Access, edit and delete your information; some copies are kept
When you log in you may access, and in some cases edit or delete, certain information you gave WHOOP, such as name, username and password, email and mailing address and other profile information. When you update information, WHOOP may keep a copy of the unrevised information in its records. You may request access to or a full deletion of your account and corresponding data by contacting privacy@whoop.com or using the "Data Management" feature in the WHOOP Privacy Center. You will be asked to complete a verification form to show you have authority. WHOOP says it may need to retain certain Personal Data after you update or delete it, as well as aggregated or de-identified data derived from or incorporating your Personal Data that does not identify you.
Supporting quotations
you may access, and, in some cases, edit or delete certain information you’ve provided to us
When you update information, however, we may maintain a copy of the unrevised information in our records.
You may request access to or a full deletion of your account and corresponding data by contacting privacy@whoop.com or via the “Data Management” feature available in the WHOOP Privacy Center privacy.whoop.com.
You will be asked to complete a verification form in connection with such access or deletion request in order to ensure that you have the authority to access or delete your account.
We may need to retain certain Personal Data in our records, as well as aggregated data or de-identified data derived from or incorporating your Personal Data that does not identify you after you update or delete it.
Qualifications & exceptions
Self-service editing and deleting applies to "certain" information, "in some cases."
Deletion requests require completing a verification form.
Deletion is not complete: WHOOP "may need to retain certain Personal Data," plus aggregated or de-identified derived data.
Not stated here
Which Personal Data WHOOP retains after deletion, and for how long, is not specified here.
Account & Service Control · User right or choice
Privacy settings control whether you are searchable
You can change certain privacy settings in the WHOOP mobile app, including whether you are searchable on WHOOP by your name or username. In Settings on the Main Menu page, choose "Privacy" to make yourself private or searchable. This connects to the earlier statement that users are by default searchable by other users.
Supporting quotations
You can change certain privacy settings, such as whether you are searchable on WHOOP by your name or username
select “Privacy,” where you can choose to make yourself private or searchable.
Qualifications & exceptions
The setting is described for the WHOOP mobile application.
Marketing email opt-out, with some non-marketing emails not optional
You can opt out of marketing-related emails and other communications through the "Data Management" feature in the WHOOP Privacy Center or by following the opt-out or unsubscribe instructions in the marketing message. You cannot opt out of receiving certain non-marketing emails regarding the Services.
Supporting quotations
You can opt-out of marketing-related emails and other communications by going to our “Data Management” feature available in the WHOOP Privacy Center privacy.whoop.com, or by following the opt-out or unsubscribe instructions contained in the marketing-related message.
You cannot opt-out of receiving certain non-marketing emails regarding the Services.
Qualifications & exceptions
Certain non-marketing emails about the Services cannot be opted out of.
Not stated here
Which non-marketing emails cannot be stopped is not specified.
Account & Service Control · Procedure
How to contact WHOOP about privacy
For questions or concerns about WHOOP's privacy policies, you can send a detailed message to privacy@whoop.com or write to Whoop, Inc., Attn: Legal Department, One Kenmore Square, #601, Boston, MA 02215.
Supporting quotations
please send us a detailed message to privacy@whoop.com or at the mailing address below
Whoop, Inc., Attn: Legal Department, One Kenmore Square, #601 Boston, MA 02215
Account & Service Control · User right or choice
State rights: information, access, deletion, correction and appeal
The notice lists these state-law rights: information (the policy describes the Personal Data collected and sources in its "Personal Data We Collect" and "How We Collect Personal Data" sections, and the purposes for use and sharing in its "How We Use" and "How We Share" sections); access (request a copy of the Personal Data WHOOP maintains about you); deletion (ask to delete Personal Data WHOOP collected from you); correction (ask to correct inaccuracies); and appeal ("You may be permitted to appeal our decision, if we deny your request"). The rights are what state law may provide, so the notice does not itself set out how to make each request in this part.
Supporting quotations
The Privacy Policy describes the types of Personal Data
Access: You can request a copy of the Personal Data that we maintain about you.
Deletion: You can ask to delete the Personal Data that we have collected from you.
Correction:You can ask to correct inaccuracies in your Personal Data.
Appeal:You may be permitted to appeal our decision, if we deny your request.
Qualifications & exceptions
Appeal is stated as something you "may be permitted" to do if WHOOP denies a request.
Not stated here
This part does not say how to submit access, deletion or correction requests; the "Your Choices" section gives privacy@whoop.com and the Privacy Center Data Management feature.
