Tona collects information about you which may directly or indirectly identify you. This will be collected when either you or users you connect with share it with Tona.
You provide Tona with information, some of which is personal data, when signing up to use the Services, for example, by creating an account on the mobile phone app, corresponding with us via email or sharing details of your workouts when using the Services. You also provide us with personal information when you record, connect, compete and repeat using the Tona Services, and information can be collected throughout your use of the Services.
As part of your use of the Tona Services you provide the following data:
We may aggregate and anonymise data on your use of the Services in order to improve our service, to post publicly, or to sell data on trends.
The personal information you share with us and that we collect from you is intended for use by Tona to enable Tona to provide you with the full range of Services. Your personal information may be shared with third parties in certain circumstances as described below.
Your information and content may be publicly accessible to Tona members, Service users and non-members. Our leaderboard feature is an example of where your data can be viewed publicly; over the web or on gym displays. Options are available within you personal account settings which allow you to control this data. If you have any queries or requests on this topic or would like assistance with restricting the availability of your personal data, please contact us on email@example.com.
Tona may be required to disclose or share your personal information in order to comply with a legal or regulatory obligation (for example, we may be required to disclose personal information to the police, regulators, government agencies or to judicial or administrative authorities). We may also disclose your personal information to third parties where disclosure is both legally permissible and necessary to protect or defend our rights, matters of national security, law enforcement, to enforce our Terms and Conditions or protect your rights or those of the public.
If Tona becomes involved in a business combination, merger, acquisition, transfer of assets, securities offering, bankruptcy, reorganisation, dissolution or other similar transaction ("Transactions"), we may share or transfer your information to third parties in connection with such Transactions.
Tona utilises third-party websites that can be accessed outside of https://www.tona.fit, such as https://tona.zendesk.com (“External Websites”). Our Services may contain links to External Websites, including service platforms, which enable us to efficiently manage customer contact. If you access these External Websites via any links provided through any Service, you will exit the Tona Services. The use of these third-party websites or services is as per the terms defined by that company, and Tona does not accept liability for the use of your personal data by these organisations.
The External Websites are designed to keep the visual branding aligned with that of Tona Services, but these sites are hosted by external service providers with their own terms and privacy policies. When interacting with the External Websites your information may be collected, stored, processed, or shared outside of the Services. If you interact with the External Sites, you acknowledge that you may be subject to the terms and conditions and policies applicable to such External Websites.
Tona is not responsible for the personal information that you submit, share or disseminate via External Websites.
In order to take payments for the provision of certain services provided by Tona, we make use of Payment Card Industry compliant third-party payment services such as Apple Pay, Google Pay, Stripe etc. The use of these Payment Services are under the terms provided by the payment provider, and payment details such as card number are not stored by Tona.
We take reasonable steps to protect your personal data and to store that data securely using appropriate measures, so that it is protected against unauthorised or unlawful access or use, alteration, or wrongful deletion.
There are always risks associated with providing personal data, whether in person, written, spoken, via the internet or other by other means, and no system is completely robust in preventing unauthorised access.
At Tona, we take measures to protect the collection, transmission and storage of the data we collect, but we do not guarantee or warrant the security of the information you share with us.
The Services use industry standard Secure Sockets Layer (SSL) technology ensures all personal information and credit card numbers are encrypted, and our servers are protected using firewall technology.
While we aim to protect your personal information, no data transmission over the Internet can be guaranteed to be completely secure. Transmitting personal information is done at your own risk. Tona cannot warrant the security of any information you transmitted to or from the Tona Services.
User information permissions and data collection settings can be modified, restricted, or removed. These privacy controls can be found in account or settings functions on the Tona Services, or via the permissions functions of your devices. If you find that you are unable to control any aspect of your data on your account, please contact us at firstname.lastname@example.org.
It may be possible to make some aspects of your information private to only a selected group, or completely private. For more information on this, please contact us at email@example.com.
You can choose to stop receiving certain emails by indicating your preference using notification settings links usually found at the end of emails. For certain types of emails, such as confirmation of account generation, or class bookings, these cannot be switched off as they form a fundamental part of our Service.
