Free Shipping on Orders over $149
This New York Consumer Privacy Policy (“Policy”) is applicable only to New York state residents and supplements other privacy policy concerns, terms, and conditions that exist regarding services provided by Biospace, Inc., DBA InBody (“InBody”). This Policy covers a variety of New York state privacy laws that have been enacted, including the Stop Hacks and Improve Electronic Security Act (“SHIELD”), the Identity Theft Protection and Mitigation Services Act, and the New York Privacy Act (“NYPA”)(all together, the “Acts”) and describes the rights available to New York consumers of InBody products and regarding their personal information and InBody’s practices regarding the collection, use, disclosure, and sale of personal information, as defined in the Acts. In reviewing this Policy, you are further encouraged to review our other terms and conditions for further information regarding our overall privacy practices, as well as other rights you have under federal law. You agree and understand the following:
In the last twelve months, InBody may have collected the following categories of personal information, as defined under the Acts, about New York consumers (for more information on our collection practices, please review our Terms of Service):
InBody collects certain personal information about you from a variety of sources in order to provide you with our services, communicate with you and your service facilitator, and provide you with the support you need to use our services. These sources may include:
Under the NYPA, InBody is required to act as a data fiduciary to you, exercising the duty of care, loyalty, and confidentiality expected of a fiduciary with respect to your personal information. As such, InBody shall, and shall cause third-party service providers to, act in your best interests in a manner that may be reasonably expected by a reasonable InBody customer under similar circumstances. For information on how InBody uses the information we obtain from you, please review our Terms of Service.
As mentioned in the InBody Terms of Services, InBody does not sell your personal information to third parties for monetary consideration for any purpose, including advertising. However, InBody may share your personal information, with the following entities for the purpose described below:
InBody may disclose personal information in connection with the sale, merger, sale of assets or reorganization of InBody or its affiliates. In such an event, your information will transfer to the acquiring company. Notice of such a transfer will be provided to you.
InBody has a relationship with third-party service providers including, but not limited to, LookinBody Company and InBody Co., Ltd. They help InBody provide services to you, administer InBody’s business, and design, maintain, improve InBody’s service(s), systems, procedures, protocols, and security.
When we allow our contracted third-party service provider to have access to your personal information, they are permitted to use it only for purposes that are consistent with this Policy. We ensure, through agreements in place, that these third parties have equivalent level of protection established in their organizations for sturdy protection of your information. If a substantial change in our or our associates’ business model occurs, that impacts the use of your information, an updated privacy policy will be provided. Below is the list of some of the third parties that may use your personal information:
InBody works with other companies and individuals to perform services on InBody’s behalf. Any such subcontractor will be under the compliance of 45 CFR § 164.502(b). Examples of providers include data analysis firms, credit card processing companies, customer service and support providers, email and SMS vendors, web hosting and development companies and fulfillment companies. These third parties may be provided with access to your personal information as required to perform functions for InBody, but the use will be subject to contracts and agreements in place that protect the confidentiality of the information.
InBody may disclose and report to law enforcement agencies information related to activities that InBody reasonably believes to be unlawful, or that InBody reasonably believes may aid a law enforcement investigation into unlawful activity. In addition, InBody reserves the right to release your information to law enforcement agencies if InBody determines, in its sole judgment, that the release of your information may help protect the safety or property of any person or entity.
InBody may disclose your information to others as required or permitted by law. This may include disclosing your information to governmental entities, including the New York Attorney General, New York Department of State, and the New York Division of State Police, or pursuant to court orders, subpoenas, warrant, summons or similar process.
InBody may disclose the information obtained from you when InBody believes it is necessary to investigate, prevent, or take action regarding illegal activities, suspected fraud, situations involving potential threats to the safety of any individuals, violations of our Terms of Service or this Policy, or as evidence in litigation in which InBody is involved.
Under the Acts, InBody is required to inform you should your personal information be acquired by a third party without your authorization. Should such an acquisition occur, InBody shall inform you within three (3) business days following determination and/or notice of such unauthorized acquisition.