Account & Service Control · Company commitment
No discrimination for exercising privacy rights
WHOOP says you are entitled to exercise the described state privacy rights free from discrimination, and that it will not discriminate against you for exercising your California privacy rights.
Supporting quotations
You are entitled to exercise the rights described above free from discrimination.
We will not discriminate against you for exercising your California privacy rights.
Qualifications & exceptions
The commitment is stated for the described state rights and California privacy rights.
Not stated here
The text does not define what counts as discrimination.
Account & Service Control · Procedure
How to submit access, correction, deletion and opt-out requests
To request access to, correction of or deletion of Personal Data collected through your use of the Services, you can use the "Data Management" feature in the WHOOP Privacy Center or email privacy@whoop.com. To learn how to opt out of interest-based ads and other online tracking, the policy points to its "Online tracking opt-outs" section.
Supporting quotations
To exercise these rights, you can submit requests as follows:
please either (i) use the “Data Management” feature available on the WHOOP Privacy Center privacy.whoop.com; or (ii) email us at privacy@whoop.com.
To learn how to opt-out of interest-based ads and other online tracking, see the “Online tracking opt-outs” section of the Privacy Policy.
Qualifications & exceptions
Requests to opt out of ads are handled through the opt-out instructions, not through the Data Management request.
Account & Service Control · Restriction or exception
Identity verification, authorized agents and a limit on requests to know
Before responding to requests, WHOOP may ask you to confirm information it has on file about you or your interactions with it. If it asks for additional Personal Data to verify your identity, it says it will only use that data to verify your identity or your authority to make the request for another consumer. You can empower an authorized agent to submit requests in the same manner, although WHOOP may require the agent to present signed written permission and may require you to independently verify your identity and confirm you gave the agent permission. WHOOP says it is only required to honor requests to know twice in a 12-month period.
Supporting quotations
To verify your identity prior to responding to your requests, we may ask you to confirm information that we have on file about you or your interactions with us.
Where we ask for additional Personal Data to verify your identity, we will only use it to verify your identity or your authority to make the request on behalf of another consumer.
we may require the agent to present signed written permission to act on your behalf, and you may also be required to independently verify your identity with us
we are only required to honor requests to know twice in a 12-month period
You will be asked to complete a verification form in connection with such access or deletion request in order to ensure that you have the authority to access or delete your account.
Qualifications & exceptions
Extra data collected to verify identity is limited to verifying identity or authority.
WHOOP "may require" signed written permission from an authorized agent and may require you to verify with WHOOP.
Requests to know are limited to twice in a 12-month period.
Account & Service Control · User right or choice
More European rights: portability, objection, restriction, complaint and copy of transfer clauses
Besides the rights covered earlier, the European notice lists: portability (a copy of your Personal Data in a machine-readable format and, where technically feasible, transmission to another controller); objection (telling WHOOP you object to further use or disclosure for certain purposes, such as direct marketing); restriction of processing (asking WHOOP to restrict further processing); the right to lodge a complaint with the supervisory authority in the relevant European Economic Area member state, the UK or Switzerland where you reside; and obtaining a copy of any Standard Contractual Clauses or other international data transfer agreement WHOOP may use to transfer your personal data outside Europe.
Supporting quotations
You can ask for a copy of your Personal Data in a machine-readable format. You can also request that we transmit the data to another controller where technically feasible.
You can contact us to let us know that you object to the further use or disclosure of your Personal Data for certain purposes, such as for direct marketing purposes.
You can ask us to restrict further processing of your Personal Data.
You have the right to lodge a complaint about our practices with respect to your Personal Data with the supervisory authority in the relevant European Economic Area member state, UK or Switzerland, as applicable, where you reside.
Obtain a copy of any Standard Contractual Clauses or other international data transfer agreement we may use to transfer your personal data outside of Europe.
Qualifications & exceptions
Transmission to another controller is available "where technically feasible."
Objection is described for "certain purposes, such as for direct marketing purposes."
The right to a transfer agreement copy covers agreements WHOOP "may use."
Account & Service Control · Procedure
Submitting European rights requests; WHOOP may decline in some cases
For more information about the European rights, or to submit a request, you can email whoop@gdpr-rep.com or privacy@whoop.com. WHOOP says that in some circumstances it may be allowed to wholly or partially decline your request in accordance with applicable data protection laws, including the GDPR, but it will still respond to notify you of the decision in line with the timescales under those laws. WHOOP may also need additional information, which may include Personal Data, to verify your identity and the nature of your request. For questions about the section or its data practices generally, contact privacy@whoop.com.
