24 Hour Fitness Website Privacy Policy
Last modified 07/01/2024 ( view archived versions )
Last modified 07/01/2024 ( view archived versions )
This Privacy Notice describes the information collection, use, retention and sharing practices of 24 Hour Fitness USA, LLC (“24 Hour Fitness”, “we”, “us”, “our”) and its affiliates and subsidiaries when you interact with us through our website at www.24hourfitness.com (the “Website”), our mobile application, 24GO® (“Mobile App”), or other digital products on which this Privacy Notice appears (collectively, the “Services”). For information on how we collect and use personal information when you engage with our offline services, such as when you visit our 24 Hour Fitness clubs, please visit our In-Club (Offline) Privacy Notice.
I. PERSONAL INFORMATION WE COLLECT, WHY, AND FOR HOW LONG
When you engage with our Services, we collect your personal information which is information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly to you, as well as personal information related to individuals that you include as part of your membership plan, such as additional members on your membership plan or a buddy or guest, where there is a legitimate reason to do so in connection with our relationship with you. To the extent we collect personal information of others that you have provided to us, you should inform them that you are providing this information to us and why, and make sure this is acceptable to them.
When you engage with our Services, we collect your personal information when you:
Enroll as a Member via the Website or Mobile App. When you enroll as a member of 24 Hour Fitness, we collect from you your personal identifiers (first and last name, email address, telephone number, date of birth, physical address), your protected identifiers (gender (if provided)), your sensitive financial information (ABA/routing number and bank account number, if paying by bank account, or payment card number, expiration date, and CVV if paying by credit card), and your financial information (account type, account holder name, bank name, if paying by bank account or cardholder name if paying by credit card). Once your membership account (“Account”) is created, we will also store your selected password (sensitive identifier). We use this personal information to create and manage your Account. If you elect to do so within your Account, we will also use this personal information to facilitate your use of certain functionalities within your Account, such as transacting payments, modifying your membership, registering for fitness classes, scheduling personal training sessions, or updating your personal information, and your account preferences. If you participate in an online class, we will display your first name and last initial to the instructor and those taking the class. We supplement the information that we receive from you with other information that we receive from third party sources to enrich your member profile so that we can tailor our marketing communications in accordance with your interests, as inferred from your information.
Execute the Liability Waiver. We collect your identifiers on your signed liability waiver (name, signature, date). We use this to confirm your acknowledgment that you are informed of the reasons for the waiver and to obtain the waiver.
Make a Payment. To facilitate your purchases or membership payments on the Website or Mobile App, we collect from you or through our third party payment processor, your personal identifiers (first and last name, physical address, and email address), your sensitive financial information (payment card information, including credit or debit card number, CVV, and expiration date (if provided), or bank account information, including, ABA/routing number and bank account number (if provided), and your financial information (account type, account holder name, bank name (if provided)). We use this personal information to process your payment for the requested product or service, fulfill and manage purchases, orders, payments, and returns or exchanges.
Contact Us via the Website or Mobile App. When you contact us through the Website or Mobile App for example, to submit questions regarding your Account or enrollment in membership, you will need to provide us with your personal identifiers (first and last name, email, and telephone number). We use this personal information to respond to your questions or inquiries, troubleshoot where necessary, and address any issues you might have.
Guest Registration via the Website or Mobile App. When you register as a guest to access 24 Hour Fitness clubs (“Clubs”), we collect from you your personal identifiers (first and last name, email, telephone number, date of birth, physical address), and protected identifiers (gender (if provided)). We use this information to track your attendance.
Buddy Pass Registration. If you or a member registers you as a “buddy,” we collect your personal identifiers (first and last name, email, telephone number, date of birth, physical address), and protected identifiers (gender (if provided)). We use this information to track your attendance at our facilities.
