Last revision date: 15/05/18
We "BoxMate" are committed providing a clear and robust policy acting in a fully transparent manner with regard to how your data is collected, used, stored and shared.
In the below policy we will cover the exact information that we collect from you as part of using our service and what it is used for along with covering how you can request to view, update or remove your data.
Who does this policy involve?
- BoxMate LTD | Referred to in this policy and others as “BoxMate,” “the service,”, "our service" “we,” “us,” or “our”
- Fitness Provider | A "business" or "organisation" using BoxMate to provide content for their "Members"
- Member | A "member" or "customer" of the fitness provider using BoxMate for performance tracking
- User | Any person using BoxMate ("member", "provider", "user", "you", "your")
What types of information do we collect?
BoxMate facilitates the relationship between Customers and Businesses. In doing so we act as a data controller for a Customer’s data jointly with the Business. BoxMate will collect your name, email address and gender.
Personal data is only ever collected voluntarily by the User or provided directly by the Business.
We will only ever use personal data in the way that it was originally provided for.
During normal operations, we collect information about how Users interact with the Service, such as IP address, browser, operating system, referral source, length of visit, and clickstream data. This data contains a identifier that allows us to determine the User who made the request. This data is used to troubleshoot, analyse, optimise, and improve the Service, and is retained indefinitely for compliance and troubleshooting purposes.
How do we collect personal information?
Personal information is either collected directly by the User, or it is provided by the Business on behalf of a User.
A Business may provide information on behalf of a User if they are switching to BoxMate from an alternate system, or if they are setting up a User’s account for them.
BoxMate does not respond to “Do Not Track” or similar signals from browsers.
How we use personal information
To facilitate the relationship between a User and a Business
Fitness Providers use BoxMate to track their members progress and provide content for them to record against. BoxMate allows Businesses to view and manage personal information from Users in order to facilitate the normal operations of a Business.
To provide, troubleshoot, and improve our services
It may sound obvious, but BoxMate uses a User’s personal information to operate by displaying this data to that User as well as to Businesses they are associated with. Additionally, BoxMate may use this information to help troubleshoot issues, such as looking up a User by name or email address. We will also use personal information to help improve the Service, such as by analysing data to prioritise features relevant to our Users.
To provide announcements about the Service
Occasionally we will notify Users of updates to the Service, changes to policies, and to disclose any issues that may put their personal information at risk.
BoxMate is not intended to be directly used by anyone under the age of 15. A parent or guardian may utilise the Service on behalf of a child so long as they are using the Service for its intended purpose. If we learn someone under the age of 15 has used the Service, we will take appropriate action to remove that User’s personal information and restrict any future access by that User.
Disclosure to other parties
A User’s personal information, except for name and email address, is always provided within the context of a Business. The name of the Business will be plainly visible during registration and whenever personal information is being provided by a User. The relevant Business will be acting as a data controller and must abide by the policies outlined in this policy.
We may employ companies and individuals to manage or provide the Service on our behalf, (including, without limitation, payment processing, support, hosting, and administration). These parties will only be given access to data necessary to perform the required task, must fully comply with this policy, and cannot use any data acquired from BoxMate for any other purpose than what they were tasked to do.
BoxMate will comply with any lawful request we receive from a government, law enforcement agency, or private party that we believe to be reasonably necessary and appropriate to prevent or stop any activity that we consider to be illegal, unethical, unauthorised, harmful, or malicious.
We use industry standard backup procedures and will retain backups of our database for 14 days, which means that once a piece of data has been deleted from our system, it will take 14 days before it is cleared from our backups.
Requesting, changing, or deleting data
Most information about a User is able to be viewed and updated through the Service. Upon request, to the extent as required by applicable law, BoxMate will grant Users reasonable access to personal information that it holds about them. BoxMate will take reasonable steps to allow a User to correct, amend, or delete personal information. You make such requests by emailing firstname.lastname@example.org. We may require the User to verify their identity before we disclose any personal information.
Updates to this policy
Continued use of the Service will constitute acknowledgement and acceptance of the Service.
BoxMate LTD is incorporated in the United Kingdom with our principal place of business being 2 Beech View Drive, Buxton, Derbyshire, SK17 9NS. You may contact us via mail at that address, or email at email@example.com.