Privacy Policy

Effective Date: 9 Aug 2022

1. INTRODUCTION AND GENERAL TERMS

These terms apply to the use of apps and other products and services developed and/or published by FITXR LIMITED (“FitXR” / “we” / “us”) and as further detailed below. We process your data as a controller. Our registered office is at IInternational House, 45-55 Commercial Street, London, E1 6BD. We are a company registered in England and Wales, with company number 10652116.

This privacy and data policy (“Privacy Policy”) applies and has effect in respect of all of our apps, related online services (including online network play connectivity and interactivity) and other software and products made available by us (including without limitation BOXVR) (the “Games”), as well as any other online features relating to the Games, our websites (including, without limitation, https://fitxr.com/) (the “Websites”). Together, the Games and Websites are referred to herein as the “Online Services”.

Except where it may otherwise be expressly set out in the terms of use for our relevant Online Service, our Online Service is not marketed to users under the age of 16 and those aged under-16 should not use our Online Services. We do not use our Online Services to knowingly solicit information from, or market to, those under the age of 16. 

If you have any questions or comments about this Privacy Policy, or if you want to exercise your right to object to the  processing of your personal data, you can contact us at privacy@fitxr.com.

We are committed to protecting and respecting your privacy. This Privacy Policy explains the basis on which personal data we collect from you will be processed by us or on our behalf. Where we decide the purpose and means for which personal data you supply through these Online Services is processed, we are the “controller” for the purposes of the General Data Protection Regulation 2016/679 (the "EU GDPR") , the EU GDPR as it forms part of UK law by virtue of the European Union (Withdrawal) Act 2018  (the "UK GDPR") and the UK Data Protection Act 2018.

Please read this Privacy Policy carefully as it contains important information about the following:

• What information we may collect about you;

• How we will use information we collect about you;

• Whether we will disclose your details to anyone else; and

• Your choices and rights regarding the personal data we hold about you.

This Privacy Policy should be read in conjunction with our terms of use as may be applicable in respect of the relevant Online Service. Where terms of use are applicable, they will be made available via the relevant Online Service.

The Online Services may contain hyperlinks to services owned and operated by third parties. These third party services may have their own privacy policies and we recommend that you review them. They will govern the use of personal data that you submit or which is collected by cookies and other tracking technologies whilst using these services. We do not accept any responsibility or liability for the privacy practices of such third party services and your use of these is at your own risk.

We may make changes to this Privacy Policy in the future, which will be made available here. You should check here from time to time to ensure you are aware of any changes. Where appropriate, we may notify you of changes by email or through the Online Service.

2. INFORMATION WE MAY COLLECT ABOUT YOU

We may collect and process the following personal data from you when you use our Online Services (together, the “Online Services Information”):

Information provided by you when using an Game

(“Submitted Information”)

• Username;
• Language;
• Your age bracket; and
• Your physical demographic information (including your gender and your weight bracket).

Information that may be provided by you when you contact us for   support

(“Contact Information”)

• Your name; and
• Your email address.

Information about your activities

(“Analytics”)

We will collect some technical information about your use of our Online Services through the use of tracking technologies and analytics. Personal data we will collect in this way, depending on your use of the Online Services and your preferences, includes the following: 

• Your IP address and MAC address;

• Your user/account ID with us;

• Device country;

• Time, date and install source of your Game   download/usage;

• Session start, duration and end timings;

• Workout-related information such as ‘calorie burn’ data (which are estimates only and not collected using a medical device);

• Identifying information about crashes and defects;

• Device information (e.g. device type, device unique ID and browser);

• Specific geolocation data, such as when you authorize our mobile application to access your location.

• Session results, progress and timings; and

• System, browser and device settings and information (including make, model and operating system of your device, device properties such as orientation, Games   played, country, language and locale settings);

• ‘Events’ related to your Game usage and   workout sessions using our Games, such as your achievement of a milestone and the occurrence of other particular events during your Game usage (such as session durations, completing a tutorial, workout level/type used, menu/navigation usage, accuracy in the workout, playlist choices). 

This also includes the use of ‘cookies’ and similar technologies as further detailed below.

