Account to your social media account or use social media plugins on our Service. |
We may also disclose your Personal Data to government authorities, law enforcement bodies and regulators for compliance with legal requirements, or where otherwise required by applicable Data Privacy Law and to our legal and other professional advisers in order to enforce our legal rights in relation to our contract with you.
Heat Dance processes each category of your Personal Data described above for purposes described in Section 3 of the Privacy Policy. We will not process your Personal Data for purposes which are materially different, unrelated, or incompatible with the purposes set out in the Privacy Policy without providing you notice.
In the last 12 months, we have disclosed to third parties all of the categories of Personal Data listed in the table above for a business purpose.
“Sale” of Data:
The Company generally does not sell your Personal Information in the conventional sense (i.e., for money). Like many companies, however, we use services that help deliver interest-based ads to you. As part of this process, we may transfer Personal Information to business partners (like Facebook or TikTok) for their use as they help us deliver interest-based ads. Making Personal Information (such as online identifiers or browsing activity) available to these companies to use outside of Heat Dance’s direction may be considered a “sale” under the CCPA. To request that Sweat not “sell” your Personal Information, please submit your request by sending a letter to [email protected]
California Consumer Rights:
Users who are resident in California may have the following rights under the CCPA in addition to the rights set out in Section 6 of the Privacy Policy:
- The Right to “Opt Out”
Youhave the right to direct us to not sell your personal information at any time (the “right to opt-out”). As described above, the Company doesn’t sell any of your information in the conventional sense. However, the Company may provide information about you to third party advertising partners (like Facebook or TikTok), and this may constitute a “sale” under the CCPA. To exercise the right to opt-out of this kind of information transfer, you (or your authorized agent) may submit a request by sending a letter to [email protected]
- The Right to “Opt In”
Ifyou change your mind about opting out of the “sale” of your data and would like Sweat to resume providing your information to these advertising partners, you may contact us by sending a letter to [email protected]
- Access:
Once we receive and confirm your verifiable consumer request, we will disclose the following to you:
- the categories of your Personal Data and the specific Personal Data that we have collected;
- the categories of sources from which your Personal Data was collected;
- our business or commercial purpose for collecting your Personal Data; and the categories of third parties with whom we share your Personal Data, and where such third parties received your Personal Data from us for a business purpose, the categories of your Personal Data that we disclosed to such third parties.
- Under the CCPA, you are only entitled to exercise the Personal Data access right twice a year.
Once we receive and confirm your verifiable consumer request, we will (and will direct our service providers to whom we have disclosed your Personal Data to) delete your Personal Data unless an exception under the CCPA applies. The rights set out above do not apply to Personal Data collected from Heat Dance’s employees as part of their employment with Sweat or Personal Data collected as part of a business-to-business transaction. To exercise any of the rights set out above, please contact the Heat Dance team using the contact details set above in the Privacy Policy. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Data. We may need to request specific information from you to help us confirm that your request is a verifiable consumer request.
- Exercising your rights under the CCPA:
Verification of your identity to respond to your request to know and delete
To evaluate your request to know or delete, we may request additional information to verify your identity. We will only use the Personal Data you provide us in a request to verify the requestor’s identity or authority to make the request. Please note that you may only make a consumer request to know or data portability request twice within a 12-month period.
- Section 6 of the Privacy Policy is supplemented as follows:
Response Timing and Format of Our Responses
If we need to charge a fee for a request which is excessive, repetitive, or manifestly unfounded, we will explain why we made that determination and provide you with a cost estimate before completing your request.
We will reply to all requests within 30 days, or inform you in writing if additional time is required. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will send our written response by mail or electronically, at your option.
If we cannot satisfy your request, we will also explain why in our response.
Authorized Agent
You may appoint an authorized agent to exercise any of your privacy rights on your behalf, if the authorized agent is a natural person or a business entity registered with the Secretary of State of California.
To appoint an authorized agent, you must also sign a written declaration giving the authorized agent permission to act on your behalf, or you can appoint such agent via a power of attorney pursuant to Probate Code sections 4000 to 4465.
To verify that your authorized agent acts on your behalf, we will ask for this written permission from your agent or for the power of attorney. In case you provided your authorized agent with a written permission, we will require that you also verify your identity and we may also ask you to directly confirm with us that you provided the authorized agent permission to submit the request.
We will deny a request from an authorized agent that does not submit proof that they have been authorized by you to act on your behalf.
We will not discriminate against you for exercising any of your rights under the CCPA. Specifically, unless permitted by the CCPA, we will not:
- deny you access to goods and/or services provided by us on the Service;
- charge you different prices or rates for the goods and/or services provided by us on the Service, or imposing penalties on you;
- provide you with a different level or quality of goods and/or services than otherwise generally provided by us on the Service; or
- suggest that you will receive a different price or rate for, or a different level or quality of, the goods and/or services generally provided by us on the Service.
NEVADA
Nevada law (SB 220) requires website operators to provide a way for Nevada consumers to opt out of the sale of certain information that the website operator may collect about them. Heat Dance does not sell your Personal Information to third parties as defined in Nevada law, and will not do so in the future without providing you with notice and an opportunity to opt-out of such sale as required by law.