The Acts does not restrict InBody’s ability to disclose the personal information identified above to third parties for the purposes previously stated and for the following purposes, which include:
Under the Acts, InBody is required to implement certain security measures when processing and/or storing your personal information and maintain reasonable administrative, technical, and physical safeguards to protect the security, confidentiality, and integrity of your personal information, including:
The Acts requires that, upon request, InBody must provide you the following information:
This is known as your “right to know” under the Acts.
The Acts requires InBody to provide you with access to the actual personal information collected about you during the course of the preceding twelve months; this is known as your “right to access” under the Acts.
The Acts requires InBody to comply with up to two access requests during a single twelve-month period, which are subject to limitations for manifestly unfounded or excessive requests.
In addition, there are certain categories of personal information that InBody may not return to you in response to your access request due to the inherently sensitive nature of such information which could create a substantial, articulable, and unreasonable risk to the security of that personal information. This includes your Social Security number, driver’s license number, or other government-issues identification number, financial account number, health insurance or medical identification number, account password, or security questions and answers.
If you wish to request InBody to delete the personal information obtained about you, subject to a verifiable consumer request, InBody will delete your personal information from InBody’s systems, barring exception. Service providers and third parties with whom InBody has shared your personal information will be notified.
However, in addition to certain applicable terms and conditions pertaining to deletion of information as found in the InBody Terms of Service, your deletion request is subject to certain exceptions which InBody may rely on where it is necessary for the company to retain personal information in order to:
Should any of these exceptions apply, InBody is not required to delete your personal information. In the event that your request is denied based on any of these exceptions, InBody will inform you, in writing, of the reason.
Given the sensitive nature of the information under the Acts and as proscribed by the law itself, it is essentially that InBody verify your identity in order to process your request, whether it is for access or deletion of your personal information. While the identity verification process involves the processing of personal information relevant to you as the requestor, InBody does not collect or retain the information that you provide as part of the request process, provided that InBody will retain contact information provided for the purpose of fulfilling your request or otherwise communicating with you in connection with your request. If InBody cannot verify your identity, your request will be denied.
To exercise any of your Acts rights, please contact us at info@inbody.com.
The Acts adds a new right for New York consumers to opt-out of the sale of their personal information to third-parties. InBody will provide you with the ability to manage your privacy preferences. To choose the opt-out selection on your preferences settings, which is available on our websites and applications. If you exercise your right to opt-out of the sale of your personal information to third-parties, InBody shall not ask you to change your decision and you will experience no effect in how InBody provides its services to you or charge you additionally for your decision to restrict InBody’s ability to sell your personal information.
The Acts prohibits businesses from discriminating against New York consumers for exercising any of their rights under the Acts. This means that if you exercise any of your rights under the Acts as provided under this Policy, InBody shall not:
We reserve the right to change and amend any part of the Policy at any time and without prior notice. Details of these updates will be made available to you via InBody’s website(s). InBody advises that you check our websites from time to time to make sure that you agree with any changes and amendments. Your continued use of our Services constitutes your acceptance to this Policy and any updates. This Policy is incorporated into the Terms of Service for End User (if you are an End User) and the Terms of Service for Analysis Facility (if you are a Facility User), along with our standard Privacy Policy for those subjects and topics not covered hereunder.
If you have any questions or comments regarding this Policy, our information handling practices, or any other aspects of your privacy and the security of information, please send an email to Info@InBody.com or contact us at
InBody
Attn: Product Support
(323) 932-6503
13385 Cerritos Corporate Dr., Suite C
Cerritos, CA 90703
You agree and acknowledge that you have read this Policy in its entirety and expressly consent to our collection, use, and disclosure, before accessing or using the Service(s), of your Personal Information in accordance with and subject to the limitations of this Policy.
By signing, you acknowledge that you are of the legal age of consent in your jurisdiction.
If you are not of legal age of consent in your jurisdiction, you may not sign this Policy and instead, you shall direct your parent or legal guardian to sign. By signing, parent or legal guardian further agrees and acknowledges that parent or legal guardian has obtained from, executed, and delivered to the Analysis Facility the appropriate parental consent and release forms.