Last Updated: September 11, 2024
TeamBuildr, LLC (“TeamBuildr,” “we,” or “us”) offers athletes, coaches, business owners, and individuals online strength and conditioning, and gym management software platforms through websites and mobile apps offered by TeamBuildr and its brand, GymStudio. Throughout this Privacy Statement, we refer to the software, websites, mobile apps, and solutions offered by TeamBuildr and Gym Studio, and the content and features made available through our websites, mobile apps, and solutions collectively as the “Services.” When we mention TeamBuildr’s Services (or “our” Services) throughout this policy, this encompasses offerings by both TeamBuildr, and its brand GymStudio. This Privacy Statement provides information about personal information we collect, use, and share when you interact with or use our Services.
Privacy Statement Overview
Changes to this Privacy Statement
What Kinds of Personal Information Do We Collect?
How Do We Collect Personal Information?
How Do We Use Personal Information?
Legal Bases for Processing
Cookies, Analytics, and Tracking Technologies
When and What Personal Information Do We Disclose, "Sell" or "Share"?
What Choice Do You Have About Your Personal Information?
What Other Rights Do You Have Concerning Your Personal Information?
Data Retention
Children’s Privacy
Data Storage and Data Transfers
Links to Other Websites
Contact Us
When we use the term “personal information” in this Privacy Statement, we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household. For example, this includes information such as your name, address, and device information that can reasonably be linked to you or your household, such as your IP address. Personal information does not include information that is deidentified or aggregated.
By accessing or using our Services, you are agreeing to the terms of this Notice. IF YOU DO NOT AGREE TO OUR PROCESSING OF YOUR PERSONAL INFORMATION AS CONTEMPLATED IN THIS PRIVACY STATEMENT, PLEASE DO NOT USE OUR SERVICES.
We collect personal information from you when you visit our website or use our services, including identifiers, IP address, activity information, and information about your workouts, classes taken, and similar information. We compile this information into a profile about you, which is sometimes used to draw inferences about you. Our Services also use cookies, and we collect information from and about you using cookies and similar technologies. We collect and process your information in order to provide you with services, to market our services, and to fulfill our contractual obligations to our customers. We primarily process personal data pursuant to our contractual obligations, or where we have your consent to process. We disclose personal data to service providers (sometimes called “processors” or “subprocessors”) who help us offer our Services. We retain personal information we collect about you in line with our data retention policies and procedures, which are designed to retain information for only as long as necessary to fulfill the processing purpose.
You have rights and choices in the personal information we collect from you, including rights to access and know, delete and erase, update and correct, and to object to certain processing activities. You can exercise these rights by contacting us directly, or by contacting us through our EU and UK representative, if you are located in the EU or UK. You also have the right to complain to a supervisory authority about our data processing practices. We are located in the United States and your information will be transferred to and processed in the United States when you use our Services.
When you access or use our Services, you acknowledge that you have read this Notice and understand its contents. Your use of our Services and any dispute over privacy is subject to this Privacy Statement and our Terms of Use (including any applicable disclaimers of warranties, limitations on damages, and the resolution of disputes).
If you have questions about our privacy practices, including if you do not understand them, please contact us using the information in the Contact Us section, below.
We may update this Privacy Statement at any time as we deem appropriate. Where the changes are material, we will post them here in advance and, if the changes are likely to affect you personally, we will also attempt to contact you directly (such as via email, if we have your email address). It is important that you check back from time to time and make sure that you have reviewed the most current version of this Privacy Statement. We will update the “last updated” date at the top of this Statement so that you are aware of when the last changes were made.
TeamBuildr collects a variety of personal information and in a variety of ways, depending on how you interact with our Services. For example, when you request information from TeamBuildr, you may be asked to provide personal information so that we can respond to your request, such as basic contact information (e.g., name, e-mail address, phone number). If you become a registered user of the Services, we collect additional information. If you visit our website, we may automatically collect information from or about you.
In particular, we have collected the following categories of personal information in the last 12 months:
Category |
Examples |
Collected |
A. Identifiers. |
Real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address and email address. |
YES |
B. Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). |
Real name, address and telephone number. Some personal information included in this category may overlap with other categories. |
YES |
C. Protected classification characteristics under California or federal law. |
Age (40 years or older) and sex ((including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions) |
YES |
D. Commercial information. |
None. |
YES |
E. Biometric information. |
Sleep, health, or exercise data. |
YES |
F. Internet or other similar network activity. |
Browsing history, search history and information on a consumer’s interaction with a website, application, or advertisement. |
YES |
G. Geolocation data. |
None. |
NO |
H. Sensory data. |
None. |
YES |
I. Professional or employment-related information. |
None. |
NO |
J. Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)). |
None. |
NO |
K. Inferences drawn from other personal information. |
Profile reflecting a person’s preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. |
YES |
|
|
|
We may not collect each of the above categories of personal information from every individual who accesses or uses our Services.
