Your Performance Lab Privacy Policy

Last Updated Date: 1 Aug 2023

Welcome to Your Performance Lab, accessible from yplabs.com and other Your Performance Lab websites, and our forthcoming app, available in the Apple App Store, Google Play, or via the Web Application. The privacy of our visitors is one of our top priorities. This Privacy Policy document outlines the information we collect, how we record it, and how we use it.

For a quick summary:
• Your Performance Lab doesn’t provide medical advice. Consult with a medical practitioner before reviewing any information provided within our application.
• You have the right to understand, edit, or delete your personal data. To do this, reach out to us here.
• If you have additional questions or need more information about our Privacy Policy, contact our Data Protection Officer, whose details are at the end of this Policy.• We provide a detailed Data Protection Policy to inform you of how we protect your Personal Information.

TLDR;
Client privacy is critically important to us. At Your Performance Lab, we have a few fundamental principles:
• Client accounts are completely private by default.
• Clients can delete their accounts and data at any time.
• We are very protective of our users’ data and privacy.
• Information a client posts or syncs may be seen by others depending on client settings.
• We do not sell client data.
• We do automatic tracking and syncing in the background as much as possible to minimise effort in keeping client data up to date.
• Connecting a third party service gives us access to that data, but does not send client Your Performance Lab info to them. It is a one way connection. For example, if a client connects to Garmin, Apple Health, or Google Health Connect, that gives us access to sync data from that source, but does not, unless a client specifically allows it, share data back with them. The use of information received from Google Health Connect will adhere to the Google Health Connect Permissions policy, including the Limited Use requirements.
• If a client does choose to share client data with someone on the Your Performance Lab platform, we cannot be held liable for what they do with that data.
• Your Performance Lab is in the process of obtaining SOC2 and HIPAA certifications to ensure we handle your data securely and comply with relevant standards. Our privacy and data practices align with the requirements of these certifications, even as we await final certification.

Privacy Policy Summary
All the information on this website – www.yplabs.com – is provided in good faith for general information purposes only. While we strive to maintain accuracy, we make no guarantees about the completeness, reliability, and accuracy of this information. Any action you take upon the information you find on this website is strictly at your own risk. We will not be liable for any losses and/or damages connected with the use of our website.

Consent
By using our website, web app, and mobile app, you consent to our disclaimer and agree to its terms.

Update
We may update, amend or make changes to this document, and these changes will be prominently posted here.

Personal Information
We value your privacy and follow the terms of the Personal Data Protection Act 2012 (PDPA), which provides guidelines for collecting, using, disclosing, and caring for personal data. The PDPA references data protection regimes of key jurisdictions, including the EU, UK, Canada, Hong Kong, Australia, and New Zealand, as well as the OECD Guidelines on the Protection of Privacy and Transborder Flow of Personal Data, and the APEC Privacy Framework. This Privacy Policy applies to our website www.yplabs.com  and the mobile phone application, “Your Performance Lab.”
We collect information like your name, email address, and phone number. With your permission, we also collect information such as age, body measurements, activity metrics, personal health conditions, and survey responses. We do this to offer a more personalized and valuable service and tailor our program more specifically to your needs.

How we protect client information
Client information is crucially important to us so we ensure that we uphold security arrangements to prevent unauthorised access, collection, use, disclosure, copying, modification, disposal transfer or similar risks to client information. In line with our ongoing HIPAA and SOC2 certification efforts, we have implemented stringent safeguards. These include secure socket layer technology (SSL), password protection, firewalls, encryption, and permission levels to protect client information. There is always an element of risk with submission or transmission of electronic information however we use our best endeavours to ensure client information is protected and secure.

Third-Party Information
We may contract other companies and individuals to help us provide services. In order to perform their responsibilities to us, these other companies may have limited access to some of client Personal Information. These third parties include services like Google Health Connect, from whom we receive data in accordance with their Permissions policy, including the Limited Use requirements. As part of our contract with these companies, they will agree not to use the information they access for purposes other than fulfilling their responsibilities to us.

Usage of Information
We use your information to facilitate your participation in an engaging platform experience, for registration, communication, creating and administering user accounts, and potentially earning rewards for doing so. We may share your information with our appointed doctors to review blood, gut health, or wearable results, including future-developed health information and technology. We may also share your information with approved partners to enhance your user experience.We use secure socket layer technology (SSL), password protection, firewalls, encryption, and permission levels to protect your information. You can update, add, or remove your data by altering settings within your user account or contacting us via email at support@yplabs.com.