Sign Up for Our Marketing Communications. If you subscribe to our marketing communications for updates on discounts, special offers, and membership, we will collect your personal identifiers (name, email address, telephone number, and physical address). We use this personal information to send you updates, news, and special offers as requested. You may unsubscribe at any time by clicking the “unsubscribe” link included with each email. Note that we will continue to send you transactional notifications. Our emails include a tracking pixel that tracks whether you open the email and whether you click banners in the email and your subsequent clicks and usage of our Website. We use this information to send you additional email communications which may be of interest to you based on your interaction with our emails and/or Website. You can avoid downloading the pixel by rejecting the download of images in the email. If you opt in to receive automated promotional text messages, we may use the cellular telephone number you provide to send you text messages through an automated dialing system. Message and data rates will apply. Message frequency varies. Consent to receiving automated promotional text messages is not a condition of purchase. You can opt out at any time by replying STOP, CANCEL, or UNSUBSCRIBE. Note that we may continue to send you transactional messages. For information about our text programs, or for support, reply HELP or by contacting us toll-free at (888) 914-9661 PIN 036085.
Interact with Us on Social Media. When you interact with our web pages on social networking websites, such as Facebook, Instagram, X, YouTube, LinkedIn, and TikTok (each, a “Social Media Page”) (collectively, “Social Media Pages”), we collect basic engagement metrics and use it to tailor content and marketing as set forth in this section. Please note that we do not control the use or storage of the information that you have posted to any Social Media Page. This information is collected and processed by the social networking websites for their own purposes, including marketing. For more information on how Facebook, Instagram, X, YouTube, LinkedIn, and TikTok use your personal information, please see Facebook’s Privacy Policy, Instagram’s Privacy Policy, X’s Privacy Policy, YouTube’s Privacy Policy, LinkedIn’s Privacy Policy, and TikTok’s Privacy Policy.
Social Media Pages. When interacting with our Social Media Pages, we may collect, from you, your personal identifiers (name, social media handle, and profile picture) as well as any information that you provide when interacting with our Social Media Pages (e.g. commenting, sharing, and rating). We may use this information to communicate with users.
Because our Social Media Pages are publicly accessible, when you use them to interact with other users, for example by posting, leaving comments or liking or sharing posts, any personal information that you post to them or provide when registering can be viewed by others or used by them as they see fit.
The content posted on our Social Media Pages or other public areas of social networking websites can be deleted in the same way as other content that you have created.
Community Management. With the help of a third party, we collect from you your interactions, including "likes", shares, messages and other interactions with our content, in order to analyze and evaluate how our content is perceived, to learn from it, and to improve our social media and marketing efforts.
Facebook Messenger; Direct Messages. When using Facebook Messenger or other direct message capabilities on Social Media Pages, the applicable Social Media Page automatically collects your internet or other electronic network activity information (IP address, date and time of the server request, time zone, specific browser or app function, access status, amount of data transferred, browser or app from which the request comes, device type, operating system used, and its interface (e.g. Android or IOS), language, version of the operating system, and device identifiers). We do not use this information; its use is governed by the applicable Social Media Page’s Privacy Policy, a hyperlink to which is available above.
Facebook Page Insights. When you visit our Facebook Social Media Page, Facebook records your IP address and other information about your usage behavior on our Facebook Social Media Page. Facebook collects, through trackers in the browser of your device or via the advertising ID (IDFA from Apple or GAID from Google), when you open the Facebook app through your mobile device (e.g. smartphone or tablet). Facebook uses this information to create statistical evaluations for us of the use of the Social Media Page. We receive this information, from Facebook, in the form of aggregated data and anonymous statistics regarding things like: age, gender, city/country, device, inquiries from fans about other Facebook fan pages, region and language settings of the users, proportion of men and women, the number of people reached, clicks on posts, "likes” and reactions, comments and shared content, and total video views. We do not collect or process any other personal information in connection with the page insights.
We do not retain this information independently. For information on data protection and the storage period on Facebook in relation to the "Page Insights" function see here and Facebook’s Privacy Policy. It has been contractually agreed with Facebook that Facebook is responsible for providing you with information about the processing for Page Insights.
Information Processed Solely by Facebook. We do not know how Facebook uses personal information for its own purposes, how long the personal information is stored on Facebook, or whether Facebook data is passed on to third parties.
If you are currently logged in to Facebook as a user, Facebook automatically collects, through trackers on your device, your Facebook ID or a link between the Facebook ID and the advertising ID (IDFA from Apple or GAID from Google) when you open the Facebook app through your mobile device (e.g. smartphone or tablet). This enables Facebook to understand that you have visited our Facebook fan page along with other Facebook pages that you have clicked on, whether you clicked on Facebook buttons integrated into websites that partner with Facebook, and other online interactions that report user data to Facebook. Based on this data, content or advertising tailored to you can be offered.
