At JAST Fitness Inc., your privacy and the security of your personal data are of utmost importance to us. This Privacy & Cookies Policy details how we collect, use, store, and share your personal data when you interact with our services, including our website and mobile application. Our practices comply with international privacy laws, such as the General Data Protection Regulation (GDPR) for users in the European Union, the California Consumer Privacy Act (CCPA) for users in the U.S., and Personal Information Protection and Electronic Documents Act (PIPEDA) for Canadian users. This policy aims to inform users of their rights and our responsibilities as a data controller and processor.
By using our services, you consent to the terms outlined in this Privacy & Cookies Policy.
We collect the following types of data from users:
A) Mandatory Data:Legal Basis for Processing:
The collection and processing of your data are based on:
The data we collect is used for the following purposes:
JAST operates globally, which may involve transferring your data across borders. This includes the United States, Canada, and the European Union. We take measures to ensure your data is protected when transferred internationally, in accordance with:
We may share personal data with:
Data shared with third parties is limited to the necessary information required for service delivery and is protected under Data Processing Agreements (DPAs), ensuring compliance with privacy regulations.
Depending on your jurisdiction, you may have the following rights regarding your personal data:
GDPR (European Union):To exercise these rights, users can contact our Data Protection Officer (DPO) at privacy@jast.fit. We will respond to requests within 30 days as required by law.
In compliance with COPPA (Children's Online Privacy Protection Act) for U.S. users and GDPR for EU users, we do not knowingly collect personal data from children under the age of 13 (U.S.) or 16 (EU) without verified parental consent. If such data is collected inadvertently, it will be deleted immediately.
We retain personal data only as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Users can request account deletion, after which all data will be permanently deleted within 60 days in accordance with our Data Deletion Policy.
We implement robust technical and organizational measures to protect personal data from unauthorized access, use, or disclosure. These measures include:
We use cookies to enhance user experience and for analytics purposes. Our use of cookies complies with the ePrivacy Directive and other applicable laws.
Types of Cookies:●Cookie Preferences: Users can manage their cookie preferences via browser settings or opt-out tools like Google Analytics Opt-Out.
We may update this policy as required by changes in law or internal practices. Any changes will be communicated to users through email or in-app notifications at least 30 days before the changes take effect. Continued use of the service after the notice period constitutes acceptance of the revised policy.
For inquiries about this policy or to exercise your rights, please contact:
Data Protection Officer (DPO)