Third-Party Providers
We may contract other companies and individuals to help us provide services. These companies may have limited access to some of your Personal Information to perform their responsibilities.

Cookies
Some of our pages use cookies, small files placed on your hard disk for record-keeping purposes. By using our website and agreeing to this policy, you consent to our use of cookies.

Testimonials and Public Forums
Some of our modules utilize community forums. The information posted on these forums can be viewed, collected, and used by other platform members. We may display consented testimonials from satisfied participants of our program on our website.

Links to Other Websites
This website contains links to other websites and the use of social media features. Your interactions with these external websites and social media features are governed by the privacy policy of the providing companies.

Transferring Data
The Your Performance Lab Head Office is based in the USA. Data may be transmitted to data storage facilities where we keep our central records. Your information may be transferred to data storage and processing facilities, other Your Performance Lab offices, or other service providers for Your Performance Lab to provide our service to you.

Changes to Our Privacy Policy
We may periodically update this policy. The most updated policy will be listed on our website, www.yplabs.com 

Collection and Usage of Information
We collect various types of information in connection with the Services, including:
• Information you provide directly to us.
• Information we collect about your use of our Services.
• Information we obtain from third-party sources.

We also collect information you provide us, which includes:
• Health, fitness, and wellness related information. We collect health, fitness, and wellness-related information, including but not limited to, your fitness level, performance, heart rate or other related biometrics, nutrition, sleep, stress, weight, height, gender, birth date, symptoms, treatments, and other health-related information when you sync a device or integration with our Services. For some of the devices we connect to, we use Health-Connect from Google to facilitate the connection and data transmission. The use of information received from Health Connect will adhere to the Health Connect Permissions policy, including the Limited Use requirements.

Personal Data Protection Act 2012
For detailed information about the PDPA, refer to www.pdpc.gov.uk

EU GDPR policy
For detailed information about GDPR, refer to https://gdpr-info.eu/.

We collect client Personal Data in a number of ways and for various purposes, including:
• When a client registers for an account or interacts with our Services.
• When a client inputs Fitness and Wellness Data within our Services or uses our Services that collect or infer such data from mobile device sensors.
• When a client uses or interacts with a wearable or other connected device.• When a client gives us permission to sync any device that is being mentioned in the Integrations page.
• When a client gives us permission to collect Location Data in the mobile apps.
• When a client communicates with us or signs up for promotional materials.• When a client engages with our online communities or advertising.• When a client accesses third-party products and services.
• When a client connects with us through social media.
• When we collect data from third parties or publicly available sources.
• When we leverage and/or collect cookies, device IDs, location, data from the environment, and other tracking technologies.
• When we aggregate or centralize data.
• When we link a client to friends across platforms.
• When a client takes fitness tests or assessments, shares content or achievements, or invites friends.
• When we provide a client with geographically relevant Services, offers, or advertising.
• When a client asks us to customize products or Services.
• When we comply with Legal Requirements or Obligations, Law Enforcement, and for Public Safety Purposes (Country/Region-Specific Disclosures may apply).

European Union Rights
If a client is habitually located in the European Union, a client has the right to access, rectify, download or erase client information, as well as the right to restrict and object to certain processing of client information. While some of these rights apply generally, certain rights apply only in certain limited circumstances. We describe these rights below:
• How their personal data is being processed: A client has a right at any time to request details from Your Performance Lab on how, why, and on what basis their Personal Data is being processed.
• Confirmation of processing/access rights: A client has the right to obtain confirmation that their data is being processed and to obtain access to it and certain other information, by making a subject access request (“SAR”).
• Correction of personal data: A client has the right to request Your Performance Lab to correct any Personal Data it holds about the client if it is inaccurate or incomplete.
• Rectify, restrict, limit, delete: A client can also rectify, restrict, limit, or delete much of client information by logging into the client account and deleting particular integrations, and personal information, or request deletion of the entire account.
• Object: Where we process client information based on our legitimate interests explained above, or in the public interest, a client can object to this processing in certain circumstances.
• Revoke consent: Where a client has previously provided client consent, such as to permit us to process health-related data about a client, a client has the right to withdraw client consent to the processing of client information at any time.
• Complaints: Should a client wish to raise a concern about our use of client information (and without prejudice to any other rights a client may have), a client has the right to do so with client local supervisory authority.

Contact Us
All inquiries related to our Privacy Policy may be sent to Your Performance Lab’s contact email at support@yplabs.com.