What we collect, how we use it, and who we share it with.
IP2X Limited ("IP2X", "we", "our" or "us") is committed to protecting your privacy and handling your personal information responsibly.
This Privacy Notice explains what information we collect, how we use it, who we share it with, and the choices available to you.
We have designed IP2X around the principle of privacy by design. Wherever possible, information that identifies you is stored separately from information relating to your exercise activity.
IP2X is the data controller for the personal information described in this Privacy Notice, except where we process information solely on behalf of a Commercial Partner. In those circumstances, IP2X may act as a data processor in accordance with applicable data protection law.
To operate the Services, IP2X maintains three separate categories of information.
This information identifies you and is stored within the client-facing database.
It may include:
You may review and update most Personal Data through the IP2X app or website using two-factor authentication.
Exercise Data is stored separately from Personal Data using pseudonymisation.
Exercise Data may include:
Exercise Data does not normally contain information that directly identifies you.
Only IP2X retains the secure information required to link Exercise Data with your Personal Data.
Commercial Partners may provide information including:
This information is stored separately from both Personal Data and Exercise Data.
We use Personal Data to:
We use Exercise Data to:
We use Commercial Partner Data to:
Personal Data may be shared with the relevant Commercial Partner where necessary to:
Commercial Partners cannot amend your Personal Data within IP2X.
Exercise reports relating to their own programmes may also be shared with the relevant Commercial Partner.
Commercial Partners cannot access Exercise Data outside the reports authorised for their own programmes.
Approved Research Partners may receive pseudonymised Exercise Data.
Research Partners:
IP2X will not share your identifiable Health Data with your GP, specialist, surgeon or any other healthcare professional unless:
We may disclose information where required by law, court order or a lawful request from a regulatory or public authority.
IP2X does not sell your Personal Data.
IP2X does not sell identifiable Health Data.
From time to time, organisations may wish to obtain anonymised or aggregated exercise information for purposes such as public health research, policy development or sports participation analysis.
Where your consent is legally required, IP2X will request your explicit opt-in permission before sharing information beyond the operation of the Services.
Protecting your privacy is central to the design of IP2X.
Accordingly:
We retain information only for as long as reasonably necessary to:
Where information is no longer required, it will be securely deleted or anonymised where appropriate.
IP2X uses technical and organisational measures designed to protect information against unauthorised access, loss, misuse or disclosure.
These measures include, where appropriate:
No internet-based service can guarantee absolute security, but IP2X continually reviews and improves its security controls.
Subject to applicable law, you may have the right to:
Some rights may be limited where legal exemptions apply.
The IP2X website and app may use cookies and similar technologies to:
Where required by law, you will be asked for your consent before non-essential cookies are used.
We may update this Privacy Notice from time to time.
Material changes will be notified through the app, website or by email where appropriate.
The latest version will always be available through the IP2X website.
Questions regarding this Privacy Notice or the way IP2X handles personal information should be directed to:
Email: hello@ip2x.com