Enterprise eligibility information may be collected
If you use an enterprise-provided benefit, you may give Function employer or customer names, eligibility details and identification numbers; enterprise customers may also provide contact and eligibility data. Information received from and processed on behalf of those customers is excluded from this policy and may be governed by their agreements.
Supporting quotations
Service-eligibility data, if you are accessing the Service as part of an enterprise customer-provided offering or benefit, you may provide us with relevant information such as your employer or other enterprise customer name, eligibility data, and relevant enterprise customer identification number.
Our enterprise customers, such as employers, gyms and other entities that may provide us with some of your personal information such as your Contact data and Service-eligibility data.
This Privacy Policy does not apply to personal information that we receive from and process on behalf of our enterprise customers while providing Function services to them. For example, to the extent that we receive your personal information from your employer related to your eligibility for our Service, our use of that personal information may be governed by our agreements (including, as applicable, a business associate agreement) with the relevant enterprise customer. If you have questions regarding your personal information that we process on behalf of an enterprise customer, please direct your questions to the relevant enterprise customer.
Data Access & Collection · Company practice
Health and genetic information may be collected or generated
Depending on your use, Function may collect physical or mental health history, diagnoses, treatments, medications, images, biomarkers, samples, results and clinical notes. Sources include self-reported forms, uploaded records and linked devices. Certain available lab tests may also produce inherited-characteristic data; the policy does not say every test generates genetic data.
Supporting quotations
Health-related data, such as mental or physical history, conditions and diagnoses, treatments, medications, medical images, biomarkers, lab samples, lab results, clinical notes, and other physical or mental health information. This may include personal information that you provide directly to us when you complete electronic forms designed for you to self-report your physical or mental health status, upload medical records, or link a wearable or Internet of Things device to our Services.
Genetic data, certain of the lab tests available through the Service may produce data that relates to inherited characteristics.
Data Access & Collection · Company practice
Recordings, transactions, communications and relationships
Function may collect audio or video recordings, order and transaction histories, purchase considerations and tendencies, communications through channels such as email or chat, and your relationship to people whose information you provide. These are possible categories depending on your interaction, not a claim that every user supplies all of them.
Supporting quotations
Audiovisual recording data, such as video and audio recordings of you.
Transactional data, such as information relating to or needed to complete your orders on or through the Service, including order numbers and transaction history. This includes purchase considerations, consumption history and purchase tendencies.
Communications data based on our exchanges with you, including when you contact us through the Service, communicate with us via email, phone, chat features, social media, or otherwise.
Relationship data, such as familial or other relationship to third parties whose personal information you may provide to us.
Data Access & Collection · Company practice
Payment details and identification documents
Transaction data may include card or bank information. A third-party vendor directly collects and processes payment-card information. Function may also collect government-issued identifiers, such as driver's-license numbers, and an image of the relevant ID.
Supporting quotations
Payment data needed to complete transactions, including payment card information or bank account number. We use a third-party vendor to directly collect and process your payment card information, as described further below.
Government-issued identification number data, such as a state or local identification number (e.g., driver’s license or state ID number) and an image of the relevant identification card.
Data Access & Collection · Company practice
Marketing engagement, content and metadata
Function may collect marketing preferences and engagement, and content you generate or share such as photos, reviews and messages. Associated metadata may reveal how, when, where or by whom content was collected or edited, including added location information or keywords.
Supporting quotations
Marketing data, such as your preferences for receiving our marketing communications and details about your engagement with them.
User-generated content data, such as photos, images, music, videos, comments, reviews, questions, messages, and other content or information that you generate, transmit, or otherwise make available on the Service, as well as associated metadata. Metadata includes information on how, when, where and by whom a piece of content was collected and how that content has been formatted or edited. Metadata also includes information that users can add or can have added to their content, such as keywords, geographical or location information, and other similar data.
Data Access & Collection · Company practice
The category list is not exhaustive
Function may collect other data not specifically listed, using it as described in this policy or as otherwise disclosed when it is collected.