We may also collect non-personal information from you when you use our Services. Non-personal information is information that does not identify or relate to a particular consumer or household, and includes information that is de-identified or aggregated so that it is no longer identifiable. An example of non-personal information we collect includes the number of users who visit a given webpage on our website, when not tied to your IP address or other identifier.
We collect personal information directly from you, automatically through your use of our Services, and from third parties and publicly available sources.
Personal Information We Collect Directly From You: We may ask you for personal information for certain purposes when we interact with you, such as to assist in setting up an account. We also directly collect personal information from you when you contact us or otherwise provide us with personal information, such as when you fill in your profile on your account. You decide how much information to share with us in most cases, but not sharing required information may limit your ability to take full advantage of certain Services.
Personal Information We Collect Automatically: Subject to the exercise of your privacy choices, when you use or interact with our Services, we receive and store information generated by your activity, such as usage data and other information automatically collected from your browser or mobile device. This information may include your IP address; browser type and version; preferred language; operating system and computer platform; the full Uniform Resource Locator (URL), clickstream to, through, and from our websites, including date and time; products or services you viewed or searched for while on our website or using a website linked to our Services; and areas of our website that you visited. We also may log the length of time of your visit and the number of times you visit. We may assign you one or more unique identifiers to help keep track of your future visits.
In most cases, this information is automatically obtained by various tracking technologies. Tracking technologies we use include “cookies” “clear GIFs,” and pixel tags. When we refer to “cookies” or “tracking technologies” in this Statement, we intend for it to encompass these and similar technologies. You can read about how we may use tracking technologies here. Please see our Cookie Notice for more information about the cookies that we use.
Information We Collect From Third Parties: We may obtain personal information about you from third parties and publicly available sources. This includes information from or via social networks, referrals, and leads, and information from our clients and customers that you interact with, such as the team or organization your account is associated with, or from a studio you attend a class at or purchase a product from by using our Services. The information we collect from these sources often includes information such as additional contact information, group affiliations, occupational or training information and other information. Please do not supply any other person's personal information to us, unless we prompt you to do so.
TeamBuildr uses personal information in a variety of ways and for a variety of purposes, depending on how you interact with us, and depending on your role in interacting with us. For example, if you are a coach associated with an organization and have an administrator account, we use your personal information to administer your organization’s account and to bill you for services, among other reasons. If you are an individual athlete, we use your information to provide you, and the enterprise account you are associated with, information about your strength, conditioning, and performance. If you are a GymStudio user, we use your information to register you for classes at the studio you have indicated, and notify the studio of your enrollment.
TeamBuildr uses your information for the following purposes:
We may not use your personal information for all the above purposes.
We rely on the following legal bases to process your personal information:
Our Services utilize various cookies, tracking technologies, and analytics features. We use these tools for a variety of reasons, including to ensure the security, integrity, and proper functioning of our Services, to analyze and understand traffic to our Services from an analytics perspective, for our legitimate interests to provide you with Services, and to market our Services to you. Below describes some of the specific tools you may encounter while using our Services:
Analytics Providers
Analytics providers are third-party companies that collect information when people use our Services or see the ads we serve on our websites. These companies sometimes use cookies, web beacons, pixel tags, and similar technologies to keep track of what content or ads users view, how long they spend on different pages, how they arrived on a particular page (e.g., through a search query, link from another website, or a bookmark), and how they respond to the ads we show them. Subject to the other provisions of this Privacy Statement and your privacy choices, we may use analytics providers to analyze your information so that we can better understand our website visitors and their use of our Services.
Tracking Technologies
Subject to the other provisions of this Privacy Statement, our Services use cookies, clear GIFs, pixel tags, and similar tracking technologies, which we refer to collectively in this Statement as “cookies.”
Cookies
Generally speaking, "cookies" are text files that are placed in your device's browser that can be used to help recognize your browser across different web pages, websites, and browsing sessions. Cookies are stored on your device or in "local storage." The HTML cookies that TeamBuildr uses or has used, and some of the information that the cookies provide, are listed here. Your browser settings may enable you to manage whether you accept HTML cookies. We may use cookies or similar technologies in combination with personal information we collect from you through other methods to enhance and personalize your experience on our Services.
