Last Updated: Aug 27, 2021
Please click on any of the headings below to find out more about how we manage personal information collected through our Services to help individuals and trainers, as well as how we collect, use, disclose and protect your personal information when you interact or use our Services.
IF YOU ARE A RESIDENT OR HAVE RIGHTS AS A RESIDENT OF CALIFORNIA, COLORADO, NEVADA OR OTHER APPLICABLE STATE, PLEASE SEE THE SUPPLEMENT SECTION BELOW.
1. ABOUT US, THE VO2 MASTER ANALYZER AND OUR SERVICES
The VO2 Master Analyzer and our Services are not medical devices or services. They do collect and analyze data to help you and trainers analyze your performance.
Our VO2 Master Analyzer and Services are primarily designed to help enable trainers test and analyze the performance capabilities of their athletes. Our Services allow both trainers and individuals to access and share information. Thus, the personal information collected, used and disclosed through our Services is typically managed by trainers and other professionals, as well as their staff, in the course of providing services to individuals.
You are responsible for protecting the confidentiality of your account information and for restricting access to your computer or device. You agree to notify us immediately if you suspect or become aware of any unauthorized use of your account, or any other security breach involving the Site or Services at https://vo2master.com/contact-us/.
If you have any questions or concerns about how your trainer or professional is collecting, using or disclosing your personal information, you should contact them directly.
2. INFORMATION COLLECTED BY YOUR ORGANIZATION’S TRAINERS
Our Services are intended to provide trainers with specialized equipment and a platform to collect, use, process, store, and share athletes’ performance analytics.
You may create an account with your email and a password. Users may create an “organization” account. The creator of that account will have administrative privileges to assign certain access restrictions to others. The organization account may then be used to invite others to the organization, such as other trainers, professionals or athletes, and assign administrative or athlete roles to those accounts.
The administrator of an account may read, write, and delete any of the information in the accounts associated with the organization. If you are entering or accessing information or using the Services in respect of another individual, you should have their consent to do so and use the Services.
If you have been assigned an athlete role for an organization, you can read, write and delete anything in your athlete profile that you have created or submitted to the organization. Athletes will not be able to access the information of other athletes.
The types of personal information collected through our Services include:
- Profile information: This includes your name and contact information, and for athletes also includes, date of birth, height, weight and gender
- Performance testing information:This includes VO2 Max, Heart Rate, Height, Weight, RPM, speed, time of test,
- Resting Metabolic Testing information:This includes Heart Rate, Weight, Vo2, Body Mass Index, Calories ingested, Calories burned, time of test
Our Services are designed to measure and analyze the Profile and testing information. The information and analysis will be accessible to your trainer and other professional service providers you are associated with which are assigned administrative roles by your organization.
By creating an account associated with an organization, you consent to that organization collecting and using the personal information in your account. Your trainer and other professional service providers with the organization associated your Profile will access your information and use it to provide you with the services you request from them.
Your trainer or professional may also make notes about your tests and provide you with reports.
If you have any questions or concerns about the way in which your trainer or professional service providers are handling your information or account, please ask them directly.
3. INFORMATION WE COLLECT AND USE IN PROVIDING THE SERVICES
We collect personal information from and about individuals in a variety of ways, including: when it is provided directly; when individuals interact with us and use our Services, including the VO2 Master Analyzer and the Site.
We use personal information to provide our Services, to manage our business relationship, to communicate offers and information, to measure the effectiveness and performance our Services, including to improve our Services, for marketing and promotions, and as permitted or required by law. (Applicable legal basis under GDPR: legitimate interest, performance of a contract and consent)
We use particular types of information in the following ways.
