BODYA ("BODYA Health", "we", "us") is committed to protecting the privacy and security of those whose personal data we process. We acknowledge the need to protect personal data that is collected by or disclosed to us and to manage it in accordance with the Data Protection Act 2018 and EU General Data Protection Regulation 2016/679 (GDPR).

​

Please read this policy carefully to understand how we collect and use (process) your personal data during and after your relationship with us, in accordance with applicable Data Protection Laws.

​

In this Privacy Policy (“Policy”), we describe how BODYA ("BODYA Health") collects, uses, and discloses information that we obtain about visitors to our website https://bodyahealth.com/ (the “Site”) and the services available through our Site (collectively, the “Services”). 

​

By visiting the Site or using any of our Services, you agree that your personal information will be handled as described in this Policy. Your use of our Site or Services, and any dispute over privacy, is subject to this Policy and our Terms of Use, including its applicable limitations on damages and the resolution of disputes. The BODYA Terms of Use are incorporated by reference into this Policy.

​

We will review this Privacy Statement regularly to comply with our legal obligations. 

​

Our mission

BODYA is for anyone interested in using high-quality information to make sound health decisions. Whether you are a healthcare professional, patient or carer, researcher or other, BODYA evidence provides a powerful tool to enhance your health knowledge and decision making. As a data controller we have legal obligations to ensure that we only use your data in a fair, transparent and secure manner. If you have any questions regarding this privacy notice, our use of your data or wish to exercise any of your legal rights under data protection law, please contact info@bodya.ch or here.

​

1. Processing person data

Personal data constitutes all statements and information relating to an identified or identifiable person. In addition to contact information such as your name, telephone number, address, e-mail address (or other information you give us as part of an order or participation in a contest or survey, for example), in some circumstances also your IP address, which we log when you visit our site, and other information like the pages you looked at and your reactions to offers displayed on our site are also part of the personal data that we collect.

​

2. When do we collect your personal data?

We collect personal data when you interact with BODYA. We make it clear when and why your data is being collected. In most cases the personal data that we process will be provided by you. This includes details provided when:

​

• Accessing BODYA websites and online resources

• Creating a BODYA Account

• Completing an activity with us

• Contacting our support services 

• Filling in a form on our websites

• Signing up for a newsletter

• Attending a BODYA online class or physical event

• Participate in an online survey, a questionnaire or a quiz

• Purchasing our products and services

• Make an online payment: We collect payment information, such as payment/debit card information and your billing address, and share these with our service providers that process your payment.

• Contacting us

​

3. What data do we collect?

We collect the minimum personal data required for your interaction with BODYA.

• Visitors to BODYA websites

  • We use cookies and IP tracking on our websites. Please see Cookies and tracking technology for more information.

• BODYA Account holders

  • We collect basic personal data when you sign up for a BODYA Account. This includes your name, email address and country of residence. You may choose to provide further information, such as the languages you speak, your date of birth, age and your interests. Please see the BODYA Terms of Use for further information.

• Subscribers to paid services

  • When you make a payment on our website via PayPal or Apple Pay (the data controller), the details will be stored in accordance with the PayPal Privacy Notice or Apple Pay Privacy Notice. If you provide BODYA with financial or payment details, these will be held for ten years following the relevant transaction.

• BODYA event participants 

  • We collect registration information

The accuracy of your information is very important to us. As a BODYA Account holder you can login to your BODYA Account at any time to update your personal details. If you are unsure how to update your personal information, please get in touch with us at info@bodya.ch or here.

​

Information We Collect From Other Entities

• Gifts: If someone purchase a gift subscription for you, we will receive the information they provide about you, including your email address, in order to process and send you that gift.

• Ad Networks: As described in more detail below, we engage companies to help us collect information from our Site and App and use it for analytics, and to help us perform marketing, including targeted advertising generally. We receive information about you from those companies.

​

Information that We Collect About You from Social Networking Sites:

We collect information about you when you interact with us on social networking platforms. If you message us or tag us in a social network post, we will collect information about your message or the post we are tagged in. We do not typically associate this with your account.

Any social networking site controls the information it collects from you. For information about how they may use and disclose your information, including any information you make public, please consult their respective privacy policies. We have no control over how any unaffiliated site uses or discloses the personal information it collects about you.

