We collect information about you in a variety of ways depending on how you interact with us and our websites, mobile applications (where applicable), products, and services, including:

The following provides examples of the type of information that we collect in a variety of contexts and how we use that information.

Please note, some of the information described above is mandatory for the performance of certain services, and if not provided, you may not be able to utilize or participate in some of our online services or features.

In addition to the purposes and uses described above, we use information in the following ways:

Although the sections above describe our primary purpose in collecting your information, in many situations we have more than one purpose. For example, if you complete an online purchase, we may collect your information to perform our contract with you, but we also collect your information as we have a legitimate interest in maintaining your information after your transaction is complete so that we can quickly and easily respond to any questions about your order. As a result, our collection and processing of your information is based in different contexts upon your consent, our need to perform a contract, our obligations under law, and/or our legitimate interest in conducting our business.

To the extent we maintain and use personal information in a deidentified form, we will not attempt to reidentify the information, except for the purpose of determining whether our deidentification processes satisfy our legal obligations.

In addition to the specific situations discussed elsewhere in this Privacy Notice, we may disclose personal information in the following situations:

Some jurisdictions give you a right to make the following choices regarding your personal information:

Please note, not all of the rights described above are absolute, and they do not apply in all circumstances. In some cases, we may limit or deny your request because the law permits or requires us to do so, or if we are unable to adequately verify your identity. We will not discriminate against individuals who exercise their privacy rights under applicable law.

You may exercise the rights described above through our online portal or by contacting us as indicated in the “Contact Information” section below. If you are a California resident, you may also call our toll-free number at 1-800-317-2739. If we refuse to honor a request, you may appeal our refusal by contacting us with the subject line “Appeal.”

Note that, as required by law, we will require you to prove your identity. We may verify your identity by phone call or email. Depending on your request, we will ask for information such as your name, email address and telephone number. Following a request, we will use reasonable efforts to supply, correct or delete personal information about you in our files.

In some circumstances, you may designate an authorized agent to submit requests to exercise certain privacy rights on your behalf. If you are an authorized agent submitting a request on behalf of an individual, you must attach a copy of a completed Authorized Agent Designation Form  indicating that you have permission to act on another person's behalf.

No method of transmission over the internet, or method of electronic storage, is fully secure. While we use reasonable efforts to protect your personal information from unauthorized access, use, or disclosure, we cannot guarantee the security of your personal information. In the event that we are required by law to inform you of a breach to your personal information we may notify you electronically, in writing, or by telephone, if permitted to do so by law.

Some of our websites and mobile applications permit you to create an account. When you do you will be prompted to create a password. You are responsible for maintaining the confidentiality of your password, and you are responsible for any access to or use of your account by someone else that has obtained your password, whether or not such access or use has been authorized by you. You should notify us of any unauthorized use of your password or account.

We retain your personal information for only as long as necessary to fulfill the purposes outlined in this Privacy Notice, including for the purposes of satisfying any legal, accounting, or reporting requirements, unless a longer retention period is required or permitted by law. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of the information, the purposes for which we obtained the information and whether we can achieve those purposes through other means, as well as applicable legal requirements.

As a multi-national company, we transmit information between and among our affiliates. As a result, your information may be processed in a foreign country where privacy laws may be less stringent than the laws in your country. Nonetheless, where possible we take steps to treat personal information using the same privacy principles that apply pursuant to the law of the country in which we first received your information. By submitting your personal information to us you agree to the transfer, storage, and processing of your information in a country other than your country of residence including, but not necessarily limited to, the United States.

For your convenience, we may provide links to websites and other third-party content or services that we do not own or operate. The websites and third-party content to which we link may have separate privacy notices or policies. Please note, we have no control over the privacy practices websites, or services that we do not own. We encourage you to review the privacy policies of any third-party website or application for details about such third party’s privacy practices.

Our Privacy Notice includes an “effective” and “last updated” date. The effective date refers to the date that the current version took effect. The last updated date refers to the date that the current version was last substantively modified.

Our websites and online services are not intended for children under the age of 13 and we do not knowingly collect personal information from children under age 16, without parental consent. Children under the age of 13 should not provide their personal information to us.

If you have any questions, comments, or complaints concerning our privacy practices, or if you need to access this Privacy Notice in an alternative format due to having a disability, please contact us at the appropriate address below. We will attempt to respond to your requests and to provide you with additional privacy-related information.

If you are not satisfied with our response, and are in the European Union or United Kingdom, you may have a right to lodge a complaint with your local supervisory authority.

California law requires us to disclose the following additional information related to our privacy practices. If you are a California resident, the following privacy disclosures apply to you in addition to the rest of the Privacy Notice.

Because we offer services to consumers in Washington, we are required to disclose the following additional information related to our data handling practices. If you are a Washington resident, the following privacy disclosures apply to you in addition to the rest of the Privacy Notice. For purposes of this notice, ‘consumer health data’ includes personal information that is linked or reasonably linkable to you and that identifies your past, present, or future physical or mental health status. This also includes any information that we process to associate or identify you with consumer health data.

The following chart describes (a) the categories of consumer health data collected; (b) the categories of recipients of such data, (c) the purpose for which the data is collected, including how the data will be used, and (d) the categories of sources from which the data is collected:

Consumers in the state of Washington have the following rights:

We have 45 days to respond to your request for access or to withdraw consent, and 30 days to respond to an authenticated deletion request. Note that we will require you to prove your identity. We may verify your identity by phone call or email. Depending on your request, we will ask for information such as your name, email address, telephone number and studio location.

You may exercise the rights described above through our online portal or by contacting us as indicated directly below. If we refuse to honor a request, you may appeal our refusal by contacting us with the subject line “Appeal.”