Notification settings can be found within mobile applications from the user account settings page, usually denoted with a cog icon.
Under applicable data protection laws (to the extent they apply to Tona and you) you always have the right to access your personal information.
In some areas of the Services, direct access by the user is possible. In other cases we can be contacted at firstname.lastname@example.org when necessary to request access to your personal information, and Tona can provide a single copy of the personal information that has been collected, free of charge. If you require further copies of your personal data, we may charge a reasonable administration fee.
You have the right to know what information related to you and your account has been collected, what the information is used for, and the parties (if any) that information has been provided to. In order to fulfil this, we may need additional information from you, i.e. to confirm your identity.
You may also modify, correct, restrict, download or delete your information, or restrict how we process your personal information within or across the Services. Many of these features will be available directly to the user via the Services, but in cases in which this is not possible, or in the instance you would like to have incorrect or incomplete personal information that we process about you amended, please contact us at email@example.com.
Where you have provided consent for Tona to access personal information, such as to permit us to process health-related data about you, you have the right to at any later time withdraw your consent to the processing of your personal information. This may be done by accessing your user settings or permission settings directly through the services, or in some cases this can be changed via mobile device permissions settings.
You may raise a concern about our use of your personal information and you have the right to do so with the relevant supervisory authority, and will not affect any other rights you may have.
You may also delete a workout after it is posted, by selecting the menu for that exercise, usually denoted by the ellipsis icon (three dots in a horizontal line arrangement) in the upper right corner of a workout summary post, or within that workout.
To request that your account is deleted, please contact us at firstname.lastname@example.org. Please note that we are not obligated to comply with a request for deletion of your personal data in circumstances where we need to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims.
After a request is submitted for account deletion, your data, including your account, activities and leaderboard positions cannot be recovered.
Note that content you have shared with others, such as photos, or that others have copied may also remain visible after you have deleted your account or deleted specific information from your own profile.
You have the right to make a complaint to your local data protection authority if you believe that Tona has not complied with applicable data protection laws.
If you are based in the UK, or the issue relates to the UK, the Information Commissioner’s Office can be contacted at:
Telephone: +44 0303 123 1113
Address: Water Lane, Wycliffe House, Wilmslow, Cheshire, SK9 5AF
If you are based elsewhere in the European Economic Area (EEA), or the issue you would like to complain about took place elsewhere in the EEA, please click here for a list of local data protection authorities in the countries within the EEA in which we operate.
Tona is based in London, UK. However, Tona's services and products may be delivered using resources and servers located in various countries (ranging from the U.S.A. to Ukraine). Therefore, your information may be processed outside the country that the service you are using is based in, including countries outside the European Economic Area (EEA) where the standard of protection of privacy does not meet the requirements set by the European Commission (the U.S.A is a current example of such a country).
In line with the principles mentioned above, your personal information may be transferred or access to it may be permitted to Tona subcontractors (such as the software development team or customer support teams) that carry out tasks related to our Services. Our subcontractors are not authorised to use the personal information for any other purpose, and all subcontractor services are covered by a confidentiality clause.
Personal information may be disclosed where necessary to comply with legal obligations or for the purpose of legal claims or defence.
We may collect and share anonymised, non-identifiable data on our users, our users’ use of our Services, or our users’ use of our Partner or third-party services to third-parties, advertisers, or business partners. We do this for a variety of reasons, i.e. a partner gym may find it useful to host more of your favourite exercise classes if they often fill up or become more popular. These statistics do not contain personally identifiable information (PII).
Tona retains your personal information only as long as it is necessary to provide the Services to you and others, to the extent permitted by applicable laws and in some cases to fulfil any legal obligations. Information associated with your account will generally be kept by Tona until it is no longer necessary to provide the Services or until your account is deleted.
Information about you that is no longer necessary and relevant to provide our Services may be de-identified or aggregated with other non-personal data in an anonymous manner, to provide insights which are commercially valuable to Tona, such as statistics of the use of the Services.
152-160 City Road,
© 2019 Tona Ltd