User-generated content and information hosted and displayed in our Online Services

(“User Content”)

When using our Online Services, you may decide to post information that may or may not contain personal data, in accordance with the rules of the relevant Online Service (where this functionality may be available). Similarly, when using some of our Games or other Online Services (where this functionality is provided by us) you may decide to post certain content such as leaderboard information and messages to other users, in accordance with the terms of use applicable for the relevant Online Service (“Leaderboards”).

In some cases, participation in Leaderboards may be optional. However, in some Online Services, Leaderboards may be posted automatically and can be a significant or essential part of the gameplay and user experience. Please be aware that it may not be possible for us to turn off this type of User Content functionality for you within the Online Service without affecting   your user experience. You can opt out by switching off community mode in class settings.

As per our T&Cs, sharing of Games and their contents is not permitted. However, we cannot control the wider dissemination via the public internet of personal data that you may choose to post, or make available, in User Content or Leaderboards. 

Accepting this Privacy Policy indicates that you agree that FitXR can request your Oculus username data from the Oculus store (where applicable) and display it in-game for the purpose of profile creation (although you may choose another name for your profile if so desired).

Cookies and similar technologies

A cookie is a string of information that can be placed on your computer or mobile device when you visit a website. Cookies and similar technologies are widely used for a variety of reasons including to make websites and apps work, or work more efficiently, as well as to provide information to the owners/operators. FitXR uses necessary cookies and similar technologies to make our Online Services that you have requested work. We also use analytics cookies and similar technology to help FitXR identify and track visitors / players, understand their usage of Online Services and their access preferences so that we can improve our Online Services.

We use the following cookies from third party vendors when conducting our Analytics and for our other data processing activities set out in this policy, on the Website. You can find out more information about the vendor’s processing activities through the links provided: 

Cookie or SDK Name / Title - Google Analytics 

Description - Google Analytics is a service offered by Google that generates detailed statistics about a website’s traffic and traffic  sources and measures conversions and sales. We use the information to compile reports and to help us improve the website and mobile app.

Link (for more information and/or to control your ad preferences) 

http://www.google.com/analytics/ https://policies.google.com/privacy?hl=en   

We also use other vendors to assist us with our analytics processes. For these purposes we work with vendor Amplitude, Inc. and we may share your personal data with them in accordance with this Privacy Policy. You can find out more about Amplitude here: https://amplitude.com/privacy#cookies. 

Most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit www.allaboutcookies.org. To opt out of being tracked by Google / Google Analytics across all websites   visit http://tools.google.com/dlpage/gaoptout.

To opt out of being tracked by advertising providers you can access a general opt out at http://www.networkadvertising.org/managing/opt_out.asp

3.  WHY WE COLLECT INFORMATION ABOUT YOU

To provide the Online Services to you 

We will process information about you (including the Submitted Information and certain Analytics information) to deliver our Online Services to you under the terms of use agreed between us. The processing of information in this way is necessary, for example, for us to record your progress and current status  within an Online Service such as a Game, and to ensure the Online Services deliver the features promised and function   properly. For these purposes, we rely upon the legal basis of performance of a contract (being performance of the terms of use agreed between us) and our legitimate interests (being our commercial interests in providing enhanced services and functionality to you), except for our processing of weight data, which  you may choose to submit to us (as further detailed below).

Where we process your personal data for  Leaderboards, or other User Content, in our Online Services, we also rely  upon our legitimate interests as a legal basis for undertaking that  processing, being our commercial interests in providing an enhanced experience in our Online Services (though, depending on the nature of our particular Online Service, the Leaderboard or User Content may be a part of the core functionality of the Online Service). 

We do not actively collect special category data, such as health data, about you and we do not create information about your presumed health status.

To enable purchases

If you make purchases through the Online Services (where we may make that functionality available), your order and certain Online Services Information (such as, without limitation, your Contact Information if you contacted us, and certain Analytics information) may be processed so that you can access these features within the Online Service.

For the above purposes, we rely upon the legal basis of performance of a contract (being performance of the terms of use agreed between us).

To respond to your enquiries and requests for support 

We may process certain of your Online Services Information (including your Contact Information and certain other Online Services Information) so that we are able to properly respond to your enquiries and support requests, in accordance with the terms of use agreed between us.

