ULTIMATE FITNESS GROUP Privacy Policy.

This Policy applies to the personal information we collect related to visitors to our website, www.orangetheory.com (the “Site”), users of our mobile applications (the “App” or “Apps”), visitors to Orangetheory Fitness studios (whether owned by Ultimate or one of our franchisees), and the services available through our Site and App.

By visiting the Site, using or downloading the App, or using any of our services, you acknowledge that your personal information will be handled as described in this Policy. Your use of our Site, App, or services, and any dispute over privacy, is subject to this Policy and our Terms of Use, including its applicable limitations on damages and the resolution of disputes. The Terms of Use are incorporated by reference into this Policy.

If you are a California resident, please review Section 13 “Additional Information for California Residents” for important information about how we collect, use and disclose personal information about California residents and your rights under the California Consumer Privacy Act. Subject to applicable laws, US residents may have additional rights as set forth in Section 14.

If you are a non-US resident, you may locate country-specific privacy policies on the respective websites for each country by visiting our Global List of Orangetheory Locations.

This Policy does not apply to independently-owned and operated franchisees’ collection, use, and disclosure of your information, except as described in this policy with regard to data sharing and change of a franchisee.

This Policy also does not apply to the personal information that we collect about employees, contractors and other personnel related to their working relationship with us, or the personal information that we collect about applicants and candidates for a position with Ultimate. In addition, we may collect, generate, use and disclose aggregate, anonymous, and other non-identifiable data related to our services, which is not personal information subject to this Privacy Policy.

We collect information about you directly from you and from other parties, as well as automatically through your use of our Site and App.

Information We Collect Directly From You. The information we collect from you depends on how you use our Site, App, and Services.

• To Sign Up for a Trial Workout Online. To sign up for a trial workout at an Orangetheory® Fitness studio through our Site or App, you must provide us with your name, email address, phone number, date of birth, your payment information (in order to hold your trial workout reservation), and the studio you would like to attend for your workout. We also will collect information that you provide about any health conditions that could affect your ability to participate in a workout.
  ‍
• To Schedule or Purchase Sessions Online. To create an account to sign up for workout sessions or to purchase sessions online through our Site or our App, you must provide us with your name, physical address, email address, date of birth, phone number, height and weight, payment and billing information, and  username and password. If you complete a membership agreement or sign up for a fitness event, we also collect information that you provide about any health conditions that could affect your ability to participate in a workout. If you do not provide this information, you will not be able to create an online account, complete a membership agreement, or make a purchase.
  
  We will also collect information about the workouts you schedule and information about your purchases. You may also provide information about your preferences, such as your favorite studios and coaches.
  ‍
• When You Visit an Orangetheory Fitness Studio. If you sign up for a trial workout or become an Orangetheory member by registering at an Orangetheory® Fitness studio (whether owned by Ultimate or one of our franchisees), you must provide us or our franchisee (as applicable) with your name, physical address, email address, date of birth, phone number, height and weight, marital status, emergency contact information, and payment and billing information. We or our franchisee (as applicable) also will collect information that you provide about any health conditions that could affect your ability to participate in a workout. If you do not provide this information, we or our franchisee (as applicable) may not be able to offer our services to you.
  
  We or our franchisee (as applicable) also will collect information about the workout sessions you schedule, details about your exercise frequency and goals (as provided by you), and information about your in-studio purchases. We or our franchisee (as applicable) will also collect information when you check in for a workout, such as your name, address, email address, member number, and studio location. If you provide your information to a studio owned by one of our franchisees, the franchisee will share the information you provide to us — please see the Information We Collect from Franchisees section below.
  
  As part of your workout session, you may choose to use our OTBeat® heart rate monitors. If you do so, we will collect your workout session heart rate, and other workout statistics, such as the number of miles run or rowed.
  