We use your Profile information for identification and authentication as well as personalization of testing information. (Applicable legal basis under GDPR: legitimate interest, performance of a contract and consent)
We use your date of birth, height, weight, gender VO2 Max, heart rate, and other similar characteristics to personalize and analyze your testing performance and metabolism, to improve the accuracy of our analysis, as well as to provide other Services you or your trainer request. (Applicable legal basis under GDPR: legitimate interest, performance of a contract and consent)
We use your contact information, such as email, for purposes of password reset assistance and transactional emails such as sales, payments, and subscription processing. We may also contact you by phone or email for assistance, onboarding or education about our Services. We use this information to establish and manage client relationships as well as to market, sell or otherwise provide VO2 Master’s products and services. (Applicable legal basis under GDPR: legitimate interest, performance of a contract and consent)
We use the information provided to us about yourself through your Profile and testing information to provide you and your trainer or professional the Services. You may choose to provide more information to generate a more personalized experience and to maximize the functionalities of the Services. We will also use this information to respond to your and your trainer’s requests and preferences, and to conduct surveys, research and evaluations. (Applicable legal basis under GDPR: legitimate interest, performance of a contract and consent)
We may have legitimate reasons to use information to comply with, any legal or regulatory requirements, as well as to detect and protect VO2 Master, its offerings, and other third parties against inappropriate or illegal activity, and to audit compliance with VO2 Master’s policies and contractual obligations. (Applicable legal basis under GDPR: legitimate interest, and performance of a contract)
We may also use your information for other purposes not stated here where you have provided your consent.
To improve our products and Services offerings as well as for research purposes, we will use and share with trusted third parties, aggregated or de-identified data regarding user testing, results and analytics. (Applicable legal basis under GDPR: legitimate interest)
Information automatically collected through our Site
We may use analytical information to improve the performance or layout of our website; to develop new services and ideas; to target advertisements to you on the websites of others, and to better administer and troubleshoot our systems.
We may send marketing or promotional e-mail communications to you with information that may be useful, including information about VO2 Master’s Services. In this process, we may collect certain information about your engagement with our communications, such as the date/time you first opened our e-mail communications, the number of times you open our e-mail communications, click-through activity on the contents of our e-mail communications and compile generally the related statistics. We may combine and store any such information to manage and improve our e-mail communications to you. We will include instructions on how to unsubscribe and inform us of preferences if you decide you do not want to receive any future marketing or promotional e-mails from VO2 Master. We reserve the right to continue to send you email communications where permitted by law, such as in respect of your account and/or Services you have requested.
4. SHARING YOUR INFORMATION
As above, administrative users for organization accounts will have access to the information in the accounts associated with that organization. Any questions about the organization’s practices should be directed to the organization.
We typically will only share aggregated or anonymized information in the limited circumstances we share with third parties. We may also share your personal information within our group of companies, or with our service providers and other third parties for the purposes described below and in accordance with applicable laws.
Third Party Service Providers
VO2 Master may share certain personal information with third party service providers with whom we have contracted to provide certain services on our behalf. Examples of such third party service providers set out below:
|Services||Third Parties||Location of Data Processing|
|User identity and authentication||Auth0||USA|
|Database hosting||Microsoft (Azure)||USA, Canada|
|System monitoring and performance||Sentry||USA|
|Security and service management||Cloudflare||USA|
The third party service providers will have access to personal information needed to perform their functions, but are only provided the limited amount of information required to perform their services. Our providers have assured us that they will protect your personal information in accordance with the law and with appropriate safeguards. Any disclosure of your personal information by us to a third party service provider is on the basis that the information will be used solely for the purpose for which it has been disclosed.
Sale or Transfer of the Business
VO2 Master may decide to sell or transfer all or part of our business, merge with another entity, or engage in another form of corporate or financing (including transfers made as part of proceedings or as part of a reorganization or other change in corporate control). VO2 Master may share your personal information in connection with the evaluation of and/or entry into such transactions.
Where Required or Authorized by Law
VO2 Master may also disclose your personal information where authorized or required by law, including legitimate business purposes authorized by law. For example, we may disclose your personal information to comply with a subpoena, to assert our rights, in response to a law enforcement body with the lawful authority to obtain the information, pursuant to an investigation into the breach of a law, or to our legal counsel.
5. SECURING YOUR INFORMATION
We have built privacy and security features into our Services, and use service providers, to help protect your personal information. Some of these features include access controls, unique user accounts, password authentication, and system monitoring.
VO2 Master has made security arrangements to protect against unauthorized access, collection, use, disclosure, and disposal of personal information, in a manner appropriate to its sensitivity. These measures include various administrative and technological safeguards including unique user accounts, and role-based access based. As above, the administrator for the organization associated with your account will be able to control access to your account.