For the above purposes, we rely upon the legal basis of performance of a contract (being our terms of use with you for the relevant Online Service) and our legitimate interests, being our commercial interests to respond to your queries and   requests for support.

To better engage current users 

We may process certain information (including Submitted Information and certain Analytics) to encourage engagement from our Game users and to notify them of new recommendations, services, virtual items or other promotions on offer (where we may make these available). We process this information on the basis of our legitimate interests, being our commercial interests in improving the success of our Games and user engagement with our Games.

To prevent fraudulent or illegal activity

We may process your Online Services Information for our legitimate interests of ensuring that your use of our Online Services is lawful and in compliance with our agreement (being the terms of use agreed between us), to prevent disruption to our Online Service, to enforce our rights, to protect any individual or otherwise to ensure our compliance with our legal obligations.

To help us to improve the Online Services and help us fix any problems   

We may process information about you (being certain of the Submitted Information and Analytics) so that we can analyse and improve our Online Services and also for us to develop new Online Services or new parts thereof.

This processing is necessary for us to pursue our legitimate interests, being our commercial interests of: (i) ensuring that our Online Services function properly so that you and other users have the best experience when, for example, playing the Games   and using the other Online Services; (ii) improving the quality of our Online Services, and providing a better experience to our users; and (iii) identifying and correcting any bugs or problems with the Online Services.

To help us to understand your usage of the Online Services

We may process information (being the Online Services Information or any part thereof) to understand how users use our Online Services, and to compile statistical reports regarding that activity, as well as understanding how users progress within a particular Online Service such as a Game. This data processing is necessary for us to pursue our legitimate interests, being our commercial interests in continually improving the Online Services, understanding and fixing problems and to improve our future products and services.

To keep you up to date

Where you have consented, or where it is otherwise lawful for us to do so, we may use your Online Services Information to send you emails in order to keep you informed about our news and products. You can withdraw your consent at any time by letting us know by email to: privacy@fitxr.com.

4.  DATA SHARING

We will share your information with third parties only in the ways that are described in this Privacy Policy

Group members, personnel, suppliers or subcontractors: We keep your information confidential, but may disclose it to any member of our group (which means our subsidiaries, our ultimate holding company and its subsidiaries, as defined in section 1159 of the Companies Act 2006), our personnel, suppliers or subcontractors insofar as it is reasonably necessary for the purposes set out in this Privacy Policy. However, this is on the basis that they do not make independent use of the information, and have agreed to safeguard it.

Merger or acquisition: If we are involved in a merger, acquisition, transfer or sale of all or a portion of our assets, you will be notified via email, account message and/or a prominent notice on our website of any change in ownership or uses of this information, as well as any choices you may have regarding this information.

Required by law: We may disclose your information to the extent that we are required to do so by law (which may include to government bodies and law enforcement agencies); in  connection with any legal proceedings or prospective legal proceedings; and in order to establish, exercise or defend our legal rights (including providing information to others for the purposes of fraud prevention).

Enforcement: We may also disclose your personal data to third parties (e.g. gaming platform operators, game console manufacturers or networks) in order to enforce or apply the terms of agreements, to investigate potential breaches or to   protect the rights, property or safety of FitXR, our customers or others.

Digital Content Stores:  Where our Game is downloaded through a third party store service such as (without limitation) Steam or Oculus, we may disclose your personal data to the relevant store/platform for the purposes of facilitating any in-Game payments made through these platforms.

5.  CONSUMER CONTROL AND OPT-OUT OPTIONS

We will obtain your consent to collect your information to be used for marketing purposes that require consent. Where this is not required, we may rely on our legitimate interests as described above. If you prefer that we do not use your data for marketing purposes, let us know by writing to privacy@fitxr.com or on the relevant forms or check-boxes that we may use to collect your data.

6.  YOUR RIGHTS IN RELATION TO YOUR PERSONAL DATA 

You have the rights over the way that we process your personal data, as set out below. We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws. In some cases, your ability to access or control your personal data will be limited as required or permitted by such applicable laws.

Ask for a copy of personal data we are processing about you and have   inaccuracies corrected or request erasure

You have the right to request a copy of the personal data we hold about you and to have any inaccuracies corrected.

