This Policy applies to our website including https://au.inbody.com, our body composition analysis devices (Products), and InBody software, including body composition data collection, processing and analysis software (Software) and mobile applications (Apps) as well as our body composition analysing and consulting services and their related products and services (collectively Services). The Products, Website, Software and Apps are used by InBody to give users (End Users) access to our Services using their own telecommunication devices or Products, or via the Products located in the facility of merchants (Facility Providers) who are independent third parties to InBody.
Collecting Personal Information
We do not collect or monitor any personal information about you without your consent. The only personal information collected by us is what has been provided by you voluntarily and where such information is reasonably necessary for our Services. We may request your personal information such as name, mobile phone number, email address, residential address, date of birth, organisation, and so on, at the time you create an account with us or update your account held by us, in order to facilitate or provide you with our Services, marketing materials, newsletters, new release or launch information, and advise of our other services, seminars or events which may be of interest. You are not obligated to provide personal information. However, failure to do so may result in InBody or Facility Providers being unable to facilitate or provide you with the Services or information about the Services, seminars or events, or send you our newsletter or updates (as applicable).
Health information includes information about your health, appointment and billing details, or your medical history. Health information is afforded a higher level of privacy protection under the APPs than other personal information. We do not collect or monitor any health information about you without your consent. The only health information collected by us is what has been provided by you voluntarily and where such information is reasonably necessary for us to provide the Services. We may request your health information such as date of birth, gender, height and weight for the purpose of assessing, recording, maintaining, consulting and/or improving your health. You may choose not to provide such information. Note however that such information is vital and necessary for us to carry out the Services and that failure to do so by you may result in InBody or Facility Providers being unable to facilitate or provide you with the Services.
Passive Information Collection
InBody’s Services may use and combine passively collected anonymous information such as cookies, web beacons, your browser type and location:
(a) to provide better service to you;
(b) to customise the Services based on your preferences;
(c) to compile and analyse statistics and trends; or
(d) otherwise to administer and improve the Services for your use.
Such information is not combined with personally identifiable information collected elsewhere on the Services unless you have consented.
Using and disclosing your personal information
Personal information about you collected by us will be used for the following primary purposes:
(a) to provide you with the Services by measuring, recording, analysing and displaying your body composition measurement;
(b) for the purpose of assessing, recording, maintaining, consulting and/or improving your health;
(c) to maintain the functionality of the Services, including the provision of information to you relating to an enquiry you may have submitted via the Services;
(d) to provide you with information about developments, events or other services and products and to provide marketing materials or information about special offers via any medium including mail, telephone and commercial electronic messages [SMS (Short Message Service), MMS (Multimedia Messaging Service), IM (Instant Messaging), email, social media] or any other form of electronic, emerging, digital or conventional communications channel;
(e) to maintain the relationship between InBody or Facility Providers and you;
(f) to render the Services related to the business of InBody, to manage and account for the Services, and to improve the Services;
(g) to obtain opinions or comments about the Services and to conduct other research and development;
(h) for anti-fraud purposes such as verification of identity and assisting us in the identification of you as an End User, and
(i) to record statistical data for marketing analysis.
Cross border transfer of personal information
For the provision of our Services, your personal information collected by us may be disclosed or transferred to, accumulated with other information and/or stored in servers located outside Australia, namely Singapore. It is reasonably believed that Singapore has comparable information privacy laws or other binding schemes that are substantially similar to the APPs, and mechanisms that you can access to take actions to enforce such laws. InBody will also use all reasonable endeavours to secure and protect the privacy of your personal information stored in Singapore. In any event, we expressly disclose that sub-clause 8.1 of the APPs does not apply to such disclosure to the overseas servers. You also expressly consent to the disclosure.
Contact by InBody or Facility Provider
Accessing your personal information
You have a right to access your personal information that may be held by us by contacting us via email at email@example.com. We will respond to the request within a reasonable period of time. We will action on your request within a reasonable period of time. We may charge a reasonable fee for retrieving your personal information and providing you with a copy of it. We may refuse to provide you with certain information where permitted or required by law.
Changing and deleting the information we have about you
You have a right to review and amend the information about you that may be recorded on our database by contacting us via email at firstname.lastname@example.org. We will action on your request within a reasonable period of time. In the same way, a request may be made to delete personal information, and all reasonable steps to delete the information will be made by us, except where it is required for legal reasons. Deletion of information may result in InBody or Facility Providers being unable to facilitate or provide you with Services or product information (including any e-newsletters or blog updates), upcoming event information, and/or provide the Services (including quick enquiry services). We are not responsible for removing your personal information from the lists of any third party who has previously been provided your information in accordance with this policy.
Option of not identifying yourselves
You have a right to request for us not to identify you or to make you anonymous or for us to use a pseudonym in relation to a particular matter, except for where we are required or authorised by laws or a court/tribunal order, to deal with you as identified; or where it is impracticable for us to deal with you unidentified or when using a pseudonym. Once such request is received by us, we will action on your request within a reasonable period of time.
Storage and security of personal information
We will endeavour to take all reasonable steps to keep secure any personal information that is recorded, and to keep this information accurate, up to date and complete. The information is stored on secure servers that are protected in the facilities contracted with us. Employees of InBody or Facility Providers and data processors are obliged to respect the confidentiality of any personal information held by us. However, security of communications over the Internet cannot be guaranteed, and therefore absolute assurance that information will be secure at all times cannot be given. We will not be held responsible for events arising from unauthorised access to personal information.
Third party websites
The Website, Product, Software, Apps and Services may, from time to time, contain links to the services of other organisations which may be of interest to you. Linked websites and mobile applications owned or operated by third parties are responsible for their own privacy practices and you should check those websites and mobile applications for their respective privacy statements. We are not responsible for the conduct of individuals or companies linked to the Services.
Children and Parental consents
We are mindful that our Services are attractive and of benefit to potential users under the age of 18. Although the Act does not set a minimum age at which an individual can make decisions regarding his or her personal information, we believe that it would be in the best interest of a person under the age of 18 that we require consent from the minor as well as their parent or guardian regarding us collecting, holding and using personal information of the minor. Accordingly, the parent or legal guardian of any End Users aged below 18 years of age is required to consent to the collection and use of his/her child’s personal information at the time of registering and use of our Services, and this requirement is additional to the provision of consent by the End Users aged below 18 years of age himself or herself.
A parent or legal guardian of any child under 18 years of age can review his/her child’s personal information, ask to have it deleted, and refuse to allow any further collection or use of the child’s information. If the parent or legal guardian wishes to exercise this right, he/she should contact us via email at email@example.com.
Procedure for complaints
If you have a complaint about our privacy practices, please send the details of your complaint via email at firstname.lastname@example.org. Your complaint will be investigated internally and a response to your complaint will be provided in writing within a reasonable period. We expect our procedures will deal fairly and promptly with your complaint. However, if you remain dissatisfied, you can also contact the Office of the Australian Information Commissioner (OAIC). Note that complaints must be made in writing using the information available at www.oaic.gov.au/privacy/privacy-complaints. Contact details of OAIC are as follows:
Director of Compliance
Office of the Australian Information Commissioner (OAIC)
GPO Box 5218
Sydney NSW 2001
Phone number: 1300 363 992
Contact Point for Inquiry concerning Personal Information
Please contact the contact point specified below for any inquiries or complaints concerning our handling of specific personal information or the like.
Tel: +82 2 2182 1827
Fax: +82 2 578 2995
InBody Bldg., 54 Nonheon-ro 2-gil
Gangnam-gu, Seoul 06313
Republic of Korea