You can find more information about the personal information collected by Facebook, how it is used and how long it is stored by visiting Facebook’s Privacy Policy.
Visit or Interact with the Services. In addition to the personal information you provide directly to us, we also collect information from you automatically as you use our Services via cookies, pixels, and similar tracking technologies. This includes the following internet or other electronic network activity information.
We may use "pixel tags," which are small graphic files that allow us to monitor the use of our websites. A pixel tag can collect information such as the IP address of the computer that downloaded the page on which the tag appears; the URL of the page on which the pixel tag appears; the time the page containing the pixel tag was viewed; the type of browser that fetched the pixel tag; and the identification number of any cookie on the computer previously placed by that server. When corresponding with you via HTML capable email, we may use "format sensing" technology, which allows pixel tags to let us know whether you received and opened our email.
We use essential, performance, marketing, and analytics cookies to collect your usage, device, and location information when you interact with the Services. A cookie is a small file containing a string of characters that is sent to your computer when you visit a website. When you visit the website again, the cookie allows that site to recognize your browser. Cookies may store unique identifiers, user preferences and other information. We use this information to: (i) track your use within the Services; (ii) enhance user experience; (iii) conduct analytics to improve the Services; (iv) prevent fraudulent use of the Services; (v) diagnosis and repair Services errors, and, in cases of abuse, track and mitigate the abuse; (vi) provide targeted advertising; (vii) learn when you have checked into one of our Clubs; and (vii) provide location-based services, including, for example, filtering Clubs, group classes, and instructors based on your approximate location. Third party marketing and analytics cookies may be considered a sale or sharing under the California Privacy Rights Act (“CPRA”) and under the Colorado Privacy Act (“CPA”).
Particular third-party cookies to note on our Website include: Google Analytics, DoubleClick, Adobe Analytics, Meta Pixel, and TikTok Pixel. For California or Colorado residents, you can manage your cookie preference by visiting Do Not Sell or Share My Personal Information. In general, you can disable cookies by setting your browser to refuse cookies or indicate when a cookie is being sent. Please note, if you opt out of these targeted advertising cookies, your opt out will be specific to the web browser, app, or device from which you accessed the opt out. If you use multiple devices or web browsers, you will need to opt out of each browser or device that you use. To learn more about your privacy choices, please see YOUR INFORMATION CHOICES.
Google Analytics. We use Google Analytics to collect information on your use of our Services for its improvement. To collect this information, Google Analytics installs cookies on your browser or reads cookies that are already there. Google Analytics also receives information about you from applications you have downloaded that partner with Google. We do not combine the information collected through the use of Google Analytics with personal information. Google’s ability to use and share information collected by Google Analytics about your visits to our Website or to another application which partners with Google is restricted by the Google Analytics Terms of Use and Privacy Policy. To prevent your data from being used by Google Analytics, you can download the Google Analytics opt out browser add-on, which can be accessed here. For California or Colorado residents, to opt out, please visit Do Not Sell or Share My Personal Information
DoubleClick. We utilize DoubleClick by Google to serve ads based on a user’s prior visits to our Website and Mobile App. Each visitor to our Website and Mobile App receives a different cookie, and the information collected by the cookie is used to generate conversion statistics and allows us to see the total number of individuals who clicked on our ads. DoubleClick enables Google and its partners to serve ads to you based on your visits to our Website and Mobile App in addition to other websites on the Internet. Please review Google’s Privacy Policy for additional information on how Google uses the information collected. Such sharing may be deemed a sale under the CPRA. To opt out of targeted advertising by Google and this sharing, you can go to Google’s Ad Settings or you can install the DoubleClick opt out browser plugin. For California or Colorado residents, to opt out, please visit Do Not Sell or Share My Personal Information.
Adobe Analytics. We utilize Adobe Analytics to collect information on your interaction with our Services, including your web browsing activity, device information, IP address (which may be used to approximate your general location), the URL of the web page from which you navigate to our Website, the web search you performed that led you to our Website, social media profile information, purchasing history, and whether you clicked on any of our online advertisements. This information is collected via third party cookies and similar technologies, such as web beacons (also known as tags or pixels) that Adobe Analytics sets on your web browser. We use this information to manage our online content, improve the performance of our Services, and conduct targeted advertising campaigns. Please review Adobe’s Privacy Policy for additional information on how Adobe Analytics uses the information collected. To prevent your data from being used by Adobe Analytics, you may opt out here. For California or Colorado residents, to opt out, please visit Do Not Sell or Share My Personal Information.