Supporting quotations
please email whoop@gdpr-rep.com or privacy@whoop.com
in some circumstances, we may be allowed to wholly or partially decline your request in accordance with applicable data protection laws (including the GDPR), but in those circumstances, we will still respond to notify you of such a decision in accordance with the timescales under such laws
we may also need you to provide us with additional information, which may include Personal Data, if necessary to verify your identity and the nature of your request
If you have any questions about this section or our data practices generally, please contact us at privacy@whoop.com.
Qualifications & exceptions
WHOOP may decline a request wholly or partly "in some circumstances" allowed by data protection law, and will still respond.
Verification may require additional information, which may include Personal Data.
Not stated here
The response timescale is left to applicable law and is not stated here.
The circumstances in which a request may be declined are not listed.
Account & Service Control · User right or choice
Brazil: other compatible uses and the right to confirmation of processing
In the Brazil notice WHOOP says it may use Personal Data for reasons not described in the policy where permitted by law and compatible with the purpose of collection, and that it will notify you and explain the legal basis for an unrelated purpose. Among Brazilian data subject rights, which are introduced with "including," is the right to obtain confirmation of the existence of processing of your Personal Data.
Supporting quotations
We may use your Personal Data for reasons not described in this Privacy Policy where permitted by law and where the reason is compatible with the purpose for which we collected it.
If we need to use your Personal Data for an unrelated purpose, we will notify you and explain the applicable legal basis.
You have certain rights with respect to your Personal Data, including:
You have the right to obtain confirmation of the existence of the processing activity of your Personal Data.
Qualifications & exceptions
Compatible new uses are allowed "where permitted by law."
The rights list is introduced with "including."
Account & Service Control · User right or choice
Brazil rights: access, correction, anonymization or deletion, and portability
Brazilian residents are told they have the right to access their Personal Data (a simplified or complete statement of the categories processed, the source and the purposes) and to obtain a full copy of the Personal Data processed based on consent or on a contract; to request correction of incomplete, inaccurate or outdated data; in certain cases, where data is unnecessary, excessive or processed in non-compliance with the LGPD, to request its anonymization, blocking or deletion; and, in certain cases as defined by the Brazilian Data Protection Authority (ANPD) and always respecting WHOOP trade or industrial secrets, to portability to another service provider to the extent technically feasible.
Supporting quotations
If WHOOP processes your Personal Data, you will also have the right to access such Personal Data, i.e. to obtain a simplified or complete statement about the categories of Personal Data processed, the source of the data, and the processing purposes.
You also have the right to obtain a full copy of the Personal Data that is processed based on consent or on a contract.
You have the right to request the correction of incomplete, inaccurate, or outdated data about you.
In certain cases, when your Personal Data is unnecessary, excessive or is processed in non-compliance with the LGPD, you have the right to request the anonymization, blocking or deletion of this data.
In certain cases, as defined by the Brazilian Data Protection Authority (ANPD) and in compliance with its regulations, and always respecting WHOOP trade or industrial secrets, you have the right to the portability of your Personal Data to another service provider to the extent technically feasible.
Qualifications & exceptions
The full-copy right is stated for data processed based on consent or on a contract.
Anonymization, blocking or deletion applies "in certain cases" (unnecessary, excessive or non-compliant processing).
Portability applies "in certain cases," as defined by the ANPD, respecting WHOOP trade or industrial secrets, and to the extent technically feasible.
Not stated here
The access item contains an incomplete conditional sentence ("If your Personal Data is processed based on your consent, or on a contract entered into by you with WHOOP."), so its exact reach is not fully clear from the text.
Account & Service Control · User right or choice
Brazil rights: deletion of consent-based data and information on recipients
Where data is processed based on your consent, Brazilian residents have the right to request deletion of that Personal Data, except in cases where WHOOP has the right to retain the data under the LGPD. They also have the right to obtain information about the public and private entities with which WHOOP has shared their Personal Data.
Supporting quotations
In cases where your data is processed based on your consent, you have the right to request the deletion of such Personal Data, except in cases where WHOOP has the right to retain the data under the LGPD.
You have the right to obtain information about the public and private entities with which WHOOP has shared your Personal Data.
Qualifications & exceptions
Deletion is stated for data processed based on consent and is subject to WHOOP's right to retain data under the LGPD.