  At certain locations you have the option of voluntarily participating in a body scanning program. This scan will measure your body’s muscle mass, fat percentage, and total body water, and will report your overall body composition and body mass index (based on your height, weight, gender, and age). These scans help you understand the effects of your workouts.
  ‍
• When You Express Interest in Purchasing an Orangetheory Franchise. If you express interest in owning an Orangetheory franchise, we will collect your name, physical address, email address, phone number, information about your finances, information about the location in which you are interested in starting your franchise, and any other information you provide to us with your submission.
  ‍
• Information We Collect from Franchisees. As described above, if you visit an Orangetheory Fitness studio owned by one of our franchisees, you will be providing your information directly to the franchisee. When you provide your information to a franchisee (including your in-studio sign up information, purchases you make at a franchise, and your workout information), the franchisee will make this information available to Ultimate. The franchisee, however, handles all billing and account administration, including determining how your information is used for the franchisee’s own marketing purposes in accordance with applicable laws. If you register for a workout at a different location from your home studio, then the owners of both studios — the one at which you completed your workout and your home studio — will have access to information about your workout registration and participation. Information from your OTBeat® heart rate monitor, however, is not shared among franchisees.
  ‍
• Information We Collect from Social Networking Sites. You may log into your online account or our Apps through Facebook. If you log in to your account or link your account to your Facebook profile, you must enter your Facebook email address and password. We will ask that you grant us permission to: (i) access your Facebook basic profile information (this includes your name, profile picture, gender, networks, user IDs, list of friends, date of birth, email address, and any other information you have set to public on your Facebook account); (ii) post to your wall; and (iii) access posts in your newsfeed. If you allow us to have access to this information, then we will have access to this information even if you have chosen not to make that information public through Facebook.
  
  We store the information we receive from Facebook with other information that we collect from you or receive about you in accordance with this Policy. Any social networking site, such as Facebook, controls the information it collects from you pursuant to its own terms. For information about how a social networking site may use and disclose the information it collects about you, including any information you make public through the social networking site, please consult the social network’s privacy policy. We have no control over how any social networking sites use or disclose the personal information they collect about you.
  
  We also collect information about you when you interact with us on social networking platforms. If you message us or tag us in a social network post, we will collect information about your message or the post we are tagged in.
  ‍
• Information We Collect Automatically. We automatically collect information about your use of our Site and Apps through cookies, web beacons, and other technologies, including technologies designed for mobile apps. To the extent permitted by applicable law, we combine this information with other information we collect about you, including your personal information. Please see the section “Cookies and Other Tracking Mechanisms” below for more information.
  
  Site:
  
  • domain name;
  • your browser type and operating system;
  • web pages you view on the Site; links you click on the Site; your IP address;
  • the length of time you visit our Site and or use our Services;
  • the referring URL, or the webpage that led you to our Site; and
  • your device’s location information, with your permission, to help identify Orangetheory Fitness studios located in your area and to help us market the Orangetheory® Fitness services.
  
  App:
  
  • mobile device ID; device name and model; operating system type, name, and version;
  • language information;
  • activities within the App; and the length of time that you are logged into our App;
  • location information. With your permission, we will collect location information from your mobile device to: (1) track and map your out-of-studio run/walk workouts that you initiate in the App; (2) help you identify Orangetheory Fitness studios located in your area; and (3) to help us market the Orangetheory® Fitness services. You may turn off this feature through the location settings on your mobile device.
  • Out-of-Studio Workouts: You may use the App help you track your out-of-studio run/walk workouts. In addition to mapping your workout as described above, the we will collect the date and time of your workouts, the elevation of your workout, your speed and workout pace, your workout’s total distance, your step count and cadence, estimated calories burned, and, if you use a heart rate monitor during your workout, your heart rate data.