Meta Pixel. We use Meta Pixel to serve you ads on your social media based on your browsing behavior. Meta Pixel sets a cookie on your device that allows your behavior to be tracked after you have been redirected to the Website by clicking on a Facebook ad. This enables us to measure the effectiveness of Facebook ads for statistical and market research purposes and to provide targeted advertising. We do not have access to the information collected through the Meta Pixel. The information collected via Meta Pixel is stored and processed by Meta. Meta may link this information to your Facebook account and use it for its own promotional purposes in accordance with Facebook's Data Usage Policy. You can opt out of displaying Facebook ads and sharing by visiting your Facebook Ad Settings. For California or Colorado residents, to opt out, please visit Do Not Sell or Share My Personal Information
TikTok Pixel. We utilize TikTok Pixel to collect information about how users interact with our Services. We use this information to serve targeted ads based on users’ interaction with our Services and to measure the performance of our advertising campaigns conducted through TikTok. Please review TikTok’s Privacy Policy for additional information on how TikTok uses the information it collects. For California or Colorado residents, to opt out of targeted advertising by TikTok and this sharing, please visit Do Not Sell or Share My Personal Information.
Aggregate Data. We aggregate the data we collect for benchmarking purposes and for internal analytics. We maintain and use this data in deidentified form. We will not attempt to reidentify the data unless it is necessary to determine whether our deidentification processes satisfy applicable data protection laws.
Marketing Activities. We use your personal identifiers, collected as described above, as well as from third party providers (for example: age range, membership type, average income, education), and information regarding your engagement with our Services (frequency of visits, interaction with personalized services like personal training, classes taken etc.) to identify user trends and insights in efforts to improve our existing products and services and assist in developing new products or services. We also share this information with third parties for the purpose of marketing and advertising to you on other platforms as described in Sharing in the Preceding 12 Months.
Data Retention. We retain each category of personal information identified above for as long as reasonably necessary to achieve the purposes described herein, or any other notice provided at the time of collection, taking into account applicable statutes of limitation and records retention requirements under applicable law. We may need to use and retain your personal information for longer than these periods for purposes of:
Compliance with our legal obligations. For example, retaining personal information where we are legally required to do so, e.g. pursuant to a pending or anticipated legal proceedings.
Meeting our safety and security commitments. For example, keeping our properties secure and preventing fraud.
Exercising or defending legal claims. We also may need to retain personal information for longer than the periods indicated above in order to respond to legal process or enforceable governmental requests, or to enforce our contracts or Terms of Use, including investigation of potential violations.
24 Hour Fitness will also use the personal information we collect as described in this section to comply with the law, to efficiently maintain our business, and for other limited circumstances as described in HOW WE SHARE YOUR PERSONAL INFORMATION.
A. General Sharing
24 Hour Fitness shares personal information in the following instances:
Within 24 Hour Fitness. We share your personal information within 24 Hour Fitness for the legitimate business purposes of efficiently and effectively providing Services.
In the Event of a Corporate Reorganization. In the event that we enter into, or intend to enter into, a transaction that alters the structure of our business, such as a reorganization, merger, acquisition, sale, joint venture, assignment, consolidation, transfer, change of control, or other disposition of all or any portion of our business, assets or stock, we would share personal information with third parties, including the buyer or target (and their agents and advisors) for the purpose of facilitating and completing the transaction. We may also share personal information with third parties in the course of any bankruptcy or liquidation proceeding we may undergo.
With Third Parties. We may need to disclose your personal information to third parties, such as vendors and service providers to provide the Services, as well as to legal advisors, law enforcement agencies, or government/regulatory bodies to protect our legal interests and other rights, protect against fraud or other illegal activities, prevent harm, for risk management purposes, and to comply with our legal obligations.
