General
InBody and its related entities have a firm commitment to privacy and respect the privacy of your personal information. In this Privacy Policy, the term “InBody”, “we”, “us” and “our” refer to InBody Co., Ltd, a company incorporated in Republic of Korea. This Policy explains the types of personal information that we may collect and hold, how that information is used, and with whom the information is shared. It also sets out how you can contact us if you have any queries or concerns about your personal information.
This Policy applies to our website including https://au.inbody.com, our body composition analysis devices (Products), and InBody software, including body composition data collection, processing and analysis software (Software) and mobile applications (Apps) as well as our body composition analysing and consulting services and their related products and services (collectively Services). The Products, Website, Software and Apps are used by InBody to give users (End Users) access to our Services using their own telecommunication devices or Products, or via the Products located in the facility of merchants (Facility Providers) who are independent third parties to InBody.
InBody’s Services are bound by the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) (Act) which are designed to protect the confidentiality of information and the privacy of individuals by regulating the way personal information is collected, used, disclosed and managed. Access to, and the provision of, the Services by InBody or Facility Providers is conditional on you accepting the terms of this Privacy Policy. By accessing or using, or continuing to use or access our Services, you are deemed to signify that you have read, understood and agreed to terms as set out in this Privacy Policy.
We will post any changes to this Privacy Policy on our Website, Products, Software and/or Apps, so we encourage you to check this Policy from time to time. Your continued use or access of our Services constitutes your acceptance to the changes. This Policy may be incorporated into, and subject to our Terms of Use.
Collecting Personal Information
We do not collect or monitor any personal information about you without your consent. The only personal information collected by us is what has been provided by you voluntarily and where such information is reasonably necessary for our Services. We may request your personal information such as name, mobile phone number, email address, residential address, date of birth, organisation, and so on, at the time you create an account with us or update your account held by us, in order to facilitate or provide you with our Services, marketing materials, newsletters, new release or launch information, and advise of our other services, seminars or events which may be of interest. You are not obligated to provide personal information. However, failure to do so may result in InBody or Facility Providers being unable to facilitate or provide you with the Services or information about the Services, seminars or events, or send you our newsletter or updates (as applicable).
Health Information
Health information includes information about your health, appointment and billing details, or your medical history. Health information is afforded a higher level of privacy protection under the APPs than other personal information. We do not collect or monitor any health information about you without your consent. The only health information collected by us is what has been provided by you voluntarily and where such information is reasonably necessary for us to provide the Services. We may request your health information such as date of birth, gender, height and weight for the purpose of assessing, recording, maintaining, consulting and/or improving your health. You may choose not to provide such information. Note however that such information is vital and necessary for us to carry out the Services and that failure to do so by you may result in InBody or Facility Providers being unable to facilitate or provide you with the Services.
Passive Information Collection
InBody’s Services may use and combine passively collected anonymous information such as cookies, web beacons, your browser type and location:
(a) to provide better service to you;
(b) to customise the Services based on your preferences;
(c) to compile and analyse statistics and trends; or
(d) otherwise to administer and improve the Services for your use.
Such information is not combined with personally identifiable information collected elsewhere on the Services unless you have consented.
Cookies are pieces of information that a website transfers to a computer’s hard disk for record keeping purposes. Most web browsers are set to accept cookies. InBody may use cookies to make your use of the Services as convenient as possible. Cookies do not themselves personally identify End Users, although they do identify an End User’s browser. Cookies allow us to monitor the items you may want to access as you move through the Services and records how many people are using the different parts of the Services. You can set your browser to accept all cookies, to reject all cookies, or to notify you whenever a cookie is offered so that you can decide each time whether to accept it.
Using and disclosing your personal information
Personal information about you collected by us will be used for the following primary purposes:
(a) to provide you with the Services by measuring, recording, analysing and displaying your body composition measurement;
(b) for the purpose of assessing, recording, maintaining, consulting and/or improving your health;
(c) to maintain the functionality of the Services, including the provision of information to you relating to an enquiry you may have submitted via the Services;
(d) to provide you with information about developments, events or other services and products and to provide marketing materials or information about special offers via any medium including mail, telephone and commercial electronic messages [SMS (Short Message Service), MMS (Multimedia Messaging Service), IM (Instant Messaging), email, social media] or any other form of electronic, emerging, digital or conventional communications channel;
(e) to maintain the relationship between InBody or Facility Providers and you;
(f) to render the Services related to the business of InBody, to manage and account for the Services, and to improve the Services;
(g) to obtain opinions or comments about the Services and to conduct other research and development;
(h) for anti-fraud purposes such as verification of identity and assisting us in the identification of you as an End User, and
(i) to record statistical data for marketing analysis.
Information may be shared with InBody’s affiliates, Facility Providers or promotional partners to accomplish the above purposes. InBody recognises the trust with which you provide personal information, and except as stated in this Privacy Policy, such information will not be used or disclosed for any other purposes without consent, except in exceptional cases when disclosure may be required by law or is necessary to protect the rights or property of InBody or any member of the public, or to lessen a serious threat to a person’s health or safety. InBody does not collect information on payment such as credit card information. However, this information may be collected and used by third party payment service providers like PayPal.