We use your information, including your personal information, for the following purposes:

• To provide our services to you, to communicate with you about your use of our services, to respond to your inquiries, to fulfill your orders, and for other customer service purposes.
  ‍
• To tailor the content and information we may send or display to you, to offer location customization, to offer personalized help and instructions, and to otherwise personalize your experiences while using the Site and App. For example, we will display upcoming workouts at your preferred studios, or we may use your location information to show you Orangetheory Fitness studios in your area. We also use information collected through OTBeat®, body scans, and your App out-of-studio workouts to customize workout programs and classes and to conduct workout challenges.
  ‍
• For marketing and promotional purposes in accordance with applicable laws. For example, we use your information, such as your email address, to send you news and newsletters, special offers and promotions, or to otherwise contact you about products, services, workout sessions, or other information we think may interest you.
  ‍
• We use your information (typically in the aggregate) to assist us in advertising the Orangetheory Fitness brand on unaffiliated websites and in evaluating the success of our advertising campaigns (including our online targeted advertising and offline promotional campaigns).
  ‍
• To better understand how users access and use our Site and Apps, both on an aggregated and individualized basis, in order to improve our Site and Apps and respond to user desires and preferences, and for other research and analytical purposes.
  ‍
• To administer our membership reward program.
  ‍
• To administer surveys and questionnaires, such as for market research or member satisfaction purposes.
  ‍
• To develop our franchise program. For example, if you inquire about operating an Orangetheory franchise, we will use your information to assess your suitability for owning one of our franchises.
  ‍
• To enable our franchisees to provide services to you in their independently owned and operated studios. In addition, if a franchisee leaves our franchise system, we will assist with facilitating the franchise’s transition to a new owner, including ensuring that the respective studio’s members’ personal information is transitioned to the new owner to ensure the members continue to receive services.
  ‍
• To comply with legal and regulatory obligations, as part of our general business operations, and for other business administration purposes, including authenticating your identity, maintaining customer records, to monitor your compliance with any of your agreements with us, to collect debts owed to us, to safeguard our business interests, and to manage or transfer our assets or liabilities, for example in the case of an acquisition, disposition or ‎‎merger, as described below.
  ‍
• Where we believe necessary to investigate, prevent or take action regarding illegal activities, suspected fraud or error, situations involving potential threats to the safety of any person, or violations of our Terms of Use or this Privacy Policy.
  ‍
• For other purposes we may inform you about from time to time.

We may share your information, including personal information, as follows:

• Workout Sessions and Challenges. During a workout session, participants may share their name and OTBeat® heart rate information with other session participants on our in-studio display screens. If you participate in a workout challenge, you may share your name and workout information with other challenge participants. You may also share information about your workouts and challenges you participate in with your social media accounts.
  ‍
• Orangetheory Franchisees. If we collect information from you requesting a trial workout in your area, we will provide that information to the local franchisee. When you sign up for a workout or schedule or purchase sessions through our Site or App or in-person at a studio, such information is hosted by Mindbody Inc. (“Mindbody”), a service provider under contract with Ultimate and our franchisees. All data hosted by Mindbody is made available to Ultimate and, if necessary, our franchisees in connection with the provision of our services. For example, if you complete a workout at a studio different from your home studio, then your data will be available to the owners of both studios. If a franchisee sells or otherwise transfers its franchise, we will transfer member information controlled by the outgoing franchisee to the successor franchisee. If you utilize a body scanner at a franchisee-owned studio, we will share your scan results with that franchisee.
  ‍
• Health-focused Apps and Websites. With your consent, we may share your personal information, including workout and health data, with unaffiliated health-focused mobile applications and websites to help you track your health and wellness information. If you choose to share your information with these apps, your personal information, including your health information, will be used in accordance with those apps’ and websites’ own privacy policies, not this one. Before consenting to sharing your personal information with any third party apps or websites, you should make sure that you have read, understood and agree to their own privacy policy and terms of use.
  ‍
• Affiliates. We may disclose the information we collect from you to our affiliates or subsidiaries; however, if we do so, their use and disclosure of your personally identifiable information will be subject to this Policy.
  ‍
• Service Providers. We disclose the information we collect from you to our vendors, service providers, contractors, and agents who perform functions on our behalf. In particular, the workout sign-up portal is hosted by Mindbody; as noted above, when you register for a workout, your information is available to the owner of that particular location and to Ultimate.