For Legal Purposes. We may share your personal information where we are legally required to do so, such as in response to court orders, law enforcement or legal processes, including for national security purposes; to establish, protect, or exercise our legal rights, as required to enforce our terms of service or other contracts; to defend against legal claims or demands; to detect, investigate, prevent, or take action against illegal activities, fraud, or situations involving potential threats to the rights, property, or personal safety of any person; or to comply with the requirements of any applicable law.
With Third Party Fitness Data Platforms. If you choose to connect our Mobile App to a third party fitness data platform (such as Apple Health or Fitbit), we will share, through the relevant API, information, including: (workout activity – type, duration, start and end date); calories burned (total energy burned); workout description, workout ID; and heart rates with those platforms. In order to do this, you will need to have an account with the relevant provider. The use of your personal information will be subject to the terms and privacy disclosures of those providers. You can revoke your consent to this sharing at any time by logging-in to the relevant app on your phone and stopping the connection to our Mobile App.
For a Business Purpose. In the preceding twelve (12) months, 24 Hour Fitness has disclosed the following categories of personal information for a business purpose to the following categories of third parties:
We have disclosed consumers’ personal identifiers, financial information, and internet or other electronic network information with third party vendors and service providers that assist us in providing the Services. These third parties assist us with the following: information technology (“IT”) support; order fulfillment; website hosting; data analysis; customer service; email delivery; text messaging; credit card or other payment processing; auditing; and similar services.
We have disclosed consumers’ internet and electronic network activity information and other personal information, including personal identifiers (name, address, email), gym activity, and transaction information with third party advertisers. This allows us to effectively target our online advertisements. California or Colorado residents may opt out by visiting Do Not Sell or Share My Personal Information.
We have disclosed consumers’ internet or other electronic network activity information collected by cookies to our IT support to detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, and to identify and repair the Website, Mobile App, and platform errors.
We have disclosed consumers’ internet or other electronic network activity information collected by cookies to our IT support to update, improve, and maintain the Services.
We have disclosed consumers’ internet or other electronic network activity information with advertising providers to measure the effectiveness of our online promotional campaigns.
C. Sale of Personal Information
In the preceding twelve (12) months, 24 Four Fitness has shared consumers’ personal identifiers (name, email address, telephone number) and information with respect to usage and engagement of our Services with third party marketing providers and ad networks in PERSONAL INFORMATION WE COLLECT, WHY, AND FOR HOW LONG to create lookalike audiences and to serve targeted advertisements regarding goods and services that may be of interest to consumers when using our Services, as based on information relating to consumer access to and use of our Clubs, Website, and other website and online services on any of the consumers’ devices, as well as on information received from consumers both online and offline and from third parties.
Such sharing may be deemed a sale or sharing under the CPRA or the CPA. For California or Colorado residents, to opt out of this sale or sharing, please visit Do Not Sell or Share My Personal Information
In the preceding twelve (12) months, 24 Four Fitness has also shared consumers’ personal identifiers (name, email address, telephone number) with our third party fitness class providers to send promotional emails. This sharing may be deemed a sale under the CPRA or the CPA. For California or Colorado residents, to opt out of this sale, please visit Do Not Sell or Share My Personal Information
III. YOUR INFORMATION CHOICES
You have the following choices with respect to your personal information:
Correct or View Your Information. You may access your Account to correct or view certain personal information you have provided to us and which is associated with your Account.
Opt Out of Google Analytics. To prevent your data from being used by Google Analytics, you can download the Google Analytics opt-out browser, which can be accessed here.
Opt Out of DoubleClick. To opt out of targeted advertising by Google, you can go to Google’s Ad Settings, or you can install the DoubleClick opt-out browser plugin.
Opt Out of Adobe Analytics. To prevent your data from being used by Adobe Analytics, you may opt out here.
Opt Out of Meta Pixel. You can opt out of displaying Facebook ads and sharing by visiting your Facebook Ad Settings.
Opt Out of TikTok Pixel. To opt out of targeted advertising by TikTok Pixel, you can do so by navigating to “Ads” in your in-app settings.