Not stated here
The cases in which WHOOP may retain data under the LGPD are not listed.
Account & Service Control · User right or choice
Brazil: refusing and revoking consent
When WHOOP asks for consent to process Personal Data, Brazilian residents have the right to refuse it, and WHOOP says it will always inform them about this right and the consequences of not consenting. When they consent for a specific purpose, they may revoke consent at any time. WHOOP adds that in that case all processing carried out up to the date of revocation is ratified, meaning earlier processing is treated as valid.
Supporting quotations
Whenever we ask for your consent to process your Personal Data, you have the right to refuse consent. We will always inform you about this right, and about the consequences if you prefer not to provide consent.
whenever you consent to the processing of your Personal Data for a specific purpose, you may revoke your consent at any time. In that case, all processing activities carried out up to the date of revocation of consent will be ratified.
Qualifications & exceptions
Revoking consent does not undo processing already carried out; it is "ratified" up to the revocation date.
Account & Service Control · User right or choice
Brazil: complaint to the ANPD, objection to unlawful processing and review of automated decisions
Brazilian residents have the right to lodge a complaint against WHOOP with the ANPD about their Personal Data; to object to any processing activity that violates the LGPD; and to request a review of decisions made solely on the basis of automated processing of Personal Data that affect their interests, including decisions intended to define their personal, professional, consumer and credit profile or aspects of their personality.
Supporting quotations
You have the right to lodge a complaint against WHOOP before the ANPD in relation to your Personal Data.
You have the right to object to any processing activity of your Personal Data that violates the provisions of the LGPD.
You have the right to request a review of decisions made solely on the basis of automated processing of Personal Data that affect your interests, including decisions intended to define your personal, professional, consumer and credit profile or aspects of your personality.
Qualifications & exceptions
Objection is limited to processing that violates the LGPD.
Not stated here
How a review of automated decisions is carried out is not described.
Account & Service Control · Procedure
Brazil: how to submit requests and when WHOOP may not fully comply
To learn more about the Brazil rights or submit a request, you can email privacy@whoop.com. WHOOP says that in some circumstances it may not be able to fully comply with a request, such as if it is frivolous or extremely impractical, if it jeopardizes the rights of others, or if it is not required by law, but in those circumstances it will still respond to notify you. It may also need additional information, which may include Personal Data, to verify your identity and the nature of your request.
Supporting quotations
please email privacy@whoop.com
in some circumstances, we may not be able to fully comply with your request, such as if it is frivolous or extremely impractical, if it jeopardizes the rights of others, or if it is not required by law, but in those circumstances, we will still respond to notify you of such a decision
we may also need you to provide us with additional information, which may include Personal Data, if necessary to verify your identity and the nature of your request
Qualifications & exceptions
The reasons for not fully complying are given as examples ("such as").
Verification may need additional information, which may include Personal Data.
Account & Service Control · Procedure
India grievance redressal: Grievance Officer, 60-day acknowledgment, Data Protection Board
For India, questions, concerns, complaints or grievances about the privacy policies, processing of Personal Data or your rights can be sent to the Grievance Officer at privacy@whoop.com or to Whoop, Inc., Attn: Legal Department, One Kenmore Square, #601, Boston, MA 02215. Information on the Grievance Officer is behind a link that is not part of the saved text. WHOOP says it will acknowledge your communication within 60 days of receipt. If WHOOP does not address your grievances, you may approach the Data Protection Board of India to make a complaint.
Supporting quotations
please write to our Grievance Officer at privacy@whoop.com or at the mailing address below
Whoop, Inc., Attn: Legal Department, One Kenmore Square, #601 Boston, MA 02215
Information regarding the Grievance Officer may be found here.
We will acknowledge your communication within 60 days of receipt.
In the event we do not address your grievances, you may approach the Data Protection Board of India to make a complaint.
Qualifications & exceptions
The commitment is to acknowledge within 60 days of receipt, not to resolve within that time.
Not stated here
The Grievance Officer's identity and details are behind a link that is not supplied here.
No resolution timeline is stated.
Account & Service Control · User right or choice
India access right: summary of data and identities of third parties
Under the India notice's Data Subject Rights, the access right lets you access a summary of your Personal Data being processed by WHOOP along with information on the processing activities undertaken with respect to it. The next item adds, subject to applicable law, the identities of the third parties with whom WHOOP has shared your Personal Data along with a description of that Personal Data.