TeamBuildr discloses information to third parties in a variety of circumstances, and for a variety of purposes. Most notably, the TeamBuildr platforms are designed to connect users with the studio they attend classes at or purchase products from, or the team or organization they affiliate with. Accordingly, if you are a GymStudio user, we disclose personal information to the studio(s) you sign up for classes with, purchase products from, or otherwise indicate your interaction with through our Services, and if you are a TeamBuildr user, we share information with the team or organization that your TeamBuildr account is affiliated with, or that you direct us to.
In addition to these disclosures which are at the core of our business, TeamBuildr relies on service providers to offer our Services. The following third parties act as service providers (also called “processors” or “subprocessors” in some jurisdictions) to TeamBuildr. These service providers process personal information for the reasons set forth in this Statement. TeamBuildr discloses personal information to the following service providers for a business purpose:
Name of Third Party |
Name of Software or Service |
Describe Function of Software or Service and Privacy Notice URL |
Amazon |
Amazon Web Service (US-East) including: - EC2 - RDS - S3 |
Cloud storage, servers, databases and hosting. Privacy Notice: https://aws.amazon.com/privacy/
|
Hubspot |
Marketing Hub / Service Hub |
Inbound marketing, sales & customer service. Privacy Notice: https://legal.hubspot.com/privacy-policy |
Intercom |
In-App Messaging |
Sales, marketing, and support. Privacy Notice: https://www.intercom.com/terms-and-policies#privacy |
Twilio Sendgrid |
Twilio & Sendgrid |
Communication: Email, SMS, in-app chat. Privacy Notice: https://www.twilio.com/legal/privacy |
Fusion Sport |
Smartabase |
Athletic management system. Privacy Notice: https://www.fusionsport.com/smartabase-privacy-policy/ |
Catapult Sports |
Athlete Management |
Athletic workout management. Privacy Notice: https://www.catapultsports.com/privacy-policy |
Kinduct |
Athlete Management |
Athlete data consolidation & visualization. Privacy Notice: https://www.kinduct.com/privacy-notice/ |
Edge10 Group |
Edge10 + Athlete RMS |
Athletic Performance Analytics. Privacy Notice: https://www.edge10group.com/privacy.html |
In addition to the above service providers, we also disclose, or may disclose, your personal information in the following circumstances:
Please note that in some instances, the use of your personal information by third parties may be also governed by that entity’s Privacy Statement, in addition to or instead of this Statement. For more information, please see the “Information About Studios and Teams,” and the “Links to Other Websites” sections below.
As described in the above section “When and What Personal Information Do We Disclose?” TeamBuildr’s Services work by connecting users to studios and/or teams, and in order to offer the Services, TeamBuildr discloses personal information to the studios and/or teams that your account is associated with or that you interact with through our Services (which includes booking a class at that studio). These studios and teams are not part of TeamBuildr, so this Privacy Statement does not necessarily describe their privacy practices, and is not directly applicable to them. These studios and teams may have their own Privacy Statements and practices, which may differ from TeamBuildr’s. We encourage you to ask any studios and/or teams your account is linked to or that you interact with through our Services about their privacy practices, and to review their applicable Privacy Statement(s).
What Choices Do You Have Regarding Your Personal Information?