You can download a copy of your Game account information by following the instructions in your account settings (where this functionality is made available). Where this functionality is not available you can request a copy by emailing privacy@fitxr.com.

We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.

Object to us processing personal data about you

You can ask us to restrict, stop processing or delete your personal data if:

• you consented to our processing the personal data and have withdrawn that consent;

• we no longer need to process that personal data for the reason it was collected;

• we are processing the relevant personal data for direct marketing purposes to which you now wish to object;

• we are processing that personal data because it is in the public interest or it is in order to pursue a legitimate  interest of FitXR or a third party, you don’t agree with that processing and there is no overriding legitimate interest for us to continue processing it;

• the personal data was unlawfully processed;

• you need the personal data to be deleted in order to comply with legal obligations; and/or

• the personal data is processed in relation to the offer of a service to a child.

You may be able to delete your accounts by following the instructions in your account settings, where applicable depending on the relevant Online Service. You can also request account deletion by sending an email to privacy@fitxr.com.

Obtain a machine-readable copy of your personal data, which you can   use with another service provider

If (i) we are processing data in order to perform our obligations to you or because you consented and (ii) that        processing is carried out by automated means, we will help you to move, copy or transfer your personal data to other IT systems.

If you request, we will supply you with the relevant personal data in CSV format.  Where it is technically feasible, you can ask us to send this information directly to another IT system provider if you prefer.

Make a complaint to a Supervisory Authority

If you are unhappy with the way we are processing your personal data, please let us know by contacting us via        the support services.

If you do not agree with the way we have processed your data or responded to your concerns, an alternative is to  submit a complaint to a Data Protection Supervisory Authority. Contact information for the Information Commissioner’s Office, the UK’s independent authority setup to uphold information rights, is available here: https://ico.org.uk/. 

7.  DATA RETENTION

In accordance with data protection laws and good commercial practice, we do not retain data in a form that permits identification of the person(s) to whom it relates for any longer than is necessary. The specific retention periods depend on the nature of the information and why it is collected and processed and the nature of the legal requirement. Details of retention periods for different aspects of your personal data are available from us on request by contacting us at privacy@fitxr.com.

8.  CHILDREN

We do not use our Online Services to knowingly solicit information from, or market to, children under the age of 16. In the event that we learn that we have collected personal data from a child under 16 years of age, we will delete that information as quickly as possible. If you believe that we might have any information from or about a child under 16 years of age, please contact us at privacy@fitxr.com.  

9.  SECURITY

We will take commercially reasonable, appropriate technical and organisational measures to ensure a level of security appropriate to the risk that could be encountered via the use of our Online Services, taking into account the likelihood and severity those risks might pose to your rights and freedoms.

In particular, we will take precautions to protect against the accidental or unlawful destruction, loss or alteration, and unauthorised disclosure of or access to the personal information transmitted, stored or otherwise processed by us. 

Please be aware that, while we make the security of our Online Services and your personal information a high priority, no security system can prevent all security breaches. 

Unfortunately, the transmission of information via the internet is not completely secure. We do our best to protect your personal data, but we cannot guarantee the security of your data transmitted through our Online Services; the sharing of your personal information with us and any transmission is at your own risk.

10.  INTERNATIONAL DATA TRANSFERS

The data we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”) or the UK. It may also be processed by staff that operate outside the EEA or UK and work for us or our suppliers. These staff may be engaged in the fulfilment of your orders, the processing of your payment details, the maintenance of the Online Service, and the provision of support services. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this privacy policy.

Where your personal data is transferred outside of the EEA or the UK to a territory not subject to an adequacy decision by the European Commission or the UK, we have agreements in place with the relevant parties which include  standard data protection clauses adopted by by the European Commission and/or the UK, to ensure that appropriate safeguards are used to protect your personal data. Alternatively, we may put in place other appropriate safeguards as necessary. If you require more information about these safeguards, you can contact us at privacy@fitxr.com.

11.  CONTACT INFORMATION

All questions, comments or enquiries should be directed to FitXR at privacy@fitxr.com.  We will endeavour to respond to any query or questions within a reasonable amount of time.