Body Volume Privacy Statement
We follow strict security procedures to maintain User privacy and confidentiality. Protecting privacy is really important to us. This Privacy Statement explains the processes used in the collection and use of personal information that we receive through our services. This Privacy Statement does not apply to any third-party websites, services or applications, even if they are accessible through our Services. Please make sure that you have read and understand our Terms of Service. This Privacy Statement applies to personal data collected by us via the BVI App. This Privacy Statement is posted on the Bodyvolume.com web site.
Future revisions to this Privacy Statement
This Privacy Statement may be revised from time to time. Any material changes will be notified to you by posting them on the Bodyvolume.com web site or by sending you an email confirming the date of change.
Collection and use of Data
The primary reason for collecting personal data is to improve the accuracy and User experience of BVI app so to overall improve our services for Users, and to improve health and fitness management. We do not identify or collect personal data other than is described below. There is no link to personal identity and the information is anonymous.
We take reasonable administrative, physical and electronic measures designed to protect the information collected (including personal information) about users from unauthorised access, use or disclosure. However, please be aware that no method of transmitting information over the Internet or storing information is completely secure. Accordingly, we cannot guarantee the absolute security of any information or data.
User personal data
Occasionally we will collect certain personal information that could be used to identify the User in connection with use of the BVI App. Should you choose to transmit your results to us, we will be able to access and collect your email address, age, height, weight, gender, and scan results. This information will be stored securely. (This information is within the Date Protection Act 2018 (UK) and General Data Protection Regulation (EU).
Personal information collected by the BVI app is anonymous and non-personal data. The information is limited to: height, weight, age, gender, level of fitness, and the body mapping points which is transmitted in an encrypted form to the BVI software engine for processing located on our servers in London, UK. Post-processing, newly generated personal data is sent back to the mobile device in an encrypted form including: volume of body fat, visceral fat, waist to hip ratio, BMI and a BVI number. This information is not stored by us.
The absence of data such as surname, telephone number, address / email address or body features alleviates the need for this data to be protected under the DPA (UK) or GDPR (EU). The user information is stored on the mobile device and can only be accessed by the User and is outside the scope of the DPA (UK), GDPR (EU) and Caldicott Guardian Principles
The BVI app will not permit the User to submit and process personal data on any person under the age of 18. The information from the BVI app by us is used to collect broad demographic information for research use.
We do not ask for or collect and therefore do not link IP addresses to personally identifiable information of Users. The Users scans are not sent to the server but are deleted prior to data transmission.
User information collected by the BVI app is not linked to personal data that could be used to identify an individual. (If a user choses not to provide particular personal details we may be unable to provide the service to them as incomplete data collection will lead to incorrect outcome results).
From time to time we may share aggregated demographic information with our partners for anonymous research purposes by scientific and research collaborators subject to the data remaining anonymised and non- attributable to an identifiable individual. This anonymous data is transferable across jurisdictional borders under appropriate non-disclosure agreements.
In using the Bodyvolume.com website and downloading the BVI app, you consent to the collection and use of information by us as described above.
The purpose of processing your data
Select Research processes your personal data to provide and administer services to perform tasks relating to delivering our products and services. This data processing is based on your consent. These services include, but are not limited to; surveys to track satisfaction and inform improvement, newsletters, and access to learning material.
The lawful basis for processing your data
Select Research relies on your consent to process your personal data for any of our services as per Article 6(1)(a) of the GDPR.You do not have to provide your consent and you can withdraw your consent at any time.
If consent is not provided
If you do not provide your consent for the IPO to process your personal data for a specific service that is offered under the lawful basis of your consent then we might not be able to provide that service to you in full.
The right to withdraw consent
Where the IPO is relying on your consent to process your personal data, you have the right to withdraw your consent at any time. If you are unsure how to withdraw your consent please contact the Data Protection Officer above.
You do not have the right to withdraw consent if the IPO is not relying on your consent to process your data.
You have the following rights regarding your personal data which is processed under the lawful basis of your consent:
· you have the right of access to your data
· you have the right to correct your data if it is incorrect
· you have the right to ask for your data to be deleted
· you have the right to ask for a copy of your data to be transferred to another organisation
· you have the right to withdraw your consent at any time
If you wish to exercise your rights please contact the Data Protection Officer.
Automated decision making
Automated decisions mean that a decision concerning you is made automatically on the bases of a computer determination (using software algorithms), without human review. For example, we use automated decisions to assess body composition in our API and our apps. We have implemented measures to safeguard the rights and interests of individuals whose personal information is subject to automated decision-making.
When we make an automated decision about you, you have the right to contest the decision, to express your point of view and to require a human review of the decision. You can exercise this right by contacting the Data Controller at the address below.
How to lodge a complaint
If you have a complaint regarding the processing of your personal data then please contact the Data Controller at the address listed below . You also have the right to lodge a complaint with the supervising authority, the Information Commissioner’s Office (ICO), at any time. Should you wish to exercise that right the full details are available at the ICO website.
We may use automated data collection tools such as Cookies and Web Beacons to collect certain information.
Information Related to Use of the Services
Our servers automatically record certain information about how a User uses our Services (we refer to this information as “Log Data”). Log Data may include information such as a User’s Internet Protocol (IP) address, browser type, operating system, the web page that a User was visiting before accessing our Services, the pages or features of our Services to which a User browsed and the time spent on those pages or features, search terms, the links on our Services that a User clicked on and other statistics. We use Log Data to administer the Services and we analyse (and may engage third parties to analyze) Log Data to improve, customize and enhance our Services by expanding their features and functionality and tailoring them to our Users’ needs and preferences. We may use a Users IP address to generate aggregate, non-identifying information about how our Services are used.
