Global Privacy Policy & Enterprise Compliance Statement
At FITVII, protecting wearer privacy and corporate partner confidentiality is central to our operational integrity. This Global Privacy Policy outlines how we collect, store, process, and protect data across our consumer wearables, companion mobile applications, and B2B wholesale platform. We strictly adhere to international data protection frameworks, including the European Union General Data Protection Regulation (EU GDPR), UK Data Protection Act, and California Consumer Privacy Act (CCPA/CPRA).
1. Information We Collect & Legal Basis
We only collect data strictly necessary to provide wellness tracking services, order fulfillment, warranty support, and technical optimization. Processing activities are legally grounded in contract performance, explicit user consent, or legitimate business operations.
Personal & Account Data
Customer name, shipping/billing address, email address, phone number, and order history required for purchasing, international customs clearance, order tracking, and warranty service.
Health & Biometric Trends
Heart rate, blood pressure trend estimates, SpO2, sleep staging, and activity metrics synchronized voluntarily via the free companion application.
Technical & Device Information
Device hardware ID, firmware version, mobile OS version, IP address, and anonymized app crash logs used to maintain system security and firmware stability.
Enterprise & B2B Information
Corporate procurement contacts, tax registration numbers, shipping manifest details, and OEM/ODM specification records protected under strict Non-Disclosure Agreements (NDAs).
2. Enterprise-Grade Security & Encryption Protocols
To ