EGYM Privacy Policy

Last Updated: Aug 05th, 2025

1. Introduction

EGYM provides fitness-related services to consumers and to gyms, health centers, physio practices, fitness facilities, corporate clients, and similar companies (collectively, "Fitness Partners"). This Privacy Policy describes EGYM’s practices regarding information we collect about consumers, and the choices available to consumers regarding such information. Unless otherwise stated, “information” or “personal information” means information relating to an identified or identifiable consumer.

If you are a resident of Alabama, California, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Louisiana, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Nevada, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, or Washington, please see your region-specific terms at the end of this Privacy Policy.

For details about EGYM, including our contact details, see the Contact Us section below.

2. Scope

This Privacy Policy applies to information EGYM collects through the following services (collectively, the “Service”):

Please note that your use of the Service is subject to our applicable terms of use. Click here for terms governing our fitness-related products and services. Click here for terms governing our Wellpass offering.

This Privacy Policy does not apply to:

This Privacy Policy covers our US services. For data practices regarding non-US services, see the EEA Privacy Policy. To the extent we receive information from the EEA, the United Kingdom, or Switzerland, we will treat the information in accordance with the disclosures in the “International Transfer and Data Privacy Framework” section.

3. Collection

This section describes the information we collect and how we collect it.

Information we collect directly from consumers

Your EGYM Account (EGYM ID)

To use most parts of the Service you first create an EGYM Account, also called your EGYM ID. To register, we collect your email address, first and last name, date of birth (to confirm you meet the minimum age for the Service), language preference, and a password you choose. We send you an email asking you to confirm the registration, and we activate your account when you select the link in that email. We create an EGYM Account only where you actively register yourself, for example in an App, on EGYM Equipment, or during onboarding at an EGYM Fitness Hub. Fitness Partners cannot create an EGYM Account for you. Holding a membership with a Fitness Partner, or using a Fitness Partner’s access control system, does not by itself create an EGYM Account. Once activated, you can use the same EGYM ID to register for and log in to the other EGYM products and Services covered by this Privacy Policy. If you already hold an account with our affiliate EGYM Wellpass, you may instead choose to register using your existing Wellpass credentials, in which case we extend your existing profile for use with the Service and this Privacy Policy applies to that use. Use of your EGYM Account across Fitness Partners. You can use the same EGYM Account at more than one Fitness Partner that uses EGYM technology, such as EGYM Equipment, an EGYM Fitness Hub, or an access control system integrated with EGYM systems. Where you do, and the same email address is held at each Fitness Partner, certain usage events are associated with your EGYM Account. These include check-in and access events generated when an access credential such as a barcode, QR code, RFID chip, or membership card is used at a Fitness Partner access control system connected to EGYM systems. We associate these events with your EGYM Account so that your account can show you a combined view of your activity, for example an overview of your check-ins across the facilities you visit. This combination happens only inside your own EGYM Account. Fitness Partners do not receive access to information from other Fitness Partners. Each Fitness Partner sees only the information made available to it, with your express consent, in connection with your use of the Service at that Fitness Partner. Logging in to Fitness Partner websites. Where a Fitness Partner offers it, you may use your EGYM ID to log in to that Fitness Partner’s website and use functions offered there, such as class bookings or self-service features. For that login we store only the fact that you registered for the Fitness Partner’s website using your EGYM Account credentials and the times of your logins. The Fitness Partner controls the functions offered on its own website, and we do not receive information about which of those functions you view or use. See the Fitness Partner’s own privacy policy for details.

Information you provide

When you use the Service, you may be asked to provide information to us, such as when you subscribe to our emails, enter a promotion or competition we sponsor, or contact support. The categories of information we collect include:

Please do not provide any information that we do not request.

Information we automatically collect

When you use the Service, we and third parties we work with automatically collect information from the browser or device you use. The categories of information we automatically collect include:

This information is automatically collected through cookies and other tracking technologies incorporated into our Service, as described below:

We use these tracking technologies for a variety of purposes, including to help make the Service work, personalize your browsing experience, prevent fraud and assist with security, perform measurement and analytics, and provide advertising (including targeted advertising).

We also collect precise location data from your use of the Apps with your consent. We use precise location data for purposes such as verifying your location, locating gyms in your area, and delivering or restricting relevant content based on your location.

App usage and interaction data. We use App usage and interaction data to analyze how the Apps are used, to find and fix errors, and to develop and improve the Apps and their features. Where you have not consented to personalized processing of this data, we collect and process it only in anonymized form, without direct or indirect identifiers, and use it for statistical analysis of App use and general product improvement. Where you have consented, we process it in personalized or pseudonymized form, associated with your EGYM Account or a device, so that we can understand how individual features are used and improve navigation, content, and features. Personalized App usage and interaction data records that an action took place, not its result: it does not include measurement values, training results, BioAge, or heart rate data. You can withdraw your consent at any time in the App settings, after which we process this data only in anonymized form. Withdrawal does not affect data already collected in personalized form.

Device permissions. Some App features need your permission to access functions of your device. We ask for permission when you first open the App or when you first use the relevant feature, and you cannot use the feature if you decline. We request access to: your location, to check your device location and provide location-based features such as showing the nearest Fitness Partner; push notifications, to send you information from your Fitness Partner; your calendar, only to add classes you book in the App; your camera, only to scan barcodes; your photo library, only where you choose a photo for your profile; Apple Health, only where you choose to save data from the App to Apple Health or to synchronize Apple Health data with the App; and your contacts, only where you use the “refer a friend” feature. You can withdraw any permission at any time in your device settings, and uninstalling the App removes all permissions granted to it.

To exercise choice around tracking technologies, see the "Your Privacy Choices" section below.

Information relating to your fitness and workouts

When you use the Service, you may be asked to provide information to us relating to your fitness and workouts. The categories of information we collect include:

In addition, the Service may allow you to collect metrics relating to your fitness and workouts. The categories of metrics we collect include:

We only obtain these metrics at your direction and/or with your consent. Metrics may be collected through sensors integrated within the Service or where you link the Service to third party fitness trackers, wearables, and devices.

EGYM Fitness Hub The EGYM Fitness Hub is a self-service station in a Fitness Partner’s facility that onboards you to the Service and runs tests and measurements. It uses 3D camera technology to record and analyze your physical characteristics and performance, and to identify and correct incorrect movement while you perform a set exercise sequence. Certain features, such as the squat feature, capture photographs of you so that you can review and correct your posture after completing an exercise sequence or test. We store those images in your EGYM Account so that you can view them again later, for example to compare your progress. The EGYM Fitness Hub also configures EGYM Equipment to your measurements, training goals, and needs, and stores your results and progress in the Apps where you use them. You can view your results on the EGYM Fitness Hub screen at the time and again later after logging in with your RFID chip or fitness wristband, or in the Apps.

Third party body composition devices Some EGYM Fitness Hub units connect to third party smart scales, and some units, such as the EGYM Fitness Hub seca edition, have body composition analysis built in using seca bioelectrical impedance analysis technology. Where the analysis runs through an application provided and operated by seca, seca acts as a processor or service provider for the Fitness Partner operating the EGYM Fitness Hub, and that Fitness Partner is responsible for the measurement itself, for any additional information collected in the seca application, and for obtaining and documenting any consent it requires. We receive only the calculated results of the body composition analysis, and we process those results as a controller in order to store them in your EGYM Account and display them to you on the EGYM Fitness Hub and, depending on your settings, in other EGYM applications. Where a separate third party scale is connected to the EGYM Fitness Hub, that provider may collect further information from you on its own responsibility, and information about this is shown on the screen of the relevant scale.

Information we collect from Fitness Partners

As part of our provision of services to Fitness Partners, we may collect information about you from Fitness Partners. For example, a Fitness Partner to which you belong or schedule a booking may disclose to us your contact identifiers, characteristics or demographics, commercial or transactions information, bookings and attendance, training data, physical characteristics, training session data, and physical characteristics exercise data. Also, we may receive information about you if you are an employee of a Fitness Partner involved in our Wellpass offering.

With your consent, information your Fitness Partner holds about you may also be taken into your EGYM profile so that you can use additional features, such as retrieving a training plan your trainer created or managing your membership. That information may include your membership start and end dates, photo, date of birth, gender, training experience, and training plans and templates. You may also consent to certain master data, such as your email address, being synchronized and corrected automatically between us and your Fitness Partner, so that both sides hold accurate and current information and the Service operates correctly. You can withdraw either consent at any time through your EGYM Account.

Our processing of information received from Fitness Partners is governed by the terms of our agreements with those Fitness Partners. To the extent we process information as a processor or service provider on behalf of a Fitness Partner, the processing of your information is subject to Fitness Partner’s privacy policy and not this Privacy Policy. To the extent we process information as a controller, business, or third party, the processing of your information is subject to this Privacy Policy.

If you wish to exercise choice around how a Fitness Partner processes your information, please contact the Fitness Partner directly. We are not responsible for Fitness Partner data practices, and you should carefully review their policies.

Information we collect in the Business-to-Business Context

If you engage with us in a business-to-business context, we may collect business contact data about you. This information is not subject to this Privacy Policy except as required by applicable law.

Information we collect from Other Sources

We also collect information from other sources. The categories of other sources from which we collect information include:

Information We Infer

We infer new information from other information we collect to generate information about your likely preferences or other characteristics.

Sensitive Information

To the extent any of the categories of information we collect are sensitive categories of information under applicable law, such as consumer health data, we process such information only for the limited purposes permitted by applicable law. See our Consumer Health Data Privacy Policy for specific disclosures regarding consumer health data.

Information about your training and fitness activities, your body composition and metabolic measurements, your flexibility measurements, your heart rate and performance data, your posture and the images described above, your BioAge, and, depending on their content, entries you type into EGYM Genius, may be consumer health data or otherwise sensitive information under applicable law. Where applicable law requires it, we collect and process that information with your consent, which we ask for when you register for the Service, and we use it only for the purposes permitted by applicable law for information of that kind. You can withdraw that consent at any time, with effect going forward. Because this information is necessary to operate core parts of the Service, withdrawing your consent means we can no longer provide those parts of the Service to you, and in most cases we will close and delete your EGYM Account. If you are unsure about this, please contact us as set out in the “Contact Us” section below.

4. Purposes for Collection and Use

We collect and use information in accordance with the practices described in this Privacy Policy. Our purposes for collecting and using information include:

Notwithstanding the above, we may use information that does not identify you (including information that has been aggregated or deidentified) for any purpose except as prohibited by applicable law. Where we deidentify information, we commit to maintain and use the deidentified information in deidentified form and not attempt to reidentify it. For details on your choices regarding how we use information about you, please see the "Your Privacy Choices" section below.

5. Disclosure

We disclose information about you in accordance with the practices described in this Privacy Policy. The categories of persons to whom we disclose information include:

Notwithstanding the above, we may disclose information that does not identify you (including information that has been aggregated or deidentified) except as prohibited by applicable law. For details on your choices regarding how we disclose information about you, please see the "Your Privacy Choices" section below.

6. Third Parties

We may link to or offer parts of our Service through websites and services controlled by third parties. In addition, we may integrate technologies, including those disclosed in the " Collection " section above, controlled by third parties. Except where third parties act as our service providers, they, and not us, control the purposes and means of processing any information they collect from you, and you should contact them directly to address any concerns you have about their processing. Third party data practices are subject to their own policies and disclosures, including what information they collect, your choices, and whether they store information in the U.S. or elsewhere. We encourage you to familiarize yourself with and consult their privacy policies and terms of use.

7. Automated Decisionmaking Technologies

Some of the information we collect may be processed through technologies that use computation to execute decisions, including those derived from machine learning, statistics, or artificial intelligence (“automated decisionmaking technologies”). Specifically, if you choose to generate a personalized training plan through the Service, we may process your age, gender, measurements (like e.g. body weight, body height, body composition, etc.) and work out experience through automated decisionmaking technologies that use physical or biological identification or profiling to generate the training plan. We also use aggregated and deidentified data derived from the information described above, including aggregated insights from training data, measurements, fitness goals, feedback, generated plans, and fully anonymized chat content, to train, test, evaluate, and improve EGYM Genius and the models and algorithms that support it. Where required by law, we obtain your consent before using personal information to generate your personalized training plan.

EGYM Genius. EGYM Genius is the feature through which we generate and adjust personalized training plans using artificial intelligence and algorithms. Using EGYM Genius is optional. It is available to you in a Fitness Partner Branded App in self-service mode once you have completed onboarding at an EGYM Fitness Hub, and a trainer can also use it to build a plan for you. EGYM Genius takes account of the whole training floor at your Fitness Partner, including EGYM Equipment, connected equipment from other manufacturers, and equipment that is not connected. To create and adjust your plan it processes information including your gender, weight and height, the results of strength and progress measurements taken on the EGYM Fitness Hub, your BioAge, your fitness goals such as weight loss, muscle gain, rehabilitation, or improved endurance, your training data from EGYM Equipment and activities you record yourself in an App, information from fitness trackers, wearables, and devices you have chosen to connect, your feedback, and the plan generated for you. EGYM Genius also draws on an internal EGYM database that combines fully anonymized training data from users with rating data derived from sports science, as described in the “Purposes for Collection and Use” section above. EGYM Genius evaluates your training data to give you direct feedback, identify weak points, and suggest targeted exercises, and shows your progress to you in the App. EGYM Genius provides fitness recommendations and does not make decisions that produce legal or similarly significant effects concerning you.

EGYM Genius chat. EGYM Genius optionally lets you type additional context at the level of a training plan or an individual session, for example about your current training situation, your physical condition, or your training preferences. EGYM Genius evaluates what you type automatically, may ask you follow-up questions, and adjusts your plan or an individual session where you confirm the change. We store the content you enter, the history of the exchange, the responses of the system, and the summaries of your training goals and requested adjustments that we derive from them, associated with your EGYM Account, and we delete them no later than four hours after the exchange. If you confirm a suggested adjustment, the resulting change is retained as part of your training plan in accordance with our general retention practices, even after we delete the underlying chat content and history. We process this information to provide the chat feature, to understand and act on what you enter, to ask any necessary follow-up questions, to implement the adjustments you confirm, and to monitor and improve the accuracy, security, and performance of EGYM Genius. For these purposes, authorized personnel and service providers may review a limited number of interactions, subject to appropriate access controls. EGYM does not train models using personal information collected through user interactions with EGYM Genius; any model training uses only aggregated and deidentified data as described above. Depending on what you type, your entries may be consumer health data or otherwise sensitive information under applicable law, in particular where you describe your physical condition, pain, discomfort, injuries, or illness. Please do not enter any information you do not want us to process.

EGYM Genius provides fitness recommendations and is not intended to provide medical diagnosis, treatment, or emergency advice or to replace advice from a qualified healthcare professional

Our service providers may process personal information on our behalf to host, test, evaluate, or support EGYM Genius. They are contractually restricted from using that information to train models for themselves or other customers or for purposes unrelated to providing services to EGYM.

8. Your Privacy Choices

This section describes the choices available to you regarding your information.

Region-Specific Choice

Some regions provide additional rights by law for you to exercise choice, as described in our region-specific terms. See the applicable region-specific terms for details.

EGYM Account

If you hold an EGYM account with us, you may access, update, and remove certain information that you have voluntarily submitted to us or delete your EGYM Account through your account settings. We will address your request in accordance with our data retention practices.

If you have linked your EGYM Account with any Equipment or third party fitness trackers, wearables, or devices, you can unlink such Equipment or devices through your device and/or account settings. Please note that unlinking your accounts will not affect any information previously disclosed through the linking. We are not responsible for the data practices of any third parties, and we recommend that you carefully review their privacy policies and terms of use.

You can also manage your consents in the privacy settings of your EGYM Account, including your consent to permit trainers to view information through the EGYM Trainer App, your consent to usage and status reports being provided to your Fitness Partner, and your consent to information being taken from or synchronized with your Fitness Partner. You manage your consent to personalized processing of App usage and interaction data in the App settings. Withdrawing a consent takes effect going forward and does not affect processing or disclosures that already took place. What withdrawal means depends on the consent. Withdrawing consent to trainer visibility or to usage and status reports stops any further visibility or transfer to your Fitness Partner, and your Fitness Partner remains responsible for information it already received. Withdrawing consent to personalized processing of App usage and interaction data means we process that data only in anonymized form from that point. Withdrawing your consent to the processing of training, measurement, and consumer health data means we can no longer provide the parts of the Service that depend on it, and in most cases we will close and delete your EGYM Account, as described in the “Sensitive Information” section above.

Browser and Device Controls

Communications

If you request information material offered free-of-charge (e.g. white paper, guidelines) from us, participate in a free webinar or request similar free services, we process the e-mail address you provide in the relevant form also for the purpose of informing you about our range of products and services, updates/news and offerings. Apart from that and where required by law in the applicable jurisdiction, we will obtain opt-in consent prior to sending you promotional emails.

For all jurisdictions, you can unsubscribe from our promotional emails, including our newsletters, at any time by following the instructions as provided in our emails to click on the unsubscribe link or emailing us at privacy@egym.com. Please note that your opt-out is limited to the email address used, will only affect the subscription you indicate, and will not affect non-promotional communications, such as those about your account, transactions, servicing, or EGYM's ongoing business relations.

You can also opt-out of receiving push notifications from us by adjusting your device settings or uninstalling the app.

Sharing Activity

If you have an EGYM Account, you may change at any time how you share certain information about your account activity with other Service users through your account settings. Please note EGYM is not responsible for any public information shared by you prior to limiting your settings.

9. Children

Our Service is not designed for users under 16 and we do not knowingly collect personal information (as defined by the U.S. Children's Online Privacy Protection Act, or "COPPA") from children under 16. We collect your date of birth on registration in order to confirm that you meet the minimum age for the Service. If you are a parent or guardian and believe we have collected personal information from your child, please contact us as set out in the "Contact Us" section below. We will delete the personal information in accordance with COPPA.

10. Security

We have security measures in place designed to safeguard information about you against loss, destruction, misuse, or unauthorized access or disclosure. For example, we periodically review our internal security measures and policies, and implement measures designed to restrict unauthorized personnel from accessing information about you. Nevertheless, you should bear in mind that transmission of information over the internet is never entirely secure, and we cannot guarantee the security of information about you.

11. Retention

We retain information for the length of time that is reasonably necessary for the purpose for which it was collected, and as necessary to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements.

Information associated with your EGYM Account, your profile, and your use of the Service is generally retained for as long as your account and your relationship with us continue. Where we process information on the basis of your consent, including training, measurement, and consumer health data, we retain it for as long as your EGYM Account exists and your consent remains in place, and we delete it when you withdraw your consent. Information you enter into the EGYM Genius chat is subject to the shorter period set out in the “Automated Decisionmaking Technologies” section above. Anonymized and aggregated information from which you can no longer be identified is not subject to these periods.

Duplicate accounts. In some cases our systems hold two or more user records for the same person. This can arise from information a Fitness Partner holds about you, from your EGYM Account or your EGYM Wellpass account, or from both. It usually happens where you trained at one Fitness Partner in the past and a new record is created with the same email address at a new Fitness Partner, where a Fitness Partner made a spelling error when setting up your record, or where you originally created an account in a Fitness Partner Branded App or as an EGYM Wellpass member and a further record is then created through a Fitness Partner’s management software or a website. A duplicate record can stop you training on EGYM Equipment or logging in to a Site or App. We try to preserve all information in your records. Where that is not possible we delete one record so that you can continue to use the other, and we decide which record to delete by looking at activity, such as which record was updated most recently, holds more current training data, or was last used on EGYM Equipment or to check in. We delete only the record we are satisfied you no longer use actively or that holds less current information, so that the information deleted stays to a minimum and your current settings are preserved. Where the duplicate involves your EGYM Wellpass account, we delete the record that is not linked to EGYM Wellpass.

12. International Transfer and Data Privacy Framework

The information we collect pursuant to this Privacy Policy is governed by U.S. law. Information collected about you may be transferred to and processed in the U.S. and other jurisdictions, including the EEA. Some of the service providers we use, including other members of the EGYM group of companies that provide development and support services for the Service, are located outside the U.S. These jurisdictions may have data protection laws different from those of your country of residence. Your use of the Service or provision of any information therefore constitutes your consent to the transfer to and from, processing, usage, sharing, and storage of information about you in the U.S. and other jurisdictions as set out in this Privacy Policy. If your information is collected in the EEA, the United Kingdom, or Switzerland, we will transfer your information subject to appropriate safeguards, such as Standard Contractual Clauses or the Data Privacy Framework.

EGYM complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. EGYM has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. EGYM has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this Privacy Policy and the EU-U.S. DPF Principles, the UK Extension, and/or the Swiss-U.S. DPF Principles, the Principles will govern. The Federal Trade Commission has jurisdiction over EGYM's compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF.

EGYM's responsibility for personal data it receives in reliance on the DPF and subsequent transfers of that personal data to third parties is detailed in the DPF Principles. Where EGYM relies on the DPF Principles for onward transfers from the EU, UK, and Switzerland, including the onward transfer liability provisions, EGYM remains responsible under the Principles for third-party agents processing personal data on its behalf.

You have the right to ask us not to disclose your personal data to a third party (except where the third party is acting as an agent to perform tasks on our behalf and under our instruction) or purposes materially different than for which the personal data was originally collected or subsequently authorized by you. We will provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized. To request to limit the use and disclosure of your personal information, please email us as set out in the “Contact Us” section below.

For inquiries or complaints regarding our compliance with the DPF, or to exercise your rights, please contact us as set out in the "Contact Us" section below. If we are unable to resolve your complaint directly, you may submit your complaint at no cost to you to JAMS, an alternative dispute resolution provider based in the United States, at https://www.jamsadr.com/DPF-Dispute-Resolution. In the event there are residual complaints that have not been resolved by JAMS, or any other means, you may seek a non-monetary remedy through binding arbitration to be provided to you in accordance with the Data Privacy Framework.

To learn more about the DPF and to view our certification, please visit https://www.dataprivacyframework.gov/.

13. Changes to this Privacy Policy

We reserve the right to change this Privacy Policy from time to time. The revised Privacy Policy will apply as stated when posted. Where required by law, we will provide additional notice or obtain consent.

14. Contact Us

The controller under this Privacy Policy is:

EGYM, Inc.

1401 17th St.

Suite 1500

Denver, CO 80202, USA

United States

If you have any questions about this Privacy Policy, please contact us:

By email: privacy@egym.com

By mail: at the postal address above with Attention: Privacy Compliance

This Privacy Policy has been designed to be accessible to people with disabilities. If you experience any difficulties accessing the information here, please contact us privacy@egym.com.

15. California

Notice at Collection.

For residents of California, a t or before the time of collection of your personal information, you have a right to receive notice of our data practices. Our data practices are as follows:

Right to Know, Correct, and Delete.

You have the following rights under California privacy law:

These rights are verifiable rights, meaning that we need to verify your identity before fulfilling them. To exercise any of these rights, please submit a request through our form here or call our toll free number at 720 900 2526. If you have an account with us, we may require you to use the account to submit the request. In the request, please specify which right you are seeking to exercise and the scope of the request. We will confirm receipt of your request within 10 days and respond to your request within 45 days. We may require specific information from you to help us verify your identity and process your request. If we are unable to verify your identity, we may deny your request.

Right to Opt-Out of Sales and Shares.

To the extent we sell or share your personal information as those terms are defined under California privacy law, you have the right to opt-out of the sale or sharing of your personal information to third parties. To exercise this right, click on "Cookie Settings" below or turn on a recognized opt-out preference signal, such as Global Privacy Control, in your browser or extension. Please note that when you submit an opt-out through either method we do not know who you are within our systems, and your opt-out will apply only to personal information collected from tracking technologies on the specific browser from which you opt-out. If you delete or reset your cookies, or use a different browser or device, you will need to reconfigure your settings. If you want the opt-out to apply to personal information we have about you in our systems, such as your email address, please also submit request through our form here (specifying the right you wish to exercise).

Shine the Light.

If you are a California resident and have an established business relationship with us, you have the right to request a list of the categories of personal information (as defined by Shine the Light) disclosed by us to third parties for their own direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of such third parties. To exercise this right, write us at the email or postal address set out in the Contact Us section above and specify that you are making a “California Shine the Light Request.” We will respond to requests received in accordance with Shine the Light.

Minors.

If you are a California resident under 18 years old and registered to use the Service, you can ask us to remove any content or information you have posted on the Service. To make a request, email us at privacy@egym.com with "California Under 18 Content Removal Request" in the subject line, and tell us what you want removed. We will make reasonable good faith efforts to remove the post from prospective public view, although we cannot ensure the complete or comprehensive removal of the content and may retain the content in accordance with our retention practices.

Additional Details.

You have the right not to receive discriminatory treatment by us for the exercise of any your rights. You have the right to designate an authorized agent to submit requests on your behalf. Except for opt-out requests, we will require written proof of the agent's permission to do so and may verify your identity directly. To the extent permitted by law, all requests must be submitted through the designated methods listed above. Your rights are subject to exceptions and our retention practices.

16. Alabama, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Louisiana, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia

Data Practices.

Residents of Alabama, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Louisiana, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia have a right to receive notice of our data practices. Our practices regarding the collection, use, disclosure, and retention of your personal data are set out in the main Privacy Policy above.

Some of our disclosures of personal data may be considered a “sale” under applicable law, which may include a disclosure for something of value. We also may process your personal data for purposes of targeted advertising. We do not process personal data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning consumers.

Some of the personal data we collect may be considered sensitive personal data under applicable law, including consumer health data and the images described in the “Collection” section above. To the extent we collect sensitive personal data, we collect it with your consent.

Large Language Models. We do not collect or use personal data to train large language models. However, when we sell personal data to third parties, they may use the data to train their own large language models. See their privacy policies for details.

Data Subject Requests.

You may have the following rights under applicable law:

If you are a Minnesota or Oregon resident, you also have the right to receive a list of the specific third parties to which we have disclosed personal data.

If you are a Connecticut or Rhode Island resident, you also have the right to receive a list of third parties to which we have sold personal information.

If you are a Delaware or Maryland resident, you also have the right to obtain a list of third parties to which we have disclosed personal data.

These rights are verifiable rights, meaning that we need to verify your identity before fulfilling them. To exercise any of these rights, please submit a request through our form here or call our toll free number at 720 900 2526. We will respond to your request within 45 days. If you have an account with us, we may require you to use the account to submit the request. We may require specific information from you to help us confirm your identity and process your request. If we are unable to verify your identity, we may deny your request.

Right to Opt-Out of Sales and Targeted Advertising.

You also may have the right to opt-out of the processing of personal data for purposes of targeted advertising or the sale of personal data. To exercise this right, click on "Cookie Settings" below or turn on a recognized opt-out preference signal, such as Global Privacy Control, in your browser or extension. Please note that when you submit an opt-out through either method we do not know who you are within our systems, and your opt-out will apply only to personal data collected from tracking technologies on the specific browser from which you opt-out. If you delete or reset your cookies, or use a different browser or device, you will need to reconfigure your settings. If you want the opt-out to apply to personal data we have about you in our systems, such as your email address, please also submit request through our form here (specifying the right you wish to exercise).

Right to Revoke Consent.

You have the right to revoke consent previously given to us for the processing of your personal data. To revoke consent, write us at the email or postal address set out in the "Contact Us" section above and specify the consent you wish to withdraw. If you withdraw consent, you may not be able to receive certain services related to that consent.

Additional Details.

You have the right not to receive discriminatory treatment by us for the exercise of any your rights. You have the right to designate an authorized agent to submit requests on your behalf. Except for opt-out requests, we will require written proof of the agent's permission to do so and may verify your identity directly. To the extent permitted by law, all requests must be submitted through the designated methods listed above. Your rights are subject to exceptions and our retention practices.

Appeals.

If we refuse to take action on a request, you may appeal our decision within a reasonable period of time by contacting us at privacy@egym.com and specifying your wish to appeal. Within 60 days of our receipt of your appeal, we will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If the appeal is denied, you may submit a complaint to your Attorney General at the links that follow: Alabama, Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Louisiana, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oklahoma, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia.

17. Nevada and Washington

Nevada residents have the right to opt-out of sale of their information. To make a request, please write us at the email or postal address set out in the “Contact Us” section above and specify that you are making a “Nevada Opt-Out of Sale Request.” Your rights are subject to exceptions and our retention practices.

See our Consumer Health Data Privacy Policy for specific disclosures regarding consumer health data subject to Washington law, Nevada law, or other applicable state consumer health privacy law.