Body Volume Privacy Statement
We follow strict security procedures to maintain User privacy and confidentiality. Protecting privacy is really important to us. This Privacy Statement explains the processes used in the collection and use of personal information that we receive through our services. This Privacy Statement does not apply to any third-party websites, services or applications, even if they are accessible through our Services. Please make sure that you have read and understand our Terms of Service. This Privacy Statement applies to personal data collected by us.
For product-specific details, please see the section at the bottom of this document to find out how your data will be processed through your application and during use of a specific product. This Privacy Statement is posted on the Bodyvolume.com website.
FUTURE REVISIONS TO THIS PRIVACY STATEMENT
This Privacy Statement may be revised from time to time. Any material changes will be notified to you by posting them on the Bodyvolume.com website or by sending you an email confirming the date of change.
COLLECTION AND USE OF PERSONAL DATA
We do not identify or collect personal data other than is described below. There is no link to personal identity and the information is anonymous.
USER PERSONAL DATA
In using the Bodyvolume.com website and downloading BVI products, you consent to the collection and use of information by us as described above.
For the purpose of processing your data, Select Research, processes your personal data to provide and administer services to perform tasks relating to delivering our products and services. This data processing is based on your consent. These services include but are not limited to; surveys to track satisfaction and inform improvement, newsletters, and access to learning material.
THE LAWFUL BASIS FOR PROCESSING YOUR DATA
Select Research relies on your consent to process your personal data for any of our services as per Article 6(1)(a) of the GDPR. You do not have to provide your consent and you can withdraw your consent at any time.
IF CONSENT IS NOT PROVIDED
If you do not provide your consent for us to process your personal data for a specific service that is offered under the lawful basis of your consent then we might not be able to provide that service to you in full.
THE RIGHT TO WITHDRAW CONSENT
Where we are relying on your consent to process your personal data, you have the right to withdraw your consent at any time. If you are unsure how to withdraw your consent please contact the Data Protection Officer above.
You do not have the right to withdraw consent if we are not relying on your consent to process your data.
You have the following rights regarding your personal data which is processed under the lawful basis of your consent:
· you have the right of access to your data
· you have the right to correct your data if it is incorrect
· you have the right to ask for your data to be deleted
· you have the right to ask for a copy of your data to be transferred to another organisation
· you have the right to withdraw your consent at any time
If you wish to exercise your rights please contact the Data Protection Officer.
AUTOMATED DECISION MAKING
Automated decisions mean that a decision concerning you is made automatically on the bases of a computer determination (using software algorithms), without human review. For example, we use automated decisions to assess body composition in our API and our apps. We have implemented measures to safeguard the rights and interests of individuals whose personal information is subject to automated decision-making.
When we make an automated decision about you, you have the right to contest the decision, to express your point of view and to require a human review of the decision. You can exercise this right by contacting the Data Controller at the address below.
HOW TO LODGE A COMPLAINT
If you have a complaint regarding the processing of your personal data then please contact the Data Controller at the address listed below . You also have the right to lodge a complaint with the supervising authority, the Information Commissioner’s Office (ICO), at any time. Should you wish to exercise that right the full details are available at the ICO website.
We may use automated data collection tools such as Cookies and Web Beacons to collect certain information.
Information Related to Use of the Services
Our servers automatically record certain information about how a User uses our Services (we refer to this information as “Log Data”). Log Data may include information such as a User’s Internet Protocol (IP) address, browser type, operating system, the web page that a User was visiting before accessing our Services, the pages or features of our Services to which a User browsed and the time spent on those pages or features, search terms, the links on our Services that a User clicked on and other statistics. We use Log Data to administer the Services and we analyse (and may engage third parties to analyse) Log Data to improve, customise and enhance our Services by expanding their features and functionality and tailoring them to our Users’ needs and preferences. We may use a users IP address to generate aggregate, non-identifying information about how our Services are used.
Information Sent by Your Mobile Device
We may collect certain information that your mobile device sends when you use our Services, like a device identifier, User settings and the operating system of your device, as well as information about your use of our Services. This information is not transmitted through use of the BVI Pro app or the BVI App.
When you use our bodyvolume.com website, we may collect and store information about your location by converting your IP address into geo-location or by accessing your mobile device’s GPS coordinates or location if you enable location services on your device. We may use location information to improve and personalize our Services for you. If you do not want us to collect location information, you may disable that feature on your mobile device.
Information Shared with Our Services Providers
We may engage third-party services providers to work with us to administer and provide the Services. These third-party services providers have access to your personal information only for the purpose of performing services on our behalf and are expressly obligated not to disclose or use your personal information for any other purpose.
Information Disclosed in Connection with Business Transactions
Information that we collect from our Users, including Personal information is considered to be a business asset. If we were to be acquired by a third party as a result of a transaction such as an acquisition or asset sale or if our assets are acquired by a third party in the event we go out of business or enter bankruptcy, some or all of our assets, including your Personal information may be disclosed or transferred to a third party acquirer in connection with the transaction.