Supporting quotations
Access: You may access:
A summary of your Personal Data being processed by us along with information on the processing activities undertaken by us with respect to your Personal Data.
Subject to applicable law, the identities of the third parties with whom we have shared your Personal Data along with a description of such Personal Data.
Qualifications & exceptions
Disclosure of third-party identities is "subject to applicable law."
Account & Service Control · User right or choice
India: requesting access, with limits when data was shared for law enforcement
The India access right also covers, subject to applicable law, the identities of the third parties WHOOP has shared your Personal Data with and a description of that data, and any other information WHOOP may be required by law to share. You submit an access request by emailing privacy@whoop.com. WHOOP says it may be restricted in sharing certain information if your Personal Data has been shared with an entity authorized by law, for law enforcement or investigation purposes, under a written order.
Supporting quotations
A summary of your Personal Data being processed by us along with information on the processing activities undertaken by us with respect to your Personal Data.
Subject to applicable law, the identities of the third parties with whom we have shared your Personal Data along with a description of such Personal Data.
Any other information relating to your Personal Data we may be required to share in accordance with applicable law.
You may submit a request to access your Personal Data by emailing us at privacy@whoop.com.
We may be restricted in sharing certain information if your Personal Data has been shared to an entity authorized by law, for law enforcement or investigation purposes, pursuant to a written order.
Qualifications & exceptions
Disclosure of third-party identities is "subject to applicable law."
WHOOP "may be restricted" from sharing certain information where data went to a lawfully authorized entity under a written order.
Account & Service Control · User right or choice
India: correct, complete or update Personal Data
You may correct inaccurate or misleading Personal Data, complete incomplete Personal Data and update Personal Data by contacting privacy@whoop.com.
Supporting quotations
You may correct inaccurate or misleading Personal Data, complete incomplete Personal Data and update Personal Data by contacting privacy@whoop.com.
Account & Service Control · User right or choice
India: withdrawing consent can end processing, may end access to Services, and leads to erasure with exceptions
Where consent is the basis for processing, an India resident may withdraw it by emailing privacy@whoop.com, and WHOOP says it will, within a reasonable time and subject to applicable law, cease to process the Personal Data. WHOOP warns that you may no longer have access to the Services if you withdraw consent. After withdrawal, WHOOP says it will also erase the Personal Data unless it must retain it for compliance with applicable law, but it may retain Aggregated Data or De-identified Data derived from or incorporating your Personal Data that does not identify you.
Supporting quotations
Where consent is the basis for our processing of your Personal Data, when you log into your account you may withdraw such consent by emailing privacy@whoop.com and we will, within a reasonable time and subject to applicable law, cease to process your Personal Data.
However, you may no longer have access to the Services in the event you withdraw your consent to us processing your Personal Data.
we will also, unless we are required to retain your Personal Data for compliance with applicable law, erase your Personal Data, but may retain Aggregated Data or De-identified Data derived from or incorporating your Personal Data that does not identify you
Qualifications & exceptions
Ceasing processing happens "within a reasonable time and subject to applicable law."
Erasure does not apply where WHOOP is required to retain the data to comply with applicable law.
WHOOP may keep aggregated or de-identified data derived from your Personal Data.
Not stated here
"Reasonable time" is not defined.
Account & Service Control · User right or choice
India: erasure requests and naming an agent
You may ask WHOOP to erase the Personal Data it holds by emailing privacy@whoop.com. On receipt, WHOOP says it will erase the data unless it is required to retain it for compliance with applicable law, but may retain Aggregated Data or De-identified Data derived from or incorporating your Personal Data that does not identify you. You may also submit a request to name an agent, an individual who will exercise your rights over WHOOP's processing of your Personal Data if you die or become incapacitated.
Supporting quotations
You may submit a request to erase your Personal Data in our possession, by emailing us at privacy@whoop.com.
unless we are required to retain your Personal Data for compliance with applicable law, we will erase your Personal Data, but we may retain Aggregated Data or De-identified Data derived from or incorporating your Personal Data that does not identify you
You may submit a request to name an agent – an individual who shall, in the event of your death or incapacity, exercise your rights with respect to us processing your Personal Data.
Qualifications & exceptions
Erasure is subject to legal retention requirements, and aggregated or de-identified derived data may be kept.
The agent exercises your rights only in the event of your death or incapacity.
Not stated here
The process for naming an agent is not described beyond submitting a request.