Supporting quotations
Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.
Data Access & Collection · Company practice
Business transactions can bring in personal information
Function may receive personal information in actual or prospective mergers, acquisitions, asset sales or similar transactions, including from a successor, assignee or another transaction party, and in insolvency, bankruptcy or receivership.
Supporting quotations
Business transaction partners. We may receive personal information in connection with an actual or prospective business transaction. For example, we may receive your personal information from an entity we acquire or are acquired by, a successor, or assignee or any party involved in a business transaction such as a merger, acquisition, sale of assets, or similar transaction, and/or in the context of an insolvency, bankruptcy, or receivership.
Data Access & Collection · Company practice
Devices and interactions may be logged automatically
Function, its service providers and business partners may log information about devices and interactions over time with its service, communications and other online services. Examples include device specifications, identifiers including advertising IDs, IP address, language, carrier or network information and general location.
Supporting quotations
Automatic data collection. We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with the Service, our communications and other online services, such as:
Device data, such as your computer or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., Wi-Fi, LTE, 3G), and general location information such as city, state or geographic area.
The policy lists precise geolocation when you authorize the mobile app to access your device's location. You can disable Function's precise-location access in your device settings.
Supporting quotations
Precise geolocation data when you authorize our mobile application to access your device’s location.
Mobile location data. You can disable our access to your device’s precise geolocation in your mobile device settings.
Data Access & Collection · Company practice
Browsing and message activity may be tracked
Automatic collection may record viewed pages, searches, navigation, time spent, referring sites and access times, plus opened emails or clicked links. Invisible email pixels may detect opens or forwarding; communications tracking is not limited to messages you send to Function.
Supporting quotations
Online activity data, such as pages or screens you viewed, search history, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths between pages or screens, information about your activity on a page or screen, access times and duration of access, and whether you have opened our emails or clicked links within them.
Communication interaction data such as your interactions with our email, text or other communications (e.g., whether you open and/or forward emails) – we may do this through use of pixel tags (which are also known as clear GIFs), which may be embedded invisibly in our emails enabling us to detect if you have opened or forwarded a message.
Data Access & Collection · Company practice
Cookies, local storage and pixels support tracking
Function describes session and longer-lived cookies placed by itself and third parties, used to record browsing and remember preferences, submissions and login state. Local storage provides similar functionality with more storage. Pixels can show when pages, emails or content were opened, viewed or clicked.
Supporting quotations
Cookies and similar technologies. Some of the automatic collection described above is facilitated by the following technologies:
Cookies, which are small text files that websites store on user devices and that allow web servers to record users’ web browsing activities and remember their submissions, preferences, and login status as they navigate a site. Cookies used on our sites include both “session cookies” that are deleted when a session ends, “persistent cookies” that remain longer, “first party” cookies that we place and “third party” cookies that our third-party business partners and service providers place.
Local storage technologies, like HTML5, that provide cookie-equivalent functionality but can store larger amounts of data on your device outside of your browser in connection with specific applications.
Web beacons, also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked.
Data Access & Collection · User right or choice
Browser controls can block cookies and email pixels
Most browsers allow removal or rejection of cookies, often accepted by default. Disabling cookies may impair the service. Blocking image loading can prevent web beacons from functioning. The policy links to an outside cookie guide, whose contents are not supplied here.
Supporting quotations
Cookies. Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. Please note that if you set your browser to disable cookies, the Service may not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit www.allaboutcookies.org. You can also configure your device to prevent images from loading to prevent web beacons from functioning.
Not stated here
The external cookie guide is not supplied; this card cannot provide its additional browser-specific instructions.
Data Access & Collection · User right or choice
Browser and platform tools may limit ad tracking
You may be able to limit interest-based advertising by blocking third-party cookies, using privacy browsers or tracking-blocking plug-ins, or using Google or Facebook's opt-out features. The policy presents these as possible limits, not a guarantee that all tracking or advertising stops.
Supporting quotations
Advertising choices. You may be able to limit use of your information for interest-based advertising through the following settings/options/tools:
Browser settings. Changing your internet web browser settings to block third-party cookies.
