Skip to main content

PELOTON CONSUMER HEALTH DATA POLICY

Effective Date: March 27, 2024

Certain U.S. states have laws requiring companies that process data under the broad umbrella term of “consumer health data” (“CHD”) publish a policy notifying people about how they collect, use, and share (collectively “process” or “processing”) CHD and the rights certain consumers (“Consumer”, “Consumers”, "you", or "your") may have.

This Consumer Health Data Policy (“CHDP” or “Policy”) supplements Peloton’s U.S. States Privacy Notice, the Peloton Privacy Policy and our Peloton Cookies Policy (collectively, "Policies") and applies solely to Consumers in states with laws pertaining to Consumer Health Data and specifically require such policies. This CHDP applies only to CHD (as defined by applicable law) that is processed by Peloton in the course of our business, including via the Peloton websites, the interfaces on tablets connected to Peloton fitness equipment such as the Peloton Bike and Tread, and through our Apps, forums, social media accounts, blogs, studios, retail showrooms, and other online or offline offerings (together, with any and all future online and offline offerings operated by or on behalf of Peloton, the “Services”).

  • CATEGORIES OF CONSUMER HEALTH DATA WE COLLECT

As described in the “WHAT PERSONAL INFORMATION WE COLLECT" sections of our Privacy Policy, the CHD categories we collect depends on the context of your interactions with Peloton, the features you use, the choices you make (including your privacy settings), and applicable law.

CHD is defined broadly, and includes information you may not typically think of as CHD. Many of the categories we collect are, or could be, considered CHD and can be categorized as follows:

  • Answers to questions we ask to build workout and other Service related recommendations for you.
  • Information about your fitness, such as strive score, calories burned, distance run, length of workout, and vital signs and/or bodily functions like heart rate (if you choose to connect equipment like a heart monitor or third party products that facilitate these measurements and collection and sharing of data).
  • Pictures (if you choose to upload a profile picture), videos, voice recordings, or physical characteristics that are collected in connection with Services you consent to use; for example, characteristic movements to better assist your exercise form.
  • Physical characteristics or descriptions, workout characteristics and tests to track fitness performance, gender (if you add to your profile) or inferences based on classes in which you participate, which may relate to health status.
  • Data that helps us serve relevant advertising, and to understand and assess the effectiveness of our ads campaigns.
  • Other information that is inferred or derived, or may be used to infer or derive data related to the above or other information that could be deemed to be related to health.

2. SOURCES OF CONSUMER HEALTH DATA

As described further in the “WHAT PERSONAL INFORMATION WE COLLECT” section of our Privacy Policy, CHD is sourced in the following manner:

  • Directly from you.
  • Automatically from your interactions with our products and services
    ◦ Including information we collect, and inferences we make, from your use of Peloton Services and from your devices. 
  • From other sources
    ◦ Including third parties and service providers.

3. OUR PURPOSES FOR COLLECTING AND USING CONSUMER HEALTH DATA

As described further in the “WHY WE USE PERSONAL INFORMATION” section of our Privacy Policy, we process CHD (collect and use it) as reasonably necessary to provide Services you have requested or authorized. Many of the purposes for which we process data are, or could be, considered processing of CHD and can be categorized as follows:

  • Providing, managing, maintaining and improving our Services and their features.
  • Personalization and analytics associated with providing Services.
  • Personalization associated with advertising, including not having ads served to you.
  • Communicating with you for transactional, as well as marketing and promotional, purposes.
  • Analytics, including research about how members utilize our Services to make improvements.
  • Other essential business operations that support our Services (such as analyzing our business performance, ensuring security and integrity of our Services, conducting research and development).
  • For quality assurance and training purposes.
  • Internal purposes such as legal and regulatory compliance, including defending our vital interests.
  • Marketing and advertising purposes.

Please see the “HOW TO EXERCISE YOUR RIGHTS & HOW TO SET YOUR DATA PREFERENCES" section of this Policy for information about how you can express your preferences relating to the processing of CHD.

4. CATEGORIES OF CONSUMER HEALTH DATA SHARED

We may share each of the categories of CHD described above in the “CATEGORIES OF CONSUMER HEALTH DATA WE COLLECT” section of this Policy. Specifically, we may share CHD with your consent or as reasonably necessary, to provide Services you have requested or authorized. For example, when you make a purchase, we will share information about the transaction as necessary to process the payment, including to protect against fraud. We may disclose CHD when we believe that doing so is necessary to comply with applicable law or respond to valid legal process.