Account & Service Control · Procedure
Japan: how to exercise rights and verify identity
To exercise your rights in Japan, including access, rectification, erasure, a request for suspension of use, and a request for disclosure of records of third-party transfers, you can email privacy@whoop.com. To verify your identity before responding, WHOOP may ask you to confirm information it has on file about you or your interactions with it. If it asks for additional Personal Data to verify identity, it says it will only use it to verify your identity or your authority to make a request on behalf of another consumer.
Supporting quotations
To exercise your rights including the right to access, the right to rectification, the right to erasure, the right to request for suspension of use, the right to request for disclosure of records of third party transfers, you can email us at privacy@whoop.com.
Where we ask for additional Personal Data to verify your identity, we will only use it to verify your identity or your authority to make the request on behalf of another consumer.
Qualifications & exceptions
Additional data collected for verification is used only to verify identity or authority.
Account & Service Control · User right or choice
Singapore: access requests, 30-day update and possible fee
In the Singapore notice, you can access certain of your Personal Data by logging in or through Data Management, and can generally request a copy of the Personal Data WHOOP possesses or controls and information about the ways it may have been used or disclosed during the past year. WHOOP says it will respond as soon as reasonably possible, except where applicable laws permit or require it not to. If it cannot respond within 30 days, it will, within that time, inform you in writing of when it will respond. A reasonable fee may be charged, and WHOOP will tell you the estimated fee before processing the request. The rights list is introduced with "including."
Supporting quotations
You have certain rights with respect to your Personal Data, including:
You can generally also make a request for a copy of your Personal Data which is our possession or under our control and information about the ways in which your Personal Data may have been used or disclosed during the past year.
We will respond to your request as soon as reasonably possible, except where applicable laws permit or require us not to do so. Should we not be able to respond to your request within 30 days after receiving your request, we will, within such time, inform you in writing of when we will be able to respond to your request.
A reasonable fee may be charged for an access request. If so, we will inform you of the estimated fee before processing your request.
Qualifications & exceptions
WHOOP may decline to respond where applicable laws permit or require it.
A reasonable fee may be charged, with an estimate given before processing.
The 30-day commitment is to inform you in writing of when WHOOP will respond if it cannot respond within 30 days.
Account & Service Control · User right or choice
Singapore: correction requests and passing corrections to other organisations
In the Singapore notice, you may request correction of an error or omission in Personal Data WHOOP possesses or controls, and some data may be corrected directly by logging in. Except where applicable laws permit or require WHOOP not to, it says it will make the correction as soon as practicable and send the corrected Personal Data to every other organisation to which the data was disclosed by WHOOP within a year before the correction request, unless that organisation does not need the corrected data for any legal or business purpose.
Supporting quotations
You may request for the correction of an error or omission in your Personal Data that is in our possession or under our control.
Save where applicable laws permit or require us not to do so, we will make the correction as soon as practicable and send the corrected Personal Data to every other organisation to which the relevant Personal Data was disclosed by us within a year before the date the correction request was made (unless that other organisation does not need the corrected Personal Data for any legal or business purpose).
Qualifications & exceptions
The corrected data goes to organisations that received the data within a year before the request, unless they do not need it for a legal or business purpose.
WHOOP need not correct where applicable laws permit or require it not to.
Account & Service Control · User right or choice
Singapore: withdrawing consent may end the Services and WHOOP reserves its legal rights
In the Singapore notice, you have the right to withdraw consent to collection, use and/or disclosure at any time, except where WHOOP is permitted to collect, use or disclose Personal Data without consent under applicable laws. WHOOP says it will in general seek to process the request within ten business days, depending on the complexity of the request and its impact on the relationship. If you withdraw, you may have to give express consent case by case for uses or disclosures necessary to use any of the Services. The text adds that if you do not provide consent, WHOOP may not be able to continue providing the Services or fulfil its contractual obligations to you, that refusal may result in termination of agreements or arrangements and you being in breach of your obligations under them, and that WHOOP's legal rights and remedies are expressly reserved.
Supporting quotations
You have the right to withdraw your consent to the collection, use and/or disclosure by us of your Personal Data at any time, save where we are permitted to collect, use and/or disclose your Personal Data without your consent under applicable laws and regulations.
In general, we shall seek to process your request within ten (10) business days of receiving it (depending on the complexity of the request and its impact on our relationship with you).