Cross border transfer of personal information
For the provision of our Services, your personal information collected by us may be disclosed or transferred to, accumulated with other information and/or stored in servers located outside Australia, namely Singapore. It is reasonably believed that Singapore has comparable information privacy laws or other binding schemes that are substantially similar to the APPs, and mechanisms that you can access to take actions to enforce such laws. InBody will also use all reasonable endeavours to secure and protect the privacy of your personal information stored in Singapore. In any event, we expressly disclose that sub-clause 8.1 of the APPs does not apply to such disclosure to the overseas servers. You also expressly consent to the disclosure.
Contact by InBody or Facility Provider
InBody or Facility Providers may contact you via telephone, SMS (Short Message Service), MMS (Multimedia Messaging Service), IM (Instant Messaging), email, post, social media or any other form of electronic, emerging, digital or conventional communications channel using the information provided in order to contact you in respect of the primary purposes for collection of personal information as stated above. We do not send advertising or marketing information without obtaining prior consent, for example the consent contained within this Privacy Policy. If you receive communications from InBody or Facility Providers which you do not wish to receive, you may request us to remove your name from the database either by utilising the functional unsubscribe facility (if the communication is via commercial electronic message) or by contacting us via email at privacy2@inbody.com. We will action your request within a reasonable period of time.
Accessing your personal information
You have a right to access your personal information that may be held by us by contacting us via email at privacy2@inbody.com. We will respond to the request within a reasonable period of time. We will action on your request within a reasonable period of time. We may charge a reasonable fee for retrieving your personal information and providing you with a copy of it. We may refuse to provide you with certain information where permitted or required by law.
Changing and deleting the information we have about you
You have a right to review and amend the information about you that may be recorded on our database by contacting us via email at privacy2@inbody.com. We will action on your request within a reasonable period of time. In the same way, a request may be made to delete personal information, and all reasonable steps to delete the information will be made by us, except where it is required for legal reasons. Deletion of information may result in InBody or Facility Providers being unable to facilitate or provide you with Services or product information (including any e-newsletters or blog updates), upcoming event information, and/or provide the Services (including quick enquiry services). We are not responsible for removing your personal information from the lists of any third party who has previously been provided your information in accordance with this policy.
Option of not identifying yourselves
You have a right to request for us not to identify you or to make you anonymous or for us to use a pseudonym in relation to a particular matter, except for where we are required or authorised by laws or a court/tribunal order, to deal with you as identified; or where it is impracticable for us to deal with you unidentified or when using a pseudonym. Once such request is received by us, we will action on your request within a reasonable period of time.
Storage and security of personal information
We will endeavour to take all reasonable steps to keep secure any personal information that is recorded, and to keep this information accurate, up to date and complete. The information is stored on secure servers that are protected in the facilities contracted with us. Employees of InBody or Facility Providers and data processors are obliged to respect the confidentiality of any personal information held by us. However, security of communications over the Internet cannot be guaranteed, and therefore absolute assurance that information will be secure at all times cannot be given. We will not be held responsible for events arising from unauthorised access to personal information.
Third party websites
The Website, Product, Software, Apps and Services may, from time to time, contain links to the services of other organisations which may be of interest to you. Linked websites and mobile applications owned or operated by third parties are responsible for their own privacy practices and you should check those websites and mobile applications for their respective privacy statements. We are not responsible for the conduct of individuals or companies linked to the Services.
Children and Parental consents
We are mindful that our Services are attractive and of benefit to potential users under the age of 18. Although the Act does not set a minimum age at which an individual can make decisions regarding his or her personal information, we believe that it would be in the best interest of a person under the age of 18 that we require consent from the minor as well as their parent or guardian regarding us collecting, holding and using personal information of the minor. Accordingly, the parent or legal guardian of any End Users aged below 18 years of age is required to consent to the collection and use of his/her child’s personal information at the time of registering and use of our Services, and this requirement is additional to the provision of consent by the End Users aged below 18 years of age himself or herself.
A parent or legal guardian of any child under 18 years of age can review his/her child’s personal information, ask to have it deleted, and refuse to allow any further collection or use of the child’s information. If the parent or legal guardian wishes to exercise this right, he/she should contact us via email at privacy2@inbody.com.
Procedure for complaints
If you have a complaint about our privacy practices, please send the details of your complaint via email at privacy2@inbody.com. Your complaint will be investigated internally and a response to your complaint will be provided in writing within a reasonable period. We expect our procedures will deal fairly and promptly with your complaint. However, if you remain dissatisfied, you can also contact the Office of the Australian Information Commissioner (OAIC). Note that complaints must be made in writing using the information available at www.oaic.gov.au/privacy/privacy-complaints. Contact details of OAIC are as follows:
Director of Compliance
Office of the Australian Information Commissioner (OAIC)
GPO Box 5218
Sydney NSW 2001
Phone number: 1300 363 992
Website: www.oaic.gov.au
Contact Point for Inquiry concerning Personal Information
Please contact the contact point specified below for any inquiries or complaints concerning our handling of specific personal information or the like.
R&D Department
Tel: +82 2 2182 1827
Fax: +82 2 578 2995
E-mail: privacy2@inbody.com
InBody Bldg., 54 Nonheon-ro 2-gil
Gangnam-gu, Seoul 06313
Republic of Korea
