Privacy Policy | WW UK

Quick Links:

● WHO WE ARE?

● WHAT DATA ABOUT ME IS COLLECTED, HOW IS IT USED AND HOW LONG IS IT RETAINED?

● COOKIES

● SOCIAL PLUG-INS AND OTHER THIRD-PARTY FEATURES

● HOW WE SHARE AND DISCLOSE PERSONAL DATA

● IS MY PERSONAL DATA USED FOR ANY OTHER PURPOSES?

● WHAT RIGHTS DO I HAVE?

● RIGHT TO LODGE A COMPLAINT BEFORE THE DATA PROTECTION AUTHORITY

● AUTOMATED INDIVIDUAL DECISION-MAKING

● WHO DO I CONTACT IF I HAVE ANY PRIVACY QUESTIONS?

● CHANGES TO THIS PRIVACY POLICY

This Privacy Policy applies to our website (“Website”) as well as to our mobile app (“Mobile App”) and our products, offerings, features, tools or resources offered via our Website or App (collectively, our “Digital Products”). The controller of your Personal Data collected via our Digital Products according to Art. 4(7) UK GDPR is WW GBR Ltd, Regus, Office 250, 268 Bath Road, Slough, SL1 4DX

Which Personal Data We Collect

Personal Data is information that identifies you or can be used to identify or contact you (“Personal Data”). Such Personal Data may include your name, address, email address, telephone number, birth date (primarily for eligibility purposes) and billing and credit card information. Personal Data may also include health related data, such as your weight history.

We collect Personal Data from you when you use our Website or subscribe to our Digital Products, as further described in this Privacy Policy. In all of these cases, we will only process Personal Data that you provide directly to us or which we automatically collect from you as specified in this Privacy Policy. Unless defined in this Privacy Policy or unless you give us permission to do so, we will not use or share your Personal Data other than as specified in this Privacy Policy.

How we Collect and Use Your Personal Data

In the following section, you will find information on how we collect your Personal Data, for which purposes we process your data, on which legal basis we do so and for how long we retain your data.

A legal basis for processing your data will arise when one or more of the following conditions apply:

• Consent: You have given us your consent to the use of your information which can be revoked at any time, Art. 6(1)(a) UK GDPR and/or Art 9(2)(a) UK GDPR.
• Contract: You have/or are about to enter into an agreement with us and your information is needed to provide you with the requested products or services, Art. 6(1)(b) UK GDPR.
• Legal obligation: We may be required to process your information in order to comply with certain legal obligations, Art. 6(1)(c) UK GDPR.
• Legitimate interest: We might use your information because we have—or a third party has—a legitimate interest in doing so. This happens only in cases where we think the way we are using your data doesn’t significantly impact your privacy or would be expected by you, or there is a compelling reason to do so, Art. 6(1)(f) UK GDPR.

We use cookies and similar technologies like pixels, tags, web beacons, and other identifiers to help us personalise our Website and Digital Products for you, remember your preferences, understand how users are using our Website and Digital Products and help customise our marketing communication.

You may adjust your cookie settings on our cookie banner at any time.

For more information on how we use cookies, please read our Cookie Policy.

Our Website contains links to or features from other websites. This Privacy Policy covers the privacy practices of WeightWatchers only and does not cover the privacy practices of third-party websites or features. We are not responsible for the privacy policies and/or practices of third parties. When linking to another website or using a third-party service, you should read the privacy policy on that site or service.

To the extent certain third-party website features are available on our Website, the following terms apply:

We use plug-ins of the social networks Facebook, Pinterest, Twitter, Instagram and YouTube to enable our Website users to easily share content found on our Website and connect with their friends via such social networks. Whenever you view a page of our Website containing such plug-in, your browser establishes a direct connection to the servers operated by provider of the social network. As a result, the content of the social plug-in is transferred by the network provider directly to your browser and embedded in our Website being shown. If you visit our Website whilst signed into your social network user account, information concerning your visit will be transferred to the network provider and the provider of the social network can assign your visit to our Website to your account with the social network. Please note that a data transfer is triggered already when you visit our Website, irrespective whether you interact with the plug-in. To prevent this, you must log out of your social network account before visiting our Website. Please refer to the privacy policies of Facebook, Pinterest, Twitter, Instagram and YouTube for more information on the purpose and scope of data collection and data analysis undertaken by the social network as well as your options to modify settings and how to protect your privacy.

