Privacy Policy

Effective Date: 06OCT2024

1. Introduction

Welcome to Well-Rounded. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website and tell you about your privacy rights and how the law protects you.

2. Data We Collect

We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:

– Identity Data: Includes age, first name, and last name,.

– Contact Data: Includes email address and phone number.

– Employer-Provided Contact Data: Includes name and email address shared with us by a company representative as part of participation in our corporate wellness program.

3. How We Use Your Data

We will use your personal data for the following purposes:

– To send you weekly, non-personalized health and fitness information.

– To communicate with you regarding updates, offers, and promotions related to Well-Rounded.

– To tailor workouts for large segments of our demographic based on the information you provide.

3.1 Corporate Wellness Participants

If your employer has enrolled you in our wellness program, we will use your name and email address solely for the purpose of sending weekly wellness content. We do not track individual health data or provide individualized advice. You may unsubscribe at any time via the link in each email or by contacting us directly.

4. Data Protection

4.1. Security Measures

We are committed to ensuring the security of your personal data. We implement a variety of security measures, including but not limited to:

– Encryption: All data transferred between our site and our users is encrypted using industry-standard SSL (Secure Socket Layer) technology.

– Secure Servers: We store your personal data on secure servers provided by Mailchimp, which is compliant with industry standards for data protection.

– Access Controls: Access to personal data is limited to authorized personnel only, and is managed through secure authentication methods.

4.2. Compliance with Data Protection Laws

We process your data based on consent, depending on how you engage with our services:

For individual users: You provide consent directly when signing up for our newsletter or submitting your information through our website.

For corporate wellness participants: Consent may be obtained directly from you or through your employer acting on your behalf. In either case, you may opt out at any time.

You have the right to access, correct, delete your personal data, and to restrict or object to certain types of processing. To exercise these rights, contact us at contact@well-rounded-health.com.

– California Consumer Privacy Act (CCPA) – California, USA: For users in California, we comply with the CCPA, which grants you the right to know what personal data we collect, the right to request the deletion of your data, and the right to opt out of the sale of your data (though we do not sell personal data).

– User Rights: California residents can request a copy of their personal data or request deletion by contacting us at contact@well-rounded-health.com.

– Personal Information Protection and Electronic Documents Act (PIPEDA) – Canada:

We obtain consent for the collection, use, and disclosure of your personal data.

For individual users: Consent is provided at the time of signup.

For corporate participants: Consent may be granted by your employer or during onboarding.

Canadian users can access or correct their personal data by contacting us at contact@well-rounded-health.com.

4.3. Data Breach Notification

In the event of a data breach, we will notify affected users and relevant regulatory authorities within the timeframe required by applicable laws. Notifications will include the nature of the breach, the data involved, and recommended steps users can take.

4.4. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Data will then be securely deleted or anonymized.

4.5. Third-Party Compliance

We use Mailchimp to manage our email communications. Mailchimp complies with GDPR, CCPA, and other applicable data protection laws. We regularly review third-party vendors to ensure ongoing compliance.

4.6. International Data Transfers

Your data may be transferred, stored, or processed in a country other than your own. By using our services, you consent to this transfer. We ensure such transfers comply with applicable legal safeguards.

4.7. Engagement Reporting (Corporate Wellness Only)

For companies enrolled in our corporate wellness program, we may provide non-identifiable engagement summaries (e.g., open rates) to the employer to help assess participation. We will never share individual-level data without explicit user consent.

5. User Rights

You have the right to:

– Access: Request a copy of the personal data we hold about you.

– Correction: Request that we correct any inaccurate or incomplete data.

– Deletion: Request the deletion of your data, where applicable.

– Restriction: Request the restriction of processing your data under certain circumstances.

– Objection: Object to the processing of your data where we are relying on a legitimate interest.

To exercise any of these rights, please contact us at contact@well-rounded-health.com.

6. Updates to This Policy

We may update this policy from time to time to reflect changes in our practices or in the law. We will notify you of any significant changes by posting a notice on our website or by sending an email.

7. Contact Information

If you have any questions about this data protection policy or our privacy practices, please contact us at: contact@well-rounded-health.com.