Information Sent by Your Mobile Device
We may collect certain information that your mobile device sends when you use our Services, like a device identifier, User settings and the operating system of your device, as well as information about your use of our Services. This information is not transmitted through use of the BVI app.
When you use our bodyvolume.com website, we may collect and store information about your location by converting your IP address into geo-location or by accessing your mobile device’s GPS coordinates or location if you enable location services on your device. We may use location information to improve and personalize our Services for you. If you do not want us to collect location information, you may disable that feature on your mobile device.
Information shared with Third Parties
Occasionally we may need to share anonymised results that you have chosen to transmit to us. This will only be done with your full consent and we will only share height, weight, age, gender, level of physical activity, and scan results. All personal identifying information, such as name, date of birth, or email address will be removed prior to sharing. Information such as your email address or name will be replaced with a user number to allow tracking of results over a period of time. This information will be processed at our headquarters: Select Research Ltd, Malvern Hills Science Park, Geraldine Road, Malvern, UK, WR14 3SZ.
We will not share any User Personal information that we have collected from the BVI app or regarding User except as described below:
Information Shared with Our Services Providers
We may engage third-party services providers to work with us to administer and provide the Services. These third-party services providers have access to your personal information only for the purpose of performing services on our behalf and are expressly obligated not to disclose or use your personal information for any other purpose.
Information Disclosed in Connection with Business Transactions
Information that we collect from our Users, including Personal information is considered to be a business asset. If we were to be acquired by a third party as a result of a transaction such as an acquisition or asset sale or if our assets are acquired by a third party in the event we go out of business or enter bankruptcy, some or all of our assets, including your Personal information may be disclosed or transferred to a third party acquirer in connection with the transaction.
Information Disclosed for Our Protection and the Protection of Others
We will cooperate with governments and law enforcement officials or private parties to enforce and comply with the law. We may disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate: (i) to respond to claims, legal process (including subpoenas); (ii) to protect our property, rights and safety and the property, rights and safety of a third party or the public in general; and (iii) to stop any activity that we consider illegal, unethical or legally actionable activity.
We may from time to time send you newsletters and e-mails that directly promote our Services. When you receive such promotional communications from us, you will have the opportunity to “opt-out” (either through contacting us by email to email@example.com, or by following the unsubscribe instructions provided in the e-mail you receive). We do need to send you certain communications regarding the Services and you will not be able to opt out of those communications – e.g., communications regarding updates to our Terms of Service or this Privacy Statement or information about billing.
Modifying Your Information
You can access and modify the Personal information in the BVI app only through the device. We do not have access to this information. If you want us to delete your other personal information, please contact us at bodyvolume.com (contact us) with your request. We’ll take steps to delete your information as soon we can, but some information may remain in archived/backup copies for our records or as otherwise required by law.
Do Not Track Signals
The bodyvolume.com website does not have the capability to respond to “Do Not Track” signals received from various web browsers.
Links to Other Sites
Your Personal information may be transferred to, and maintained on, computers located outside of your state, province, country or other jurisdiction where the privacy laws may not be as protective as those in your jurisdiction. If you’re located outside the United States and choose to provide your personal information to us, we may transfer your personal information to the United States and process it there.
Our policy toward children
Our Services are not directed to people under 18 or children under 13 and we do not knowingly collect Personal information from children under 13. If we learn that we have collected Personal information of a child under 13 we will take steps to delete such information from our files as soon as possible.
California Privacy Rights
California residents may request and obtain from us, once a year, free of charge, a list of third parties, if any, to which we disclosed their personal information for direct marketing purposes during the preceding calendar year and the categories of PII shared with those third parties. If you are a California resident and wish to obtain that information, please submit your request by sending an email to firstname.lastname@example.org with “California Privacy Rights” in the subject line.
In the UK
We will only use the information that we collect about User lawfully and in accordance with the Data Protection Act 2018 and GDPR (EU). If we intend to transfer User information outside the EEA (European Economic Area) we will obtain your consent first.
Any personal data is destroyed within 1 month following the end of the agreed contract, or earlier at the instruction of the Data Controller if the statutory retention period is shorter than the term of the agreement. The removal of data will always be in consultation with the Data Controller.
If you wish to cancel your account or request that we no longer use your personal information to provide you the Service, you may delete your account by sending a request to delete your account to email@example.com. We may retain and use your information as necessary to comply with our legal obligations, resolve disputes, or enforce our agreements. Consistent with these requirements, we will try to delete your information quickly upon request. Please note, however, that there might be latency in deleting information from our servers and backed-up versions might exist after deletion. In addition, we do not delete from our servers’ files any information that you have in common with other users. While retention requirements can vary by country, we generally apply the retention periods noted below. Please contact us if you have any questions about our retention periods.
Marketing. We store information used for marketing purposes indefinitely until you unsubscribe. Once you unsubscribe from marketing communications, we add your contact information to our suppression list to ensure we respect your unsubscribe request.
Interactions on Our Service. We may store any information about your interactions on our Services or any content created, posted or shared by you on our Services (e.g., pictures, comments, support tickets, and other content) indefinitely after the closure your account for the establishment or defence of legal claims, audit and crime prevention purposes.
Web Behaviour Data. We retain any information collected via cookies, clear gifs, flash cookies, webpage counters and other technical or analytics tools up to one year from expiry of the cookie or the date of collection.
Telephone Records. As required by applicable law, we will inform you that a call will be recorded before doing so. Any telephone calls with you may be kept for a period of up to six years.
The data controller responsible for your personal information for the purposes of the applicable European Union data protection law is:
Select Research Ltd
Malvern Hills Science Park
Telephone: +44 (0) 1684 219149
If you have any questions about this Privacy Notice or our data collection practices, please contact us at the address, telephone number or email listed above and specify your country of residence and the nature of your question.