If you do not provide consent, we may not be able to continue to provide our Services to you or fulfil our contractual obligations to you. Your refusal to grant consent may result in the termination of any agreements or arrangements you have with us and you being in breach of your obligations or undertakings under such agreements or arrangements. In the event of such termination or breach, our legal rights and remedies are expressly reserved.
Qualifications & exceptions
Withdrawal does not apply where applicable laws allow processing without consent.
Processing the request within ten business days is stated as a general aim ("in general, we shall seek to").
Refusing consent may end the Services or agreements, and WHOOP reserves its legal rights and remedies.
Account & Service Control · User right or choice
South Africa: rights under POPIA and complaint to the Information Regulator
Residents of South Africa may have additional rights under the Protection of Personal Information Act, 2013 (POPIA) or other data protection legislation, "including" access (more information and a copy, and some data by logging in or through Data Management); rectification (correct or supplement incorrect or incomplete data); erasure of some or all Personal Data from WHOOP's systems; withdrawal of consent (with a possible need for case-by-case express consent for uses necessary to use the Services); objection to further use or disclosure for certain purposes, such as direct marketing; restriction of processing; and the right to lodge a complaint with the Information Regulator at popiacomplaints@inforegulator.org.za. Information on the South African representative is behind a link that is not part of the saved text.
Supporting quotations
If you are a resident of South Africa, you may have additional rights under the Protection of Personal Information Act, 2013 (POPIA) or other data protection legislation, including:
You can request more information about the Personal Data we hold about you and request a copy of such Personal Data.
If you believe that any Personal Data we are holding about you is incorrect or incomplete, you can request that we correct or supplement such data.
You can request that we erase some or all of your Personal Data from our systems.
if you exercise this right, you may have to then provide express consent on a case-by-case basis for the use or disclosure of certain of your Personal Data, if such use or disclosure is necessary to enable you to utilize some or all of our Services
You can contact us to let us know that you object to the further use or disclosure of your Personal Data for certain purposes, such as for direct marketing purposes.
You can ask us to restrict further processing of your Personal Data.
You have the right to lodge a complaint about our practices with respect to your Personal Data with the Information Regulator at the following email address: popiacomplaints@inforegulator.org.za.
Information regarding our South African representative is available here.
Qualifications & exceptions
The rights are described as ones you "may have," introduced with "including."
Withdrawing consent may require case-by-case express consent for uses necessary to use some or all of the Services.
Not stated here
The South African representative information is behind a link that is not supplied here.
Account & Service Control · User right or choice
European data subject rights: access, rectification, erasure and portability
European residents have rights including access (request more information and a copy of the Personal Data WHOOP holds; some can also be accessed by logging in or through Data Management in the Privacy Center), rectification (request correction or supplementation of incorrect or incomplete data, and correct some directly by logging in), erasure (request erasure from WHOOP's systems) and portability (ask for a copy in a machine-readable format and, where technically feasible, ask WHOOP to transmit it to another controller). The list is introduced with "including," so it is not stated to be the complete set of rights.
Supporting quotations
You have certain rights with respect to your Personal Data, including:
You can request more information about the Personal Data we hold about you and request a copy of such Personal Data.
If you believe that any Personal Data we are holding about you is incorrect or incomplete, you can request that we correct or supplement such data.
You can request that we erase your Personal Data from our systems.
You can ask for a copy of your Personal Data in a machine-readable format. You can also request that we transmit the data to another controller where technically feasible.
Qualifications & exceptions
The rights list is introduced with "including."
Transmission to another controller is available "where technically feasible."
Not stated here
The erasure item does not state conditions, exceptions or timing.
Account & Service Control · User right or choice
Withdrawing consent can require case-by-case consent for some uses
If WHOOP is processing Personal Data based on your consent, you have the right to withdraw it at any time. WHOOP notes that if you do, you may then have to provide express consent on a case-by-case basis for the use or disclosure of certain Personal Data, if that use or disclosure is necessary to enable you to use some or all of the Services.
Supporting quotations
If we are processing your Personal Data based on your consent (as indicated at the time of collection of such data), you have the right to withdraw your consent at any time.
if you exercise this right, you may have to then provide express consent on a case-by-case basis for the use or disclosure of certain of your Personal Data, if such use or disclosure is necessary to enable you to utilize some or all of our Services
Qualifications & exceptions
Withdrawal applies where processing is based on consent.
Some features may require case-by-case express consent after withdrawal.