You have the following choices concerning how your personal information is collected or used:
You also have the following rights with respect to your personal information:
General Description of Right |
Description of How Website / App Users Take Advantage of the Right |
Access or Disclosure: A right to request disclosure of your Personal Information, and to receive additional details regarding the Personal Information we collect and its use purposes, including any third parties with which we share information. This includes the right to know the categories of information we have collected about you in the last twelve months, as well as the categories of sources of personal information we have collected about you. |
Request this by emailing us at privacy@teambuildr.com. |
Rectification: The right to correct inaccurate personal information and complete incomplete personal information. |
The Services allow you to edit your profile. If you need additional assistance, email your request to privacy@teambuildr.com |
Erasure/Deletion: The right to deletion of personal information that we have collected, subject to certain exceptions. |
Request this by emailing us at privacy@teambuildr.com. |
Data Portability: In response to a request for disclosure, the right to receive your Personal Information in a readily useable format. |
Request this by emailing us at privacy@teambuildr.com. We will provide you with an export of your data in CSV format. |
Objection to Processing and Sensitive Information: The right to object to processing for profiling, targeted advertising, cross-context behavioral advertising, and statistical, scientific, or historical research purposes. You also have the right to limit certain uses and disclosures of your sensitive personal information, to the extent we collect this information. |
Request this by emailing us at privacy@teambuildr.com. Set your cookie preferences to decline placing targeting cookies on your computer or device, although this may be of limited usefulness. Unsubscribe to marketing emails from us. |
Objection to Commercial Sale: The right to object to the “sale” or “sharing” of your personal information, as those terms are defined in relevant laws, subject to certain exceptions, and the right to know which categories of personal information we “sold” or “shared” about you in the last twelve (12) months. |
Instruct us not to transfer your Personal Information in return for anything of value by emailing us at privacy@teambuildr.com. Email us to know which categories of personal information we “sold” or “shared,” and to which categories of recipients the information was “sold” or “shared.” |
Appoint a Representative to Exercise your Rights (California): If you are a California resident, you have the right to appoint a third party to exercise the rights you are afforded under relevant law on your behalf. |
Request this by emailing us at privacy@teambuildr.com along with any of the above requests. |
File a Complaint with the Relevant Supervisory Authority (EU and UK): If you are an EU or UK resident, you have the right to complain about our data processing to the relevant supervisory authority. If you reside in the UK, that is the ICO, and if you reside in the EU, that is the Dutch Data Protection Authority. |
The relevant supervisory authority is the Dutch Data Protection Authority. Their contact information is available here: https://autoriteitpersoonsgegevens.nl/en/contact. Their postal address is PO Box 93374, 2509 AJ The Hague. |
When you make any of the above requests regarding your personal information, we will verify your request before endeavoring to fulfill it. We will require sufficient information of you in order to verify your request, and any information we collect through our verification procedures will be used only to verify the request.
If you would like to exercise any of the above rights, or if you have any questions about your rights, please contact us as described above or by using the information in the Contact Us section below.
The time period for which we retain your personal information depends on the purposes for which we collected it . TeamBuildr will keep your personal information only for as long as we have a legitimate and lawful purpose to do so. The information we collect may be stored and processed in servers in the United States and wherever TeamBuildr and our service providers have facilities around the globe. We will delete, destroy, or de-identify personal information when it is no longer necessary and we have no lawful basis to retain the information, consistent with TeamBuildr’s data retention practices and policies.
We use reasonable technical, physical, and organizational measures to safeguard your personal information. While we take reasonable and appropriate measures towards data security, please keep in mind that no method of transmission via the internet, websites, or mobile apps is 100% secure and we cannot guarantee the security of your personal information. You can do your part to assist us in securing your personal information by changing your password at regular intervals, and by not sharing your login credentials with anyone else.
Information for EU and UK Residents
TeamBuildr and its brands are based in the United States. Accordingly, if you are an EU or UK resident and access our Services, your personal data (referred to elsewhere in this Statement as “personal information”) will be processed in the United States. The data protection and processing laws in the United States may offer a different level of protection than the laws in the jurisdiction in which you reside. TeamBuildr may be required by law to disclose your personal data in certain circumstances, such as in response to inquiries or requests from government authorities, or to respond to judicial process in the United States. If we are compelled to provide information about you pursuant to judicial process, we will endeavor to provide you with notice of the request prior to supplying the information, where permitted by law. We rely on your consent to process personal data in the United States. If you do not want your personal data processed in the United States, please do not use TeamBuildr’s Services.
As noted above in the “What Choices Do You Have Regarding Your Personal Information?” section, we endeavor to provide EU and UK residents with rights afforded to data subjects in EU and UK jurisdictions regarding the processing of personal data. If you would like to exercise any rights you believe you have under applicable data protection law, including the rights specified in the section above, please contact us using the information in the Contact Us section of this Statement, or contact our EU Representative using the information located in the “Our EU and UK Representative” section.
Requests for access, correction, amendment or deletion should be sent to: privacy@teambuildr.com or to our EU/UK Representative, listed below.
If personal data covered in this Statement is to be used for a new purpose that is materially different from the purpose for which the personal data was originally collected or subsequently authorized, TeamBuildr will provide you with an opportunity to choose whether to have your personal data so used or disclosed. To the extent required by the applicable law TeamBuildr obtains opt-in consent for certain uses and disclosures of Sensitive Personal Data, if we collect this type of information.
Our EU and UK Representative
TeamBuildr and GymStudio, which process the personal data of individuals in the European Union, European Economic Area and/or UK, in either the role of ‘data controller’ or ‘data processor’, have appointed DataRep as their Data Protection Representative for the purposes of GDPR in the EU/EEA and The Data Protection Act 2018 (as amended) in the UK.