Opt Out of Advertising Cookies. For California or Colorado residents, to set your cookie preferences or opt out of the sale or sharing of your information via cookies, please visit Do Not Sell or Share My Personal Information . All session cookies are temporary and expire after you close your web browser. Persistent cookies can be removed by following your web browser’s directions. To find out how to see what cookies have been set on your computer or device, and how to reject and delete the cookies, please visit: https://www.aboutcookies.org/. Please note that each web browser is different. To find information relating to your browser, visit the browser developer’s Website and mobile application. If you reset your web browser to refuse all cookies or to indicate when a cookie is being sent, some features of our website may not function properly. If you choose to opt out, we will place an "opt-out cookie" on your device. The "opt-out cookie" is browser specific and device specific and only lasts until cookies are cleared from your browser or device. The opt-out cookie will not work for essential cookies. If the cookie is removed or deleted, if you upgrade your browser or if you visit us from a different computer, you will need to return and update your preferences. By clicking on the “Opt-Out” links below, you will be directed to the respective third-party website where your computer will be scanned to determine who maintains cookies on you. At that time, you can either choose to opt out of all targeted advertising or you can choose to opt out of targeted advertising by selecting individual companies who maintain a cookie on your device.
Network Advertising Initiative (NAI) Opt Out: https://www.networkadvertising.org/managing/opt_out.asp
Digital Advertising Alliance (DAA) Opt Out: https://optout.aboutads.info
European Union (EU) /European Economic Area (EEA) Opt Out: http://www.youronlinechoices.eu
In general, you can also disable cookies by setting your browser to refuse cookies or indicate when a cookie is being sent.
Opt Out of Email Tracking. You can disable this tracking by blocking automatic loading of images in your email.
Opt Out of Marketing Communications. You may opt out of receiving marketing emails from us by clicking the “unsubscribe” link provided with each email. Please note that we will continue to send you notifications necessary to the Services, your account, purchases, or any assistance you request. To opt out of other means of marketing communications, including telephone, text or other electronic communications from 24 Hour Fitness, contact your local Club, reply STOP, CANCEL OR UNSUBSCRIBE to any text message you receive from us, or write to Member Services here. Note that we may continue to send you transactional messages.
IV. RIGHTS OF CALIFORNIA AND COLORADO RESIDENTS
The California Privacy Rights Act (“CPRA”) and the Colorado Privacy Act (“CPA”) entitle California residents and Colorado residents, respectively, to certain rights. To the extent the CPRA or the CPA apply to our processing of your personal information, you are entitled to the following rights:
Right to Access/Know. You have the right to request what personal information we have collected, used, disclosed, and sold about you, unless doing so proves impossible or would involve disproportionate effort. You may only make a request for access twice within a 12-month period. To exercise your right to access your personal information, you may submit a request by completing our webform, or by contacting us toll-free at (888) 914-9661 PIN 036085.
Right to Deletion. You have the right to request the deletion of your personal information that we collect or maintain, subject to certain exceptions. To exercise your right to delete your personal information, you may submit a request by completing our webform, or by contacting us toll-free at (888) 914-9661 PIN 036085.
Right to Correct. You have the right to correct inaccurate personal information that we collect or maintain. To exercise your right to correct your personal information, you may submit a request by completing our webform, or by contacting us toll-free at (888) 914-9661 PIN 036085.
Right to Opt Out of Sale/Sharing. You have the right to opt out of the sale or sharing of your personal information to third parties. 24 Hour Fitness does not have actual knowledge that it sells or shares personal information of minors under the age of sixteen (16) years without their affirmative consent. To opt out of the sale or sharing of your personal information via cookies, please visit Do Not Sell or Share My Personal Information. To exercise your right to opt out of the sale or sharing of your personal information, you may submit a request by completing our webform, or by contacting us toll-free at (888) 914-9661 PIN 036085.
Right to Limit Use of Sensitive Personal Information: You have the right to limit the use of your sensitive personal information when such use goes beyond that which is necessary for providing the services or certain other permissible purposes like fraud, customer service or quality control. Sensitive information includes Social Security number, driver’s license number, biometric information, precise geolocation, and racial and ethnic origin. 24 Hour Fitness does not use sensitive information collected on the Website or Mobile App in a manner that gives rise to this right.
Right to Non-Discrimination. You have the right to be free from discriminatory treatment if and when you exercise your rights to access, delete, opt out, correct, or limit use of sensitive personal information under the CPRA.
For additional information regarding how to exercise your rights, please see EXERCISING YOUR RIGHTS below.