‍

We also disclose information in the following circumstances:

• Business Transfers. If (i) we or our affiliates are or may be acquired by, merged with, or invested in by another company, or (ii) if any of our assets are or may be transferred to another company, whether as part of a bankruptcy or insolvency proceeding or otherwise, we may transfer the information we have collected from you to the other company. As part of the business transfer process, we will share certain of your personal information with lenders, auditors, and advisors, including attorneys and consultants.
  ‍
• In Response to Legal Process. We also may disclose the information we collect from you in order to comply with the law, a judicial proceeding, or other legal process, such as in response to a court order or a subpoena.
  ‍
• To Protect Us and Others. We also may disclose the information we collect from you where we believe it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any person, violations of our Terms of Use or this Policy, or where it is reasonably necessary as evidence in litigation in which Ultimate is involved.
  ‍
• Aggregate and De-Identified Information. We may share aggregate, de-identified, or anonymized information with third parties for marketing, advertising, research, or similar purposes.

No mobile information will be shared with third parties for marketing/promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We and our service providers use cookies and other tracking mechanisms to track information about your use of our Site and App. We may combine this information with other personal information we collect from you (and our service providers may do so on our behalf).

Cookies. Cookies are alphanumeric identifiers that we transfer to your computer’s hard drive through your web browser for record-keeping purposes. Some cookies allow us to make it easier for you to navigate our Site and App, while others are used to enable a faster log-in process or to allow us to track your activities at our Site and App.

Cookie Settings. You can always change your preferences for cookies on our Site and opt-out of most third-party cookies(other than “essential” cookies that are necessary for our Site to function properly) through the “Cookie Preferences” button at the footer of our Site.

Clear GIFs, pixel tags and other technologies. Clear GIFs are tiny graphics with a unique identifier, similar in function to cookies. In contrast to cookies, which are stored on your computer’s hard drive, clear GIFs are embedded invisibly on web or mobile application pages. We may use clear GIFs (aka web beacons, web bugs or pixel tags), in connection with our Site and App to, among other things, track the activities of Site visitors and App users, help us manage content, and compile statistics about usage of our Site and Apps. We and our service providers also use clear GIFs in HTML emails to our customers to help us track email response rates, identify when our emails are viewed, and track whether our emails are forwarded.

Analytics. We also use automated devices and applications, such as Google Analytics (more info here [https://support.google.com/analytics/answer/6004245?hl=en-GB]) to evaluate the use of our Sites and Services. We use these tools to gather non-personal data about users to help us improve our services and user experiences. These analytics providers may use cookies and other technologies to perform their services and may combine the information they collect about you on our Sites with other information they have collected for their own purposes. This Policy does not cover such uses of data by third parties.

Do Not Track. Currently, our systems do not recognize browser “do-not-track” requests. For more information about do-not-track signals, please click here [https://fpf.org/thank-you-for-visiting-allaboutdnt-com/]. You may, however, disable certain tracking as discussed above (eg., by disabling cookies).You also may further opt-out of targeted advertising by following the instructions in the Ad Networks section.

Global Privacy Control. Some browsers and browser extensions support the Global Privacy Control (“GPC”) that can send a signal to the websites you visit indicating your choice to opt-out from certain types of data processing, including data "sales" as defined under certain laws. In certain regions, when we detect such a signal, we will make reasonable efforts to respect your choices indicated by a GPC setting as required by applicable law.

Ad Networks. We use network advertisers to serve advertisements on unaffiliated websites or other media (e.g., social networking platforms). This enables us and network advertisers to target advertisements to you for products and services in which you might be interested. Ad network providers, advertisers, sponsors, and/or traffic measurement services may use cookies, JavaScript, web beacons (including clear GIFs), Flash LSOs, and other tracking technologies to measure the effectiveness of their ads and to personalize advertising content to you. These cookies and other technologies are governed by each entity’s specific privacy policy, not this one. We may provide these advertisers with information, including personal information, about you.

We may disclose certain information (such as your email address) to Facebook Custom Audiences (for more information on Facebook Custom Audience go here or to opt-out, go to the Facebook ad preferences page)—so that we can better target ads and content to you and others with similar interests on other websites or media (“Custom Audiences”). We may also work with other ad networks and marketing platforms that enable us and other participants to target ads to Custom Audiences submitted by us and others. You may also control how Facebook and other ad networks display certain ads to you, as explained further in their respective privacy policies or by using the opt-outs described below.