CANADA
- Section 3.6 (Other purposes) is replaced with the following: ” We may also collect, use and disclose your Personal Data in other ways, and where we do so, we will obtain your further consent “.
- We will only process your personal data where required to operate the Service, provide you with products and services, and to operate our business, including for the purposes outlined in this Privacy Policy. In most cases, we will need to process your personal data so that we can enter into contracts under our terms of use (when orders for products are made), and to fulfil the provision or delivery of goods or services to you via the Service (including subscriptions to the Service).
- In addition to the purposes set out elsewhere in the policy, the Company may collect, use and disclose your Personal Data for marketing and analytics purposes, including to display targeted advertising, based on your interests as inferred from web activity, when you visit other sites around the web or as you use various social media platforms. Please see our Cookie Policy for further details, including how you can control the use of your Personal Data for targeted advertising purposes.
- By using the Service or otherwise providing us with your Personal Data, you agree to the collection, use and disclosure of your Personal Data as set out in this Privacy Policy.
- We may also collect, use and disclose your Personal Data without your consent, as required or permitted by applicable Data Privacy Law, such as to use or disclose your Personal Data in the case of an emergency that threatens the life, health or security of you or another individual.”
- Section 4.2 (International transfers of your Personal Data) is replaced with the following: ” Company operates businesses in multiple jurisdictions, some of which are not located in your country of residence. The Personal Data that Heat Dance collects from users will be stored in the United States of America and might also be stored or processed through third party service providers (e.g., e-commerce and logistics providers such as Stripe and Shopify, and customer support providers such as Zendesk) in other countries. Therefore, the Personal Data that you provide to Heat Dance may be transferred internationally to countries other than the country in which you initially provided your data “.
- When transferring Personal Data to a third party service provider, or outside of your home country, we take measures to protect your Personal Data as described in this Privacy Policy and in compliance with applicable Data Privacy Law. Using contractual and other means, we also require all third party data recipients (including our service providers) to process your information in a secure manner and in accordance with the applicable Data Privacy Law in your country of residence. However, when stored or processed in another country, your Personal Data will be subject to the applicable Data Privacy Law of that country, which may not provide the same protections as the applicable Data Privacy Law in your country of residence. If you have further questions about this or would like to request to view copies of the applicable safeguards (where required), please contact us at the details in our Privacy Policy.
- The section dealing with the payment of a fee to access your Personal Data in Section 6 is replaced with the following: ” While you will generally not be required to pay a fee to access your Personal Data or to exercise any of your other statutory rights, where permitted by applicable Data Privacy Law, we may charge a reasonable fee if your request for access would require an exceptional amount of effort, or may decline to comply with frivolous or vexatious requests “.
EEA
Users from the European Economic Area (EEA) have the right to: opt out of cookies (see our Cookie Policy); access, correct, delete, restrict or object to our use of your personal information. If you would like to exercise any of these rights, please submit your request by sending a letter to [email protected]
We process personal information to fulfill contracts with you and to provide services you have requested (for example, to fulfil a purchase), or otherwise to pursue our legitimate business interests. Note that your information will be transferred outside of Europe, including to the United States.
UPDATES TO THIS PRIVACY POLICY
Company may revise and update this Privacy Policy at any time in its sole discretion by posting an updated Privacy Policy on the Platform. All such changes to the Privacy Policy are effective immediately when posted to the Platform and apply to all access to and use of the Platform thereafter. Your continued use of the Service constitutes your agreement to any updated Privacy Policy on a prospective basis.
CONTACT US
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by using our form or by mail using the details provided below:
For the purposes of Article 27 of the GDPR and the UK GDPR, VeraSafe has been appointed as Heat Dance’s representative in the European Union and the United Kingdom for data protection matters. VeraSafe can be contacted in addition to the Heat Dance team, only on matters relating to your Personal Data. To make such an inquiry, please contact VeraSafe using any of the following methods:
European Union
Contact form: https://www.verasafe.com/privacy-services/contact-article-27-representative
Telephone: +42 228 881 031
Address: VeraSafe Ireland Ltd., Unit 3D North Point House, North Point Business Park, New Mallow Road, Cork T23AT2P, Ireland
United Kingdom
Contact form: https://www.verasafe.com/privacy-services/contact-article-27-representative
Telephone: +44 204 532 2003
Address: VeraSafe United Kingdom Ltd., 37 Albert Embankment, London SE1 7TL, United Kingdom
For the purposes of the Australian Privacy Act 1988 (Cth), you can contact our Privacy Compliance Officer at:
With reference to Article 37 of the GDPR and the UK GDPR, we have appointed VeraSafe as our Data Protection Officer (DPO). While you may contact us directly, VeraSafe can also be contacted on matters related to the processing of Personal Data. VeraSafe’s contact details are:
VeraSafe
100 M Street S.E., Suite 600
Washington D.C., 20003, USA
Email: [email protected]
Web: https://www.verasafe.com/about-verasafe/contact-us/
Updated January 3, 2024