Information Disclosed for Our Protection and the Protection of Others
We will cooperate with governments and law enforcement officials or private parties to enforce and comply with the law. We may disclose any information about you to government or law enforcement officials or private parties as we, in our sole discretion, believe necessary or appropriate: (i) to respond to claims, legal process (including subpoenas); (ii) to protect our property, rights and safety and the property, rights and safety of a third party or the public in general; and (iii) to stop any activity that we consider illegal, unethical or legally actionable activity.
We may from time to time send you newsletters and e-mails that directly promote our Services. When you receive such promotional communications from us, you will have the opportunity to “opt-out” (either through contacting us by email to email@example.com, or by following the unsubscribe instructions provided in the e-mail you receive). We do need to send you certain communications regarding the Services and you will not be able to opt out of those communications – e.g., communications regarding updates to our Terms of Service or this Privacy Statement or information about billing.
Modifying Your Information
You can access and modify the Personal information in the BVI app only through the device. We do not have access to this information. If you want us to delete your other personal information, please contact us at bodyvolume.com (contact us) with your request. We’ll take steps to delete your information as soon we can, but some information may remain in archived/backup copies for our records or as otherwise required by law.
Do Not Track Signals
The bodyvolume.com website does not have the capability to respond to “Do Not Track” signals received from various web browsers.
Links to Other Sites
Your Personal information may be transferred to, and maintained on, computers located outside of your state, province, country or other jurisdiction where the privacy laws may not be as protective as those in your jurisdiction. If you’re located outside the United States and choose to provide your personal information to us, we may transfer your personal information to the United States and process it there.
Our policy toward children
Our Services are not directed to people under 18 or children under 13 and we do not knowingly collect data from children under 13. If we learn that we have collected data of a child under 13 we will take steps to delete such information from our files as soon as possible.
California Privacy Rights
California residents may request and obtain from us, once a year, free of charge, a list of third parties, if any, to which we disclosed their personal information for direct marketing purposes during the preceding calendar year and the categories of PII shared with those third parties. If you are a California resident and wish to obtain that information, please submit your request by sending an email to firstname.lastname@example.org with “California Privacy Rights” in the subject line.
In the UK
We will only use the information that we collect about User lawfully and in accordance with GDPR (EU). If we intend to transfer User information outside the EEA (European Economic Area) we will obtain your consent first.
Any personal data is destroyed within 1 month following the end of the agreed contract, or earlier at the instruction of the Data Controller if the statutory retention period is shorter than the term of the agreement. The removal of data will always be in consultation with the Data Controller.
If you wish to cancel your account or request that we no longer use your personal information to provide you the Service, you may delete your account by sending a request to delete your account to email@example.com. We may retain and use your information as necessary to comply with our legal obligations, resolve disputes, or enforce our agreements. Consistent with these requirements, we will try to delete your information quickly upon request. Please note, however, that there might be latency in deleting information from our servers and backed-up versions might exist after deletion. In addition, we do not delete from our servers’ files any information that you have in common with other users. While retention requirements can vary by country, we generally apply the retention periods noted below. Please contact us if you have any questions about our retention periods.
Marketing. We store information used for marketing purposes indefinitely until you unsubscribe. Once you subscribe from marketing communications, we add your contact information to our suppression list to ensure we respect your unsubscribe request.
Interactions on Our Service. We may store any information about your interactions on our Services or any content created, posted or shared by you on our Services (e.g., pictures, comments, support tickets, and other content) indefinitely after the closure your account for the establishment or defence of legal claims, audit and crime revention purposes.
Web Behaviour Data. We retain any information collected via cookies, clear gifs, flash cookies, webpage counters and other technical or analytics tools up to one year from expiry of the cookie or the date of collection.
Telephone Records. As required by applicable law, we will inform you that a call will be recorded before doing so. Any telephone calls with you may be kept for a period of up to six years.
Data is handled differently depending on the BVI products being used. If you have downloaded from your app store, you will be using the BVI app. If you are included in a company-specific pilot study, you will be using the demo app with specific instructions, unless otherwise instructed.
BVI Pro stores no data about the user or the subject at any stage during use of the app and as such no information can be stored or shared with third parties. Analytics about usage (if opted in) are anonymised before being stored securely.
The user data and data collected during the scans are stored solely on the users own device, it is up to the user to keep this data secure and Select Research Ltd. holds no responsibility for data stored within the app on the users own device(s).
The data controller responsible for your personal information for the purposes of the applicable European Union data protection law is:
Select Research Ltd
Malvern Hills Science Park
Telephone: +44 (0) 1684 219149
If you have any questions about this Privacy Notice or our data collection practices, please contact us at the address, telephone number or email listed above and specify your country of residence and the nature of your question.