THIRD PARTY APPLICATIONS AND DEVICES

Our Website offers you the option to connect your WeightWatchers account with third party applications or devices (each a "Tracker") such as activity trackers that measure your activity level (e.g., the number of steps and distance walked, calories burned and other personal metrics). If you connect your WeightWatchers account with an account you have with a provider of a Tracker, the third-party provider will receive the information from us that you have a WeightWatchers account. At the same time, data collected by your third-party Tracker (for example, personal activity data collected via an activity tracker device or other collected data) will be transferred to us and may be incorporated into your WeightWatchers account (for example, to display activity Points® values earned) in accordance with the terms of this Privacy Policy. You have the option to disconnect the Trackers from your WeightWatchers account at any time via our website.

Please refer to the privacy policy of your Tracker provider for further details, which may include information on what specific data is collected by your third-party Tracker and account.

Apple HealthKit

We provide our subscribers the ability to sync with Apple’s HealthKit framework, which provides the ability to access your health and fitness data to help you keep track of your activity in the WW app on your iPhone and Apple Watch if you so choose. (For more information click here). We do not use information gained through the HealthKit framework for advertising or similar services. You can always stop WW from accessing your data by changing the settings of your mobile device.

We will not share, sell, transfer or otherwise disseminate your Personal Data to third parties, unless required by law according to Art. 6(1)(c) UK GDPR, unless required for the purpose of your contract according to Art. 6(1)(b) UK GDPR, unless the third-party acts as a data processor on our behalf according to Art. 28 UK GDPR, as a Joint Controller according to Art 26 UK GDPR or you have given us express consent to do so according to Art. 6(1)(a) UK GDPR.

We share some of your Personal Data with our affiliate companies, WW International Inc and WW.com LLC, which are located in the United States for the provision of IT tools and related services.

We also use third-party service providers to offer or facilitate services on our behalf and share your Personal Data with such providers to the extent necessary for such providers to perform their services on our behalf.

• Payment processing: we use payment service providers such as Payment Tech to bill you for goods and services and for credit card processing;
• Order fulfillment: we use several shipping and delivery companies to fulfil orders depending on the product and location such as XPO Logistics;
• Customer Service: we use customer service providers to facilitate customer service;
• Cloud Provider: for our CRM system and an external provider for the hosting of our web
• Marketing and Advertising: we use identity facilitators such as Liveramp to help us recognize our consumers across our websites, our partner websites and their shops; we also use digital agencies to manage our social media and other advertising campaigns.

We also partner with Criteo (https://www.criteo.com/privacy/) for interest-based advertising.

The privacy policies for all the above can be found on their corporate websites. WW is not responsible for the policies of the third-party providers.

Please note that with regards to transfers of personal data outside the UK, there is a risk that local authorities may access the data for security and surveillance purposes without informing you or allowing you to take legal action.

3rd Party Advertising and Marketing

We may share your hashed email address and other identifiers such as name, location, phone number and browsing behavior with our marketing partners, publishers and other third-party service providers to assist with our targeting advertising on their sites, apps or social networks. We use this service to reach new target audience groups which are similar to our existing clients based on their characteristics and other identifiers.

We and our partners compare demographic information including interests and social connections to segment groups based on an automated advanced matching technique of similarities in their profiles. This process can happen in real time and the matching can be performed independently of the device you are using. In particular, we may use Facebook, Pinterest and Google custom audiences which match personal data against platform user data that it already controls to target ads.

You can activate and deactivate these Custom Audiences, Pixels and similar technologies via our website cookie banner. In addition, you can also use browser-based ad blockers to prevent Facebook and others, from tracking your data.