You may delete information from your account, including your Profile and testing information at any time. As well, VO2 Master will use care when destroying or disposing of personal information to prevent unauthorized access, use or disclosure of any personal information. Our employees with access to personal information are required to respect the confidentiality of such information.
The safety and security of your personal information also depends on you. We are not responsible for any lost, stolen, or compromised usernames, passwords or for any activity on your account via unauthorized password activity. You should take steps to protect against authorized access to your account by, for example, choosing a robust password and keeping your username and password private. VO2 Master is not responsible for any failure by you to secure your own devices and their access to the Internet or your use of public, unsecured networks. You should also only associate your account with an organization you trust. We are not responsible for what your organization does with your personal information.
Unfortunately, information systems, the transmission of information via the Internet and mobile platforms are not completely secure. Although we have designed features and employed security techniques to protect your personal information, we cannot guarantee the security of personal information at all times. Any transmission of your personal information is at your own risk.
6. WHERE YOUR INFORMATION IS STORED AND ACCESSIBLE
VO2 Master is based in Canada. We will typically only access and use your information in Canada.
Our data hosting providers and some of our service providers will store and process your personal information outside of Canada, typically in the USA. As a result, your personal information may be subject to the laws and access by government or regulatory organizations in the Canada or the USA.
Our Services are designed to be accessible anywhere in the world. For that reason, your personal information may be accessible by you and by your trainers with administrative access to your account through your organization anywhere in the world.
By creating an account associated with an organization, you consent to the administrative users of that organization accessing your personal information anywhere in the world.
If you have any questions about VO2 Master’s policies and practices with respect to service providers outside of Canada, including its collection, use, disclosure, and storage of personal information, you can contact us as listed below.
7. DATA RETENTION, CORRECTION AND ACCESS
You have the ability to access and delete your account or the information in your account.
Most of the data that VO2 Master manages is to enable organizations to provide you with training and testing services. Personal information that is collected by these organizations, is the responsibility of the organization. Your personal information associated with your relationship with that organization will be subject to the retention policies and practices of the custodian. You should ask the organization about accessing, correcting or deleting information they have about you.
As described above, we also collect some personal information for use by VO2 Master. Personal information collected by VO2 Master for its use directly is maintained in accordance with applicable privacy legislation and our retention policies and practices. Generally, we keep your personal information for as long as it is reasonably necessary to fulfill the purposes we collected it for and you maintain your account or delete the information in your account, except as otherwise permitted or required by applicable law or regulation.
If you want to access or correct anything in your account, you should access your account directly. You can make changes to certain information in your account, such as Profile information. You can make notes in testing records but cannot change the values. You can delete testing records if you choose. It is your responsibility to provide any updates to your personal information in your account and to your associated organization as appropriate.
If there is information you are not able to access or correct on your own, you may request access to your personal information and/or correction of that information by contacting us in writing at the contact information noted below, with sufficient detail to enable us to identify the personal information being sought. When you contact VO2 Master, we may ask for further information to confirm your identity and the nature of your inquiry.
Please note that in some cases, VO2 Master may not provide access to personal information about you, such as if the denial of access is authorized by law. There are also cases where we may be legally required to refuse access to personal information. If VO2 Master denies your request for access to, correction or deletion of personal information, we will advise you of the reason for the refusal, and will provide the name, title, and contact information of the designated person who can address the refusal.
VO2 Master may charge a reasonable fee according to the cost required to retrieve and provide access to the requested information, or to provide it in a requested alternative format. We may provide an estimate of the fee in advance and in some cases, will require a deposit for all or part of the fee.
Specific rights under GDPR
Under the GDPR, you may be entitled to additional rights, including: (i) the right to withdraw consent to processing where consent is the basis of processing; (ii) the right to object to unlawful data processing, under certain conditions; (iii) the right to erasure of personal information about you, under certain conditions; (iv) the right to demand that we restrict processing of your Personal Information, under certain conditions, if you believe we have exceeded the legitimate basis for processing, processing is no longer necessary, or believe your personal information is inaccurate; (v) the right to data portability of personal information concerning you that you provided us in a structured, commonly used, and machine-readable format, under certain conditions; (vi) the right to object to decisions being taken by automated means which produce legal effects concerning you or similarly significantly affect you, under certain conditions. If you want to learn more about your rights under the GDPR, you can visit the European Commission’s page on Data Protection at: https://ec.europa.eu/info/law/law-topic/data-protection/reform/rights-citizens_en.