If TeamBuildr or GymStudio have processed or are processing your personal data, you may be entitled to exercise your rights under GDPR in respect of that personal data. For more details on the rights you have in respect of your personal data, please refer to the European Commission (https://ec.europa.eu/info/law/law-topic/data-protection/data-protection-eu_en) or the national Data Protection Authority in your country.
TeamBuildr and GymStudio take the protection of personal data seriously, and have appointed DataRep as their Data Protection Representative in the European Union so that you can contact them directly in your home country. DataRep has locations in each of the 27 EU countries, the UK, and Norway & Iceland in the European Economic Area (EEA), so that TeamBuildr and GymStudio customers can always raise the questions they want with them.
If you want to raise a question to TeamBuildr or GymStudio, or otherwise exercise your rights in respect of your personal data, you may do so by:
PLEASE NOTE: when mailing inquiries, it is ESSENTIAL that you mark your letters for ‘DataRep’ and not ‘TeamBuildr, LLC’, or your inquiry may not reach us. Please refer clearly to TeamBuildr LLC. in your correspondence. On receiving your correspondence, TeamBuildr or GymStudio are likely to request evidence of your identity, to ensure your personal data and information connected with it is not provided to anyone other than you
TeamBuildr’s websites do not knowingly collect information from children under thirteen (13) years of age. If you are under thirteen (13), do not send any information to us through our websites. In the event that we discover that a child under the age of thirteen (13) has provided personal information to us through our website without appropriate parental/guardian consent, we will immediately delete the child’s personal information.
TeamBuildr is committed to upholding and complying with its COPPA obligations, and in supporting schools in their compliance with FERPA. In furtherance of this, we participate in the iKeepSafe COPPA safe harbor program and are FERPA certified.
TeamBuildr is headquartered in the United States, but may use service providers throughout world. As such, we and our service providers may transfer your personal information to, or access it in, jurisdictions that may not provide equivalent levels of data protection as your home jurisdiction. As indicated above, we rely on your consent to transfer information to the jurisdiction in which it is processed, if that is different from the jurisdiction in which you reside. If you do not consent, please let us know so that we can stop processing your personal information.
EU-US Data Privacy Framework (“EU-US DPF”) and the UK Extension to the EU-U.S. DPF
TeamBuildr complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, as set forth by the U.S. Department of Commerce. TeamBuildr has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov.
In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, TeamBuildr commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF.
Users may elect to arbitrate unresolved complaints but prior to initiating such binding arbitration, you must: (1) contact TeamBuildr and afford us the opportunity to resolve the issue; (2) seek assistance from TeamBuildr’s designated independent recourse mechanism above; and (3) contact the U.S. Department of Commerce and afford the Department of Commerce time to attempt to resolve the issue. Each party shall be responsible for its own attorney’s fees. Please be advised that, pursuant to regulations, the arbitrator(s) may only impose individual-specific, non-monetary, equitable relief necessary to remedy any violation of the principles with respect to the individual. TeamBuildr is subject to the investigatory and enforcement powers of the U.S. Federal Trade Commission (FTC).
As required under the principles, when TeamBuildr receives information and then transfers it to a third-party service provider acting as an agent on TeamBuildr’s behalf, TeamBuildr has certain liability if both (i) the agent processes the information in a manner inconsistent with the principles and (ii) TeamBuildr is responsible for the event giving rise to the damage.
Our Services may contain links that you can click on to take you to other websites for your convenience and information. These websites may be operated by companies not affiliated with TeamBuildr. Linked websites may have their own privacy notices and terms of use, which we strongly suggest you review if you visit those websites. We are not responsible for the content, privacy practices, or use of any websites that are not affiliated with TeamBuildr.
If you have questions or concerns regarding this Privacy Statement, or would like to update information we have about you or your preferences, please contact us by writing to us at TeamBuildr LLC, ATTN: Privacy Manager, 9466 Georgia Ave #2141 Silver Spring, MD 20910, or by emailing us at privacy@teambuildr.com.
If you are in the EU or UK, you may contact us by writing to us at TeamBuildr Ventures Limited, Coliemore House, Coliemore Road Dalkey, Co. Dalkey, by emailing us at privacy@teambuildr.com, or by contacting us through our EU/UK Representative. Please note that if you do not contact us through our EU/UK Representative and you reach out to us directly, your email will be processed in the United States.