​

4. Diversity monitoring

We may request personal data such as gender and/or date of birth in order to monitor and improve the diversity of our community and to support the advancement of charitable objectives and outreach activities. Where data are used for diversity monitoring, they are anonymised for processing. You can choose not to provide this data.

​

5. Special category data

Data protection legislation recognises that certain ‘special categories’ of data are more sensitive. These include information relating to health. We only ask for special category personal data if there is a specific need for this. We will use it only for the purpose for which is was provided, such as to refer people with specific health issues to relevant BODYA Reviews or BODYA groups and only ever with your explicit consent

​

6. Special considerations for our users/customers

With their BODYA Login our users/customers can have an overview about their personal information and edit them. 

After registering and signing in with your login information, we are able to link your online usage data (e.g. how you use our Internet sites or data that you give us via the Internet site) with other customer data that we capture and process in conjunction with your usage of our products and services. We can then use that information for marketing purposes and for the evaluation, improvement and new development of services and functions.

 

Your online usage data is linked with other customer data through the use of Wix Analytics and Google Analytics after you have logged out of your online session. Please see Cookies and Tracking Technologies for more information.

​

7. Disclosure: Do we share your personal data?

BODYA will not share or sell your personal data with any third party for marketing purposes and you will not receive offers from other companies or organizations as a result of giving your details to us. We do not share your personal data with third parties unless we have your consent or are required to do so by law. We work with partner organizations who provide services related to review production and payment processing. These organizations meet our high standards for data security and will provide further information on how your data are used, in their own privacy policies.

We may pass your information to third party service providers and other associated organizations for the purposes of completing tasks and providing services to you on our behalf. When using third party service providers we only disclose the personal data that is necessary to deliver the service. We have a contract in place that requires them to keep your information secure and prohibits them from using your data for their own purposes. All contractors are subject to a duty of confidentiality. Third parties (and data processors) may include: our CRM provider, auditors, web hosting company, marketing consultants, email marketing platform and content management system provider.

​

8. Transfers of data outside of the EEA

We may transfer your personal information to third party data processors who are based in countries outside the European Economic Area (EEA). We use some US-based companies that provide IT, communications and data analytics services such as Mailchimp, SurveyMonkey and Google Analytics. We only use US-based organizations that have signed up to the EU Contractual Clauses scheme. We will not transfer your information to any processors based in other countries outside the EEA unless there is a European Commission adequacy decision for the specific country to which the data is transferred, or where we can be certain that there are adequate safeguards provided for your information and individual rights standards that meet the GDPR requirements.

​

9. How long do we keep your personal data?

We will retain your personal data as long as is necessary to provide the services to which you have requested, or where we have another legitimate and lawful reason to do so. We may need to retain some information to comply with our legal obligations such as financial and accounting records. In most cases we will delete your data 10 years after your last transaction with us.

​

10. What are your rights in relation to your personal data?

You can:

• Ask us to correct your personal data if information is inaccurate, out of date or incomplete. You can also manage your current details and communications preferences yourself in your BODYA Account.

• Ask us to provide a copy of the data we hold about you. 

• Withdraw your consent at any time, if we have asked for your consent to process certain data. You can also ask us to stop processing the data if we have no other legitimate reason for doing so.

• Ask us to delete the data we hold about you. If we need to continue holding this information (for example, if you are a published author) we will explain our reasons for this and how the data will be stored.

​

You have the right to obtain information free of charge about the personal data of yours that we process. Your request for information must be issued at the following address info@bodya.ch or here and include a copy of your ID card or passport.

​

You likewise have the right to request the correction of incorrect personal data. You may also demand the deletion of your personal data unless the applicable laws and regulations oblige us to store your personal data.

​

What Choices Do I Have Regarding Use of My Personal Information?

We may send periodic promotional emails to you. You may opt-out of promotional emails by following the opt-out instructions contained in the email. Please note that it may take up to 10 business days for us to process opt-out requests. If you opt-out of receiving promotional emails, we may still send you emails about your account or any services you have requested or received from us.

​

11. Children Under 13

Our Services are not designed for children under 13. If we discover that a child under 13 has provided us with personal information, we will delete such information from our systems.

​

12. How can we change this statement?

We reserve the right to change this statement at any time. The version published on our websites is the valid version.