You also have the right to lodge a complaint with the relevant data protection authority. If you have any questions or concerns about exercising your rights under GDPR, please contact us https://vo2master.com/contact-us/
8. SUPPLEMENT FOR VARIOUS STATES e.g. CALIFORNIA, COLORADO, NEVADA
Certain states grant particular rights including the following:
California and Colorado rights
- Deletion. You can request that we delete personal information about you that we have collected from you.
- Information. You can request that, for personal information that we have collected in the preceding 12 months, we disclose, free of charge (unless your requests are manifestly unfounded or excessive):
- The categories of personal information that we have collected about you.
- The categories of sources from which we collected personal information.
- The business or commercial purpose for collecting or selling personal information.
- The categories of third parties with whom we share personal information.
- The categories of personal information that we sold or disclosed for a business purpose, and for each category identified, the categories of third parties to whom the personal Information was sold or disclosed.
- Access. You can request a copy of the personal information we have collected about you during the past 12 months.
- Opt-out of sales. We do not sell personal information and have not sold it during the past 12 months. We do not have actual knowledge that we sell the personal information of minors under 16 years of age.
- Non-discrimination. You are entitled to exercise the rights described above free from discrimination.
Right to information, access, and deletion. You may submit requests to exercise your right to information, access or deletion at https://vo2master.com/contact-us/.
Before we can fulfill the requests for information, access or deletion noted above, we must verify your identity. If you have a password-protected account with us, we can verify your identity through our existing authentication procedures for your account. However, we will require you to re-authenticate yourself before we can disclose or delete any of your information.
Your authorized agent may make a request on your behalf upon our verification of the agent’s identity and our receipt of a copy of a valid power of attorney given to your authorized agent (e.g. pursuant to California Probate Code Sections 4000-4465). If you have not provided your agent with such a power of attorney, you must provide your agent with written and signed permission to exercise your rights on your behalf, provide the information we request to verify your identity, and provide us with confirmation that you have given the authorized agent permission to submit the request.
Do not track requests. Your browser or device may offer you a “Do Not Track” option, which allows you to signal to operators of websites, web applications, mobile applications, and services (including behavioral advertising services) that you do not wish such operators to track certain of your online activities over time and/or across different websites or applications. The Services do not support Do Not Track requests at this time, which means that we or our analytics providers or other third parties with which we are working may collect information about your online activity both during and after your use of the Services.
California Shine the Light Notice.
We do not sell or share personal information with third parties for direct marketing purposes. Section 1798.83 of the California Civil Code permits California residents to request from a business, with whom the California resident has an established business relationship, certain information about the types of personal information the business has shared with third parties for those third parties’ direct marketing purposes, and the names and addresses of the third parties with whom the business has shared such information during the immediately preceding calendar year.
The Nevada Revised Statutes (NRS 603A.300 et seq.) permit a Nevada consumer to direct an operator of an internet website or online service to refrain from making any sale of any covered information the operator has collected or will collect about that consumer. You may submit a request pursuant to this directive by sending us a message at https://vo2master.com/contact-us/. We will provide further information about how we verify the authenticity of the request and your identity.
9. ADDRESSING QUESTIONS OR CONCERNS
If you have any questions or concerns regarding this Policy or how we handle your personal information, you may direct them to our Privacy Officer, who is responsible for ensuring VO2 Master’s privacy compliance. You can contact us and address your communication to our Privacy Officer using any of the following methods:
Mailing Address: 2906 33 Street, Vernon, BC V1T 2C8 Canada
VO2 Master takes any complaint about our privacy practices seriously. We will investigate all complaints. If we find a complaint justified, we will take the necessary steps to resolve it. You will be informed of the outcome of the investigation regarding any complaint. If you are not satisfied with our response, you may have options to exercise various complaint procedures, including with the relevant Privacy Commissioner or regulatory authority.