Account & Service Control · User right or choice
Mexico data subject rights: access, rectification, cancellation, opposition, withdrawing consent
Residents of Mexico are told they have the right to request a copy of the Personal Data WHOOP holds; to request correction of inaccuracies and completion of incomplete data (rectification); to request that the data be cancelled; to oppose processing for specific purposes (opposition); and to withdraw consent at any time. WHOOP adds that withdrawing consent does not make any processing carried out before the withdrawal invalid.
Supporting quotations
If you reside in Mexico, you have the following rights.
you can request a copy of the Personal Data we hold about you
you can request that we correct any inaccuracies in the Personal Data we hold about you and complete any Personal Data where it is incomplete
you can request that the Personal Data we hold about you be cancelled
you have a right to oppose the processing of your Personal Data for specific purposes
you are entitled to withdraw your consent to that processing at any time. If you withdraw your consent, this will not mean any processing we carried out prior to your withdrawal is invalid.
Qualifications & exceptions
Withdrawal of consent is not retroactive: earlier processing remains valid.
Account & Service Control · Procedure
Mexico: how to exercise rights and limit use or disclosure
To exercise Mexico rights, email privacy@whoop.com. WHOOP says it will provide: the documents and information that should accompany the application, including documents to evidence your identity or your representative's capacity; the timeframes to receive a response; and the means of reproduction it will use to provide the requested information. To explore options for limiting how WHOOP uses and discloses your Personal Data so it does not process the data for a particular purpose, the notice says to contact WHOOP "as described in the section 14." The section numbers are not stored in the saved text; "the section 14" is read as the Contact Us section from the order of the numbered headings and the policy's own cross-references (see the reference decision), which is an inference.
Supporting quotations
please email us at privacy@whoop.com. We will provide you with the following: (i) documents and information that should accompany the application, including documents to evidence your identity or your representative's capacity; (ii) timeframes to receive a response from us regarding any request; (iii) the means of reproduction we will use to provide you with the requested information.
If you wish to explore the options to limit how we use and disclose your Personal Data so that we do not process your data for a particular purpose, please contact us as described in the section 14.
Qualifications & exceptions
WHOOP says it will provide the documents needed, the response timeframes and the means of reproduction, but those details are not in this paragraph.
Not stated here
The specific response timeframes, required documents and means of reproduction are not stated in this notice.
"The section 14" is a numbered reference whose number is not stored in the saved text; reading it as the Contact Us section is inferred from heading order and cross-references.
Account & Service Control · User right or choice
Qatar data subject rights
Residents of Qatar are told they have rights to protection of privacy of their Personal Data; lawful processing on the basis of consent or a legitimate purpose; withdrawing consent; objecting to processing in certain circumstances (for example where processing is not necessary for or exceeds the purposes of collection, gives rise to discrimination or unfairness, or violates applicable laws); requesting erasure or deletion in certain circumstances; requesting correction, provided the request is supported with appropriate documentation; being notified of processing and its purposes; being notified of any disclosure of inaccurate Personal Data; and accessing and obtaining a copy of their Personal Data, subject to payment of a fee.
Supporting quotations
If you reside in Qatar, you have the following rights:
right to object to processing in certain circumstances, such as where the processing of your Personal Data is not necessary for or exceeds the purposes for which it has been collected, or where it gives rise to discrimination, unfairness, or violates applicable laws;
right to request erasure or deletion of your Personal Data in certain circumstances;
right to request correction of your Personal Data, provided that such a request is supported with appropriate documentation;
right to access your Personal Data and obtain a copy of your Personal Data, subject to payment of a fee.
right to withdraw consent in respect of processing of your Personal Data;
right to protection of privacy of your Personal Data;
right to lawful processing of your Personal Data on the basis of consent or a legitimate purpose;
right to be notified of the processing of your Personal Data and the purposes of such processing;
right to be notified of any disclosure of inaccurate Personal Data; and
Qualifications & exceptions
Objection and erasure apply "in certain circumstances."
A correction request must be supported by appropriate documentation.
A copy of your Personal Data is "subject to payment of a fee."
Not stated here
The amount of the access fee is not stated.
Account & Service Control · User right or choice
Qatar: right to complain to the supervisory authority
If you reside in Qatar, you also have the right to lodge a complaint with a supervisory authority, in addition to other rights in the notice. The authority named is National Cyber Governance and Assurance Affairs, email privacy@ncsa.gov.qa.
Supporting quotations
If you reside in Qatar, you also have the right to lodge a complaint with a supervisory authority, in addition to other rights set out in the Privacy Notice.