For more information about categories of data processed by Peloton, please see the “WHAT PERSONAL INFORMATION WE COLLECT” sections of our U.S. States Privacy Notice and Privacy Policy.

5. CATEGORIES OF THIRD PARTIES WE SHARE YOUR CONSUMER HEALTH DATA WITH

We may share CHD, with your consent or as reasonably necessary, to provide Services as described in the “OUR PURPOSES FOR COLLECTING AND USING CONSUMER HEALTH DATA” section of this Policy. These are the categories of third parties with whom we may share CHD:

  • Peloton Group Companies.
    ◦ We may enable access to CHD across our group companies, for example, where we share common data systems or where access helps us provide our Services. See the list of specific group companies in the “AFFILIATES WE MAY SHARE YOUR DATA WITH” section of this Policy.
  • Service Providers.
    ◦ Vendors or agents (“processors”) working on our behalf may need access to CHD for the purposes described above. For example, vendors who provide IT services, analytics, payment processing, cloud storage, technical support, or delivery services.
  • Third Party Apps & Accounts You Link with your Peloton Account.
    ◦ As part of our Services, we enable you to connect your Peloton account with third party applications such as Fitbit®, Apple®, Strava®, Facebook® and Spotify® and similar applications. If you choose to connect your Peloton account, we may share CHD with the paired application depending on what information you choose to share, or have otherwise been notified will be shared during the pairing process.
  • Other Users of our Services.
    ◦ Depending on your Profile settings and how you interact with our Services, certain CHD may be available for other Members to see, and certain information may always be viewable. User Profiles are set to public by default. Click here for information about how to manage your profile settings.
  • Competent Law Enforcement Bodies, Regulators, Government Agencies, Courts or other Third Parties.
    ◦ We may disclose CHD to law enforcement or other government agencies when we believe doing so is necessary to comply with applicable law or respond to valid legal process. In certain circumstances, it may be necessary to provide CHD to other third parties, for example, to comply with the law or to protect our rights or those of our customers, or to detect, prevent, or address security, fraud or technical issues.
  • Parties to a corporate transaction (and their agents and advisors).
    ◦ We may disclose CHD as part of a corporate transaction or proceeding such as a merger, financing, acquisition, bankruptcy, dissolution, or a transfer, divestiture, or sale of all or a portion of our business or assets.

For more information about these categories of third parties, please see the “WHO WE SHARE YOUR PERSONAL INFORMATION WITH” section of our Privacy Policy and the chart in our U.S. States Privacy Notice.

6. AFFILIATES WE MAY SHARE YOUR CONSUMER HEALTH DATA WITH

The Peloton affiliates we may share your CHD with are:

Precor

Peloton Interactive, Inc.
Peloton Interactive Ireland Ltd.
Peloton Interactive UK Ltd.
Peloton Interactive Taiwan Inc.
Peloton Interactive Australia Pty Ltd
Peloton Interactive Canada Inc.
Peloton Interactive Deutschland GmbH

7. HOW TO EXERCISE YOUR RIGHTS & HOW TO SET YOUR DATA PREFERENCES

Certain U.S. state Consumer Health Data privacy laws provide rights to Consumers, which may include, as applicable, rights to access, delete, or withdraw consent relating to such data, subject to legal limitations and exceptions. Please review the “YOUR RIGHTS AND PRIVACY PREFERENCES” section of our Privacy Policy for detailed information. If you would like to exercise any of your rights, including (in some states) a request to review and request changes to your CHD, please fill out and submit the Privacy Request Form or call us at 1-844-559-0051. For additional contact information see the “HOW TO CONTACT US” section of our Privacy Policy.

You may identify your specific preferences regarding data processing in a number of ways in the profile preferences. Please click here and here for more information about how to manage these settings.

We verify the requests we receive from you when you exercise certain rights listed above to ensure the safety of your data.

If your request to exercise a right under applicable law is denied, you may appeal that decision by contacting us at privacy@onepelton.com. Please explain your concerns and provide the email associated with your account so we may properly review your data rights request history. If your appeal is unsuccessful, you can raise a concern or lodge a complaint with the Attorney General of your state.

8. UPDATES TO THIS CONSUMER HEALTH DATA POLICY

We may update this Policy from time to time. When we do, we will provide notice of any material changes if and where this is required by applicable data protection laws. You can see when this CHDP was last updated by checking the "Effective Date" displayed at the top of this Policy.