Users in the United States may opt out of many ad networks. For example, you may go to the Digital Advertising Alliance (“DAA”) Consumer Choice Page for information about opting out of interest-based advertising and their choices regarding having information used by DAA companies. You may also go to the Network Advertising Initiative (“NAI”) Consumer Opt-Out Page for information about opting out of interest-based advertising and their choices regarding having information used by NAI members.

Opting out from one or more companies listed on the DAA Consumer Choice Page or the NAI Consumer Opt-Out Page opt you out from those companies’ delivery of interest-based content or ads to you, but it does not mean you will no longer receive any advertising through our Site or on other websites. You may continue to receive advertisements, for example, based on the particular website that you are viewing (i.e., contextually based ads). Also, if your browsers are configured to reject cookies when you opt out on a consumer choice website, your opt out may not be effective.

Our Site and Apps may contain links to unaffiliated entities’ websites. Any access to and use of such linked websites is not governed by this Policy, but instead is governed by the privacy policies of those websites. We are not responsible for the information practices of such websites.

We have implemented reasonable precautions to protect the information we collect from loss, misuse, and unauthorized access, disclosure, alteration, and destruction. Please be aware that despite our efforts, no data security measures can guarantee security.

You should take steps to protect against unauthorized access to your password, phone, and computer by, among other things, signing off after using a shared computer, choosing a robust password that nobody else knows or can easily guess, and keeping your log-in and password private. We are not responsible for any lost, stolen, or compromised passwords or for any activity on your account via unauthorized password activity.

You may modify personal information that you have submitted by logging into your account and updating your profile information. You may also update your information by visiting your Orangetheory Fitness studio. Please note that copies of information that you have updated, modified, or deleted may remain viewable in cached and archived pages of the Site or App for a period of time.

Subject to applicable law, you may also have certain rights to access, review, update, and correct inaccuracies in your personal information in our custody and control. If you would like to submit a request to exercise your privacy rights under applicable laws, please submit your request through our Data Subject Request Portal or by contacting us at 888-413-1505 (toll free).  Please note that we may require additional information from you to verify your identity and process your request. We will respond to your request within the timeframes required by applicable law.

You may also review and change your preferences for cookies on our Site and opt out of most cookies (other than those that are “strictly necessary”) through the cookie settings panel, which you can access by clicking  “Cookie Preferences” at the footer of our Site.

If you are a California resident, please review section 13. For additional US disclosures, please review section 14.

In accordance with applicable law, we will send periodic promotional communications to you. You may opt-out of such communications by following the opt-out instructions contained in the communication, or if you have opted-in to our promotional text messages, replying STOP. We will process opt-out requests in accordance with applicable law. If you opt-out of receiving promotional communications about recommendations or other information we think may interest you, we may still send you communications about your account or any services you have requested or received from us. App users may enable or disable push notifications by adjusting their App or device settings.

Our franchisees also send their own marketing communications in accordance with applicable law. If you no longer wish to receive marketing communications from our franchisees, you will need to separately opt-out of the respective franchisee’s marketing communications. We do not control, and are not responsible for, the promotional communications sent by our independently-owned and operated franchisees.

WE DO NOT SELL, RENT, LOAN, TRADE, LEASE, OR OTHERWISE TRANSFER FOR PROFIT ANY PHONE NUMBERS, OPT-IN DATA OR CONSENT COLLECTED TO ANY THIRD PARTY.

Our Site, Apps, and services are not designed for children under the age of 13. If we discover that a child under the age of 13 has provided us with personal information, we will delete such information from our systems.

If you have questions, comments, or complaints concerning our privacy practices, please contact us at privacy@orangetheory.com or by contacting your local studio.

This Policy is current as of the Effective Date set forth above. We may change this Policy from time to time, so please be sure to check back periodically. We will post any changes to this Policy on our Site and App. If we make any changes to this Policy that materially affect our practices with regard to the personal information we have previously collected from you, we will endeavor to provide you with notice in advance of such change by highlighting the change on our Site and App.