Last Updated: November 20, 2020

Tivity Health, Inc. (“Tivity,” “our,” or “we”) operates online platforms, mobile applications and other services that link to this Privacy Policy (collectively, the “Services”).

PLEASE READ THIS PRIVACY POLICY CAREFULLY BEFORE USING THE SERVICES.

By accessing or using the Services, You represent and warrant that You are at least eighteen (18) years old and possess the legal right and ability to agree to the following Privacy Policy, and You agree to and are bound by the terms, conditions, policies and notices contained on this page (these “Terms”). If You do not agree to all of the terms and conditions of these Terms, do not use the Services! From time to time, We may revise these Terms. Any revisions will be effective when We post the revised Terms on the Services. You should regularly review these Terms whenever You enter the Services.here

PRIVACY POLICY

We value and respect the privacy of its customers and visitors. The purpose of this Privacy Policy is to provide you with information about Tivity’s policies regarding the collection, processing, use, storage, and disclosure of information when you use our Services. This Privacy Policy also describes the choices you can make about our use of your information.

We may update or modify this Privacy Policy at any time, by posting the amended version including the effective date of the updated version. By using the Services and accepting these terms, you agree to the terms of this Privacy Policy and the collection and use of information in accordance with this Policy. If you do not agree to be bound by this Privacy Policy or any subsequent modifications, you should not access or use our Services or disclose any personal information through our Services.

  1. HOW TO CONTACT US

You can update your preferences and information through your account(s) with our Services.

Additionally, if you have any questions or concerns about our use of your Personal Information (defined below) or wish to communicate with our senior security official or senior privacy official, please do not hesitate to contact us by email at privacy@tivityhealth.com.

  1. HOW WE COLLECT PERSONAL INFORMATION

While using our Services, we may ask you to provide us with certain personally identifiable information (“Personal Information”). Personal Information is information that identifies, relates to, describes, can reasonably be associated with, or can reasonably be linked to a particular individual or household.

We collect information from you both when you provide it voluntarily and also automatically when you use our Services. We may also collect Personal Information from other sources, as described below.

We collect Personal Information from you and any devices (including mobile devices) you use when you: use our Services, register for an account with us, provide us information on a web form, or over the telephone, update or add information to your account, when you otherwise correspond with us or interact with us through the Services, engage or connect with us through one of our social media pages. Please remember that any information that is disclosed in public comments, forums or other areas enabling other users to submit comments (“Forums”) becomes public information, is not maintained or treated as confidential, and you should exercise caution when deciding to disclose your Personal Information.

In addition, we also collect Personal Information about you from third parties in connection with our Services, including from the following sources:

  • Our customers, including your health plan and others
  • Business partners, including participating fitness locations
  • Data analytics service providers
  • Email and other communications service providers
  • Customer service providers
  • Advertising providers
  • Social media platforms
  • Promotional partners
  1. INFORMATION WE COLLECT

We may collect the following categories of Personal Information from you, depending on your interactions with our Services and the choices you make, as further described in the chart below:

  • Identifiers. Your name, email address postal address, unique personal identifier, and Internet Protocol (IP) address.
  • Interactions. Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories.
  • Internet or other electronic network activity information. For example:
  • Browse history. Data about the webpages you visit.
  • Search history. Data about the search terms you enter.
  • Device, connectivity, and configuration data. Data about your device and nearby networks, including regional and language settings.
  • Geolocation data. Data about your device’s location, which is inferred from your IP address and your postal address.
  • Professional or employment-related information. Data is collected from individuals seeking or maintaining employment through Tivity.
  • Demographic data. Data about you such as your age, country, preferred language and other data reflecting your consumer preferences and characteristics.
Information collected through use of our Services
Categories of Information Description of category How We Use Information
Account Information Registering for an account is an optional service provided by some of our Services.

This is the Personal Information that is provided by you or collected by us through a Tivity customer to enable you to login and access your account and/or our Services. This may include your name, address, email address, and phone number.

Some of the Personal Information we will ask you to provide is required in order to create your account. We may ask for your date of birth in order to verify your eligibility to receive certain Services.

· To provide, maintain, personalize and improve our Services.

· To respond to your questions and requests.

· To create, maintain and personalize your account with us.

· To provide support.

· To allow you to participate in interactive features of our Services when you choose to do so.

· To contact you with newsletters, marketing or promotional materials and other information that may be of interest to you.

Email Registration Information You may provide your email address in order to receive information, news and alerts via email. · To contact you with newsletters, marketing or promotional materials and other information that may be of interest to you.
Qualification Information This is the Personal Information that you provide if you choose to determine if you qualify to participate in certain Services. This includes your name, date of birth, email, phone number, and zip code. · To respond to your questions and requests.

· To contact you with newsletters, marketing or promotional materials and other information that may be of interest to you.

· To identify whether you may be a candidate for a health plan that offers the benefit that you have inquired about through the qualification check.

· To gather analysis and assess trends and interests.

Job Application Information This is the Personal Information that you provide if you choose to apply for job positions through the Services. This includes your name, phone number, email address, and career and educational history. We may ask for your license credentials if you are applying for a job position that requires a license. · To assess your job application and respond to you concerning a job position, at our discretion.
Payment and Purchasing Information We may use third parties to collect such Personal Information if you make a purchase through our Services. The exact Personal Information collected will vary depending on the payment method but will include information such as:

· Name;

· Credit or debit card type, expiration date, and certain digits of your card number;

· Billing and shipping addresses;

· Postal code; and

· Phone number.

Please note that we do not collect or maintain the above payment information and you should refer to the privacy policies for our payment processors. We may also collect information concerning the products purchased or considered, or other purchasing or consuming histories or tendencies.

· To process payments and provide you with the products purchased.

· To respond to your questions and requests.

· To provide customer support.

· To provide with more relevant content and advertisements.

· To send you personalized emails, including news, announcements, reminders and opportunities from Tivity.

Demographic Data

We may collect such Personal Information when you provide feedback or post on a forum through our Services, including if you leave a comment on articles posted on the Services.

 

· To provide, maintain, personalize, and improve our Services.

· To provide customer support.

· To monitor the usage of our Services.

· To gather analysis and assess trends and interests.

Location Information We may collect general location information if you use features on our Services that provide location-based services. · To provide you with location-based services.

· To monitor the usage of our Services.

· To gather analysis and assess trends and interests.

Usage Information This can be Personal Information and non-Personal Information that is collected about you when you are using our Services, and this may include:

· Information about your interactions with our Services, which includes the date and time of any information you enter into our Services and your interactions with other users of our Services and what content or features you interacted with.

· User content you post to our Services including messages you send and/or receive in the Forums and your interactions with our customer service team and other users.

· Technical data which may include URL information, cookie data, web beacons and other tracking technology information, your IP address, the types of devices you are using to access or connect to our Services, unique device IDs, device attributes, network connection type (e.g., WiFi, 3G, LTE, Bluetooth) and provider, network and device performance, browser type, language, and operating system. Further details about the technical data that is processed by us can be found below.

We or our third-party partners use common tracking tools (including cookies, web beacons, and pixels) to collect information about the pages you view, our Services functions that you access, the buttons and icons you click, and to make it easier and more efficient for you to use our Services, and to provide advertising content that we think may be of interest to you.

You can choose whether to accept cookies by changing the settings on your browser or device. For more information regarding your choices with respect to cookies and other tracking technologies, please see “Your Rights and Choices Regarding Your Information” below. However, if you choose to disable this function, your experience with our Services may be impaired and some features may not work as they were intended. When we use cookies or other similar technologies, we may set the cookies ourselves or ask third parties to do so to help us.

· To optimize the display of our Services on your device.

· To create, maintain and personalize your experience.

· To provide, maintain, personalize, and improve our Services.

· To provide customer support.

· To monitor the usage of our Services.

· To allow you to participate in interactive features of our Services when you choose to do so.

· To gather analysis and assess trends and interests.

· To detect, prevent, and address technical issues.

· To provide you with content and advertising in which we think you will be interested. As part of this customization, we may observe your behaviors on the Services or on other websites.

· To help maintain the safety, security, and integrity of our Services and technology assets.

Anonymized Information We use anonymized and aggregated information that may be created or derived from your Personal Information or usage of our Services for purposes that include data analysis, improving our Services, advertising, and developing new features and functionality within our Services. · To provide, maintain, personalize, and improve our Services.

· To monitor the usage of our Services.

· To gather analysis and assess trends and interests.

· To detect, prevent, and address technical issues.

· To help maintain the safety, security, and integrity of our Services and technology assets.

  1. SHARING YOUR INFORMATION

We share non-Personal Information with third parties at our discretion. If you are a California resident, please see our California Privacy Notice for more information. In connection with our Services, we may share your Personal Information with certain third parties who we engage for business purposes to help us run our business and perform the services, including under the following circumstances:

  • Software and service providers we use to manage and process your information, for example, hosting providers, analytics providers and payment processors.
  • Affiliates, subsidiaries and customers (for certain Services this may include your health plan)
  • Product-related service providers, such as our delivery providers, and vendors.
  • Google Analytics, a service provided by Google, Inc., to gather information about how you and other users engage with our Services. For more information about Google Analytics, please visit google.com/policies/privacy/partners.
  • Marketing service providers we may use to communicate with you.
  • Advertising service providers.
  • Trusted partners that offer services that may be of interest to you.
  • Other third parties that you expressly request us to share your Personal Information with.

Additionally, we will share your Personal Information with third parties where required by law, where it is necessary in connection with our Services or products, or where we have another legitimate interest in doing so.

If we are subject to a merger or acquisition with/by another company, we may share information with them in connection with the transaction.

  1. HOW WE SAFEGUARD YOUR INFORMATION

The security of your data is important to us but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security. Any transmission of Personal Information is at your own risk.

  1. HOW LONG WE STORE YOUR INFORMATION

We will retain your Personal Information for as long as is necessary for the legitimate business purposes set out in this Privacy Policy. We will retain and use your Personal Information to the extent necessary to comply with our legal, accounting, or reporting obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes and enforce our legal agreements and policies. Additionally, we may continue to store your Personal Information contained in our standard back-ups.

We also will retain Usage Information for internal analysis purposes. Usage Information is generally retained for a shorter period of time, except when Usage Information is used to strengthen the security or to improve the functionality of our Services or products or we are legally obligated to retain Usage Information for longer periods.

  1. YOUR RIGHTS AND CHOICES REGARDING YOUR INFORMATION

Marketing Preferences. You can opt out from receiving future marketing communications from us at any time by using the unsubscribe function in the email you receive from us. Please allow sufficient time for your preferences to be processed. Even if you opt out of receiving marketing messages, we may still contact you for transactional purposes like confirming or following up on an order or service request. If you later opt back into getting marketing communications from us, we will remove your information from our opt-out databases.

Personalized Advertising. If you do not wish to participate in our advertising personalization programs, you can opt-out by following the directions provided within the applicable advertisement, or through disabling ad cookies through your browser settings. You may also opt out of receiving interest-based ads from Amazon, Facebook and Google. You will continue to see ads on each platform, but they will not be personalized as a result of your actions on our website. Please visit the links below if you wish to opt out or update your preferences:

As noted above in “The Information We Collect About You,” you can choose whether to accept cookies by changing the settings on your browser or device. However, if you choose to disable cookies, your experience with our Services may be impaired and some features may not work as they were intended.

Additionally, Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked. You can enable or disable Do Not Track by visiting the preferences or settings page of your web browser. However, these features are not yet uniform, so we do not currently respond to such features or signals. Therefore, if you select or turn on a “do not track” feature in your web browser, we and our third-party providers may continue collecting information about your online activities as described in this Privacy Policy.

You can choose to limit the data that third party services (e.g., social media platforms) share with us using the options provided to you by the applicable third party service (for example, the options provided by a third party social media platform when you connect your social media account with our Services). You can also disconnect your use of our Services from the third-party service at any time using the options provided to you by the applicable third-party service. Please note, however, that if you disconnect from the third-party service, that will not delete the data we may have previously collected while you were connected.

Depending on where you live, you may have certain rights with respect to Personal Information that we have collected and used under certain circumstances. If you are a California resident, please see our California Privacy Notice below for information about those rights and how to exercise them with respect to your Personal Information.

  1. TRANSFER OF DATA; SPECIAL NOTICE TO NON-U.S. USERS

If you are located outside United States and choose to provide information to us, please note that we transfer the data, including Personal Information, to the United States and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer. We will take all the steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

If you are located in a country outside the U.S. and submit Personal Information to us, you consent to the general use and disclosure of such information as provided in this Privacy Policy and to the transfer and/or storage of that information to the U.S.

  1. NO SENSITIVE PERSONAL INFORMATION

Subject to the following paragraph, we ask that you not send us, and you not disclose, any sensitive personal information as this term is defined under applicable data protection and privacy laws (for example, social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) on or through the Services or otherwise to us.

If you send or disclose any sensitive personal information to us, you consent to our processing and use of such sensitive personal data in accordance with this Privacy Policy. If you do not consent to our processing and use of such sensitive personal information, you must not submit such content to our Services.

  1. POLICY ON CHILDREN’S INFORMATION

Our Services are not created for anyone under the age of 13 (“Children” or “Child”). By using the Services, you represent that you are at least 13 years old. If you do not meet this age requirement, then you must not access or use our Services.

We do not knowingly collect personally identifiable information from anyone under the age of 14, and we do not target the Services to children under the age of 13. If you are a parent or guardian and you are aware that your Child has provided us with Personal Information, please contact us though one of the methods listed under “How to Contact Us”, above. If we become aware that we have collected Personal Information from Children without verification of parental consent, we take reasonable steps to remove that information from our servers.

For more information about the Children’s Online Privacy Protection Act (“COPPA”), which applies to websites that direct their services to children under the age of thirteen (13), please visit the Federal Trade Commission’s website https://www.ftc.gov/tips-advice/business-center/guidance/complying-coppa-frequently-asked-questions.

  1. LINKS TO OTHER SITES

Our Services contain links to third-party websites. If you click on one of those links, you will be taken to websites we do not control. This Privacy Policy does not apply to the information practices of those third-party websites. You should read the privacy policies of third-party websites carefully. We are not responsible for the content, privacy policies, actions or security of third-party websites.

  1. GOVERNING LAW AND JURISDICTION

This Privacy Policy shall be construed and governed under the laws of the United States and State of Tennessee (without regard to rules governing conflicts of laws provisions). You agree that venue for all actions, arising out of or relating in any way to your use of our Services, shall be in federal or state court of competent jurisdiction located in Nashville, Tennessee, within one (1) year after the claim arises. Each party waives any objections based on forum non conveniens and waives any objection to venue of any action instituted hereunder to the extent that an action is brought in the courts identified above. Each party consents to personal jurisdiction in the courts identified above.

CALIFORNIA PRIVACY NOTICE

This California Privacy Notice provides additional information to California residents whose personal information is processed by Tivity Health, Inc. (“Company”) pursuant to the California Consumer Privacy Act (“CCPA”).

  1. CATEGORIES OF PERSONAL INFORMATION SOLD, TRANSFERRED AND SHARED

Please see our Privacy Policy (“Policy”) for information about our information collection practices. We generally do not “sell” personal information for purposes of the CCPA. As set forth in the Policy, we disclose personal information to third parties for business purposes, including without limitation, for purposes of advertising, marketing, and other services performed on our behalf, to protect against fraud and malicious activity, and for other business purposes described in the Policy. During the preceding twelve (12) months, we have disclosed each of the above-listed categories of personal information for such business purposes. In addition, your information may be accessible to third parties with whom you interact or direct us to share your information through our services.

  1. YOUR CHOICES

The CCPA allows California residents the following rights. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.

  • You can request that we provide you the following information regarding our use of your Personal Information in the past 12 months:
  • The categories of your Personal Information that we have collected
  • The purposes for which we have collected or used such Personal Information
  • The categories of sources for the Personal Information we have collected about you
  • The categories of third parties with whom we have disclosed your Personal Information
  • If we have disclosed your Personal Information for a business purpose, a list identifying the Personal Information categories that each category of recipient obtained
  • If we have sold your personal information, a list identifying the Personal Information categories that each category of recipient purchased
  • Access. You can request that we provide you a copy of your Personal Information that we have collected in the past 12 months.
  • Deletion. You can request that we delete your Personal Information collected in the past 12 months when we no longer need such data in connection with our Services (subject to certain exceptions that may apply under applicable law).

* If you are a resident of California, and you wish to exercise any such rights listed above, please contact us by either:

Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Information. Please understand that we are required to verify your request and may require you to provide some information to enable us to carry out such verification. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you.

Making a verifiable consumer request does not require you to create an account with us. We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.