WW has no influence on the advanced matching processes or which data is evaluated by the 3rd party for the purposes of creating reference groups.

Further information on the advertising and targeting processing can be found on our Cookie Policy or that of the corresponding provider.

Some of the companies we share your Personal Data with as described above are located outside of the UK. In order to grant sufficient protection of your Personal Data in this context, all data transfers above are covered under an appropriate legal transfer mechanism such as UK Adequacy Decisions or other such measures according to Art. 46 UK GDPR.

Please note that the use of third-party content and functions may result in your data being processed outside the UK. In some countries, there is a risk that authorities may access the data for security and surveillance purposes without informing you or allowing you to take legal action.

Any sharing of your Personal Data with other WW entities or service providers will be made in accordance with applicable data protection laws and will be limited to the extent necessary. We have carefully selected these companies and continuously monitor their compliance with our instructions. These companies are contractually prohibited from using your Personal Data for any other purposes than those described in this Privacy Policy. The legal basis for our sharing of your Personal Data with such companies is according to Art. 28(1) UK GDPR, Art 26(1) UK GDPR or alternatively our legitimate interests in commissioning those companies with the services described above (Art. 6(1)(f) UK GDPR).

We may also be required to disclose your Personal Data to government or law enforcement officials in response to a lawful request by a public authority or if we have to do so to comply with a legal obligation, including to meet national security or law enforcement requirements according to Art. 6(1)(c) UK GDPR. We can also disclose your information in order to pursue our legitimate interest in applying or enforcing our terms and conditions or in responding to any claims, in protecting our rights or the rights of a third party, in protecting the safety of any person or in preventing any illegal activity (including for the purposes of fraud protection and credit risk reduction) according to Art. 6(1)(f) UK GDPR.

If required under applicable data protection laws, we will collect your prior consent before sharing your Personal Data with other companies. In such cases, the legal basis is Art. 6(1)(a) UK GDPR.

You have the following rights:

• Right of access (Art. 15 UK GDPR):

You have the right to request confirmation as to whether we process your Personal Data and where that is the case, to request access to the Personal Data we hold about you.

• Right to rectification (Art. 16 UK GDPR):

You have the right to request the correction of inaccurate Personal Data.

• Right to erasure (Art. 17 UK GDPR):

You have the right to request erasure of Personal Data without undue delay under certain circumstances, e.g., if your Personal Data is no longer necessary for the purposes for which it was collected or if you withdraw consent on which our processing is based according to Art. 6(1)(a) UK GDPR and where there is no other legal ground for processing.

• Right to restriction of processing (Art. 18 UK GDPR):

You have the right to request us to restrict the processing of your Personal Data under certain circumstances, e.g., if you think that the Personal Data we process about you is incorrect or unlawful.

• Right to data portability (Art. 20 UK GDPR):

Under certain circumstances, you have the right to receive your Personal Data you have provided us with, in a structured, commonly used and machine-readable format and you have the right to transmit that information to another controller without hindrance or ask us to do so.

• Right to object (Art. 21 UK GDPR):

You have the right to object to the processing of your Personal Data under certain circum-stances, in particular if we process your Personal Data on the legal basis of legitimate interests (Art. 6(1)(f) UK GDPR) or if we use your Personal Data for marketing purposes.

You can assert your abovementioned rights by contacting us at the contact details mentioned below.

RIGHT TO LODGE A COMPLAINT BEFORE THE DATA PROTECTION AUTHORITY

You have the right to lodge a complaint with the Information Commissioner if you believe that the processing of your personal data infringes applicable data protection laws.

AUTOMATED INDIVIDUAL DECISION-MAKING

We do not use your Personal Data to make decisions with legal or similar effects for you based on the automated processing of your Personal Data only.

If you have any questions about our Privacy Policy, your privacy rights or feel that we are not abiding by the terms of our posted Privacy Policy or the applicable data protection laws, please contact our data protection officer at privacyuk@ww.com