V. ADDITIONAL RIGHTS FOR COLORADO RESIDENTS
The CPA entitles Colorado residents to the rights referenced in Section IV, plus the additional rights described below. To the extent the CPA applies to our processing of your personal information, you, as a Colorado resident, are entitled to the following additional rights:
Right to Data Portability. You have the right to ask that we transfer the personal information you gave us from one organization to another or give it to you. However, you may exercise this right no more than two times per calendar year. To exercise your right to data portability, you may submit a request by completing our webform, or by contacting us toll-free at (888) 914-9661 PIN 036085.
Right to Opt Out of Targeted Advertising. You have the right to opt out of the processing of your personal information for targeted advertising purposes. To exercise your right to opt out of targeted advertising, you may submit a request by completing our webform, or by contacting us toll-free at (888) 914-9661 PIN 036085.
Right to Appeal. You have the right to appeal an action taken (or not taken) by 24 Hour Fitness in response to your request. We will inform you of any action we have taken in response to your request without delay and, in any event, within forty-five (45) days after we receive your request. To exercise your right to appeal, you may submit your appeal by completing our webform, or by contacting us toll-free at (888) 914-9661 PIN 036085. If you are concerned with our response as a result of your appeal, you may submit a complaint to the Colorado Attorney General here.
For additional information regarding how to exercise your rights, please see EXERCISING YOUR RIGHTS below.
VI. EXERCISING YOUR RIGHTS (California or Colorado Residents Only)
To exercise your rights, as applicable, you may submit a request by completing our webform, or by contacting us toll-free at (888) 914-9661 PIN 036085. To opt out of the sale or sharing of your personal information via cookies, please visit Do Not Sell or Share My Personal Information. If the browser or extension that you are using supports Global Privacy Control (GPC) (see here for more information), you may utilize the GPC opt out preference signal to instruct us to not sell or share any of your personal information collected online. The GPC opt out preference signal will apply to the device, platform, or browser in which you utilize it. You can utilize the opt out preference signal by turning on the signal in your device, platform, or browser settings. Please note that you must opt out of each device and each browser. To opt out of the sale of your personal information for marketing purposes, you may submit a request by completing our webform, or by contacting us toll-free at (888) 914-9661 PIN 036085.
For requests submitted via telephone, you must provide us with sufficient information that allows us to reasonably verify you are the person about whom we collected the personal information and describe your request with sufficient detail to allow us to properly evaluate and respond to it. This would generally be your name and the membership number. In doing so, we will take steps to verify your request by matching information provided by you with the information we have in our records. If we are not able to verify your identity for access and deletion requests with the information provided, we may ask you for additional information.
Only you, or a person that you authorize to act on your behalf may make a request related to your personal information. If you are an authorized agent making a request on behalf of another individual, you must provide us with signed documentation that you are authorized to act on behalf of that individual.
VII. DO NOT TRACK
We do not respond to Do Not Track requests. Do Not Track is a preference you can set in your web browser to inform websites and mobile applications that you do not want to be tracked. You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.
VIII. INFORMATION SECURITY
We implement and maintain reasonable security measures to protect the personal information that we collect and maintain from unauthorized access, destruction, use, modification, or disclosure. These security measures include: data protection, secure configuration of assets, account management, access control management, vulnerability management, audit log review, malware defenses, network monitoring and defenses, a security awareness training program, and security incident response. However, no security measure or modality of data transmission is 100% secure, and we are unable to guarantee the absolute security of the personal information we have collected from you.
IX. CHILDREN’S PRIVACY
We do not sell the personal information of anyone under the age of sixteen (16) without their affirmative consent. We do not collect the personal information of anyone under the age of thirteen (13). If we learn that we have collected or received personal information from individuals under the age of thirteen (13), we will delete the personal information. If you believe we have personal information on individuals under the age of thirteen (13), please contact us at the contact information provided below.
We may amend this Privacy Notice in our sole discretion at any time. If we do, we will post the changes to this page, and will indicate the date the changes go into effect. We encourage you to review our Privacy Notice to stay informed. If we make changes that materially affect your privacy rights, we will notify you by prominent posting on the Website and/or via email, and obtain your consent, if required.
XI. CONTACT US
If you have any questions or concerns regarding this Privacy Notice, please contact Member Services here or send us a letter by mail at the following address: 24 Hour Fitness, P.O. Box 2689, Carlsbad, CA 92018.