Privacy browsers/plug-ins. Using privacy browsers and/or ad-blocking browser plug-ins that let you block tracking technologies.
Platform settings. Google and Facebook offer opt-out features that let you opt-out of use of your information for interest-based advertising. You may be able to exercise that option at the following websites:
Data Access & Collection · User right or choice
Blocking images can prevent web beacons
Browser or device settings may prevent image loading, which the policy identifies as a way to stop web beacons from functioning. Cookie blocking is a separate control and can make the service work improperly.
Supporting quotations
Blocking images/clear gifs: Most browsers and devices allow you to configure your device to prevent images from loading. To do this, follow the instructions in your particular browser or device settings.
Cookies. Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. Please note that if you set your browser to disable cookies, the Service may not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit www.allaboutcookies.org. You can also configure your device to prevent images from loading to prevent web beacons from functioning.
Not stated here
The external cookie guide mentioned in the evidence is not supplied; this card does not assess its instructions.
Data Access & Collection · User right or choice
You can disable precise location access
Use mobile-device settings to disable Function's access to precise geolocation. This control concerns precise location, not every kind of location information.
Supporting quotations
Mobile location data. You can disable our access to your device’s precise geolocation in your mobile device settings.
Data Access & Collection · Company practice
Genetic data maps to multiple statutory categories
The genetic-data row lists identifiers, customer records and protected characteristics among its statutory categories. These are classifications of the row, not permissions to advertise using genetic information.
Supporting quotations
Genetic data
Identifiers
Customer records
Protected characteristics
Data Access & Collection · Company practice
Under-18 collection statement is framed in terms of knowledge
Function says it has no actual knowledge of collecting, selling or sharing information of residents under 18. Separately, the service is not intended for under-18 use, the policy states a no-sale/sharing commitment for minors, and it promises legally required deletion if it learns of child collection without required parental consent. The knowledge statement is not proof that no minor information exists.
Supporting quotations
Consumers under 18. We do not have actual knowledge that we have collected, sold, or shared the personal information of residents who are under 18 years of age.
The Service is not intended for use by anyone under 18 years of age. If you are a parent or guardian of a minor from whom you believe we have collected personal information in a manner prohibited by law, or if information was provided on your behalf when you were under 18, please contact us. If we learn that we have collected personal information through the Service from a child without the consent of the child’s parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.
Other than for targeted advertising purposes, we do not sell personal information (including Sensitive Personal Information), as defined under applicable law. We have not engaged in such activities in the 12 months preceding the date this Privacy Policy was last updated. Without limiting the foregoing, we do not sell or "share"/knowingly sell or "share" personal information (including Sensitive Personal Information) of minors under 18 years of age.
Data Access & Collection · Company practice
Collection varies with your relationship and use
Function's collection depends on your relationship and interaction with the service; an enterprise prospect's representative provides less information than a member obtaining tests. Information provided or generated may include contact and address details, age, gender, race or ethnicity, sex assigned at birth, sexual orientation, account credentials, photographs, social profiles, preferences and survey or promotion participation.
Supporting quotations
The personal information we collect may differ depending on your relationship with us. For example, if you are a representative of a prospective enterprise customer, we will collect limited personal information in comparison to if you were a Function member who obtains tests through Function. Please consider your relationship with us in the context of reading this Privacy Policy.
Information you provide to us or that we generate about you. Depending on how you interact with the Service, the personal information you may provide to us through the Service or that we generate about you or otherwise may include:
Contact data, such as your first and last name, salutation, email address, billing and mailing addresses, and phone number.
Demographic data, such as your city, state, country of residence, postal code, age, date of birth, gender or gender identity, racial or ethnic identity, assigned sex at birth, and sexual orientation.
Account data, such as the username and password that you may set to establish an online account on the Service, date of birth, biographical details, photograph or picture, links to your profiles on social networks, preferences, information about your participation in our promotions or surveys, and any other information that you add to your account profile.