Kenkou Rhythm Lab

Privacy Policy

Last updated: January 2025

Information We Collect

We collect information that you provide directly to us when you register for classes, create an account, make purchases, sync wearable devices, or communicate with us. This includes your name, email address, phone number, physical address, date of birth, payment information, health and fitness data from wearable devices, class attendance records, and any other information you choose to provide.

We also automatically collect certain information when you access our services, including device information, IP address, browser type, operating system, access times, pages viewed, links clicked, and the page that referred you to our website. When you sync wearable devices, we collect heart rate data, movement metrics, step counts, activity duration, and other fitness-related measurements.

How We Use Your Information

We use the information we collect to provide, maintain, and improve our services, including processing class registrations and memberships, facilitating payments, tracking your fitness progress, generating personalized recommendations, and providing customer support. Your fitness data helps us analyze program effectiveness and develop new class offerings tailored to member needs.

We also use your information to communicate with you about classes, schedule changes, new programs, membership renewals, promotional offers, and important updates. With your consent, we may send marketing communications, newsletters, and surveys to help us understand how to better serve you.

Health and Fitness Data

When you sync wearable devices or provide health information, we treat this data with heightened sensitivity. Health and fitness data is used exclusively to track your personal progress, generate insights about your wellness journey, and improve our program design. We aggregate and anonymize health data for research and program development, ensuring individual identities cannot be determined.

You maintain control over your health data and can request its deletion at any time. We never sell health data to third parties, and we only share it with your explicit consent or as required by law.

Sharing Your Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information with service providers who assist us in operating our business, including payment processors, cloud storage providers, email service providers, analytics platforms, and technology partners who help us deliver our services.

If you participate in corporate wellness programs, we may share attendance and aggregate progress data with your employer as stipulated in your corporate agreement. Individual health metrics are only shared with explicit consent. We may also disclose information when required by law, to protect our rights, prevent fraud, or ensure the safety of our members and staff.

Data Security Measures

We implement industry-standard security measures to protect your personal information, including encryption of data in transit and at rest, secure server infrastructure, regular security audits, access controls limiting who can view your data, and employee training on data protection practices. Payment information is processed through PCI-DSS compliant payment processors.

While we strive to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but continuously work to maintain and improve our security practices.

Your Rights and Choices

You have the right to access, correct, update, or delete your personal information. You can manage your account settings, opt out of marketing communications, request a copy of your data, ask us to delete your information, and restrict or object to certain data processing activities. To exercise these rights, please contact us using the information provided at the end of this policy.

If you are located in the European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to data portability and the right to lodge a complaint with a supervisory authority.

Retention of Your Information

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Class attendance records are retained for program improvement and legal compliance. Payment information is retained according to financial regulations. Health and fitness data is retained until you request deletion or close your account.

When information is no longer needed, we securely delete or anonymize it in accordance with our data retention policies and applicable legal requirements.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. When we transfer information internationally, we implement appropriate safeguards to ensure your data remains protected in accordance with this Privacy Policy.

By using our services, you consent to the transfer of your information to Japan and other countries where we operate or maintain facilities, including countries that may not have the same data protection laws as your jurisdiction.

Children's Privacy

Our services are not directed to individuals under the age of 13, and we do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. For minors between 13 and 18, we require parental or guardian consent before participation in our programs.

If we discover that we have inadvertently collected information from a child under 13 without proper consent, we will take prompt steps to delete such information from our systems.

Third-Party Links and Services

Our website and services may contain links to third-party websites, applications, or services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites or services before providing them with your information.

When you connect wearable devices or third-party fitness apps to our platform, those services are governed by their own privacy policies. We recommend reviewing how these services collect, use, and share your data.

Corporate Wellness Programs

If you access our services through a corporate wellness program, your employer may receive aggregate participation data, attendance statistics, and anonymized wellness outcomes. Individual health metrics, personal fitness data, and identifiable information are not shared with employers unless you provide explicit consent.

Corporate partners receive only the information necessary to evaluate program effectiveness and measure return on investment. All data sharing agreements include strict confidentiality provisions and comply with applicable privacy laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. For significant changes, we may provide additional notice through email or in-app notifications.

Your continued use of our services after changes become effective constitutes acceptance of the updated Privacy Policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA). You have the right to know what personal information we collect, use, disclose, and sell; request deletion of your personal information; opt out of the sale of your personal information; and not be discriminated against for exercising your privacy rights.

We do not sell personal information as defined by the CCPA. To exercise your California privacy rights, please contact us using the information provided below. We will verify your identity before processing your request.

Contact Information for Privacy Matters

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@velricplain.com
Phone: +81 3-3877-9051
Mail: Kenkou Rhythm Lab, Privacy Office, 3 Chome-1 Nishikasai, Edogawa City, Tokyo 134-0088, Japan

We will respond to your inquiries within a reasonable timeframe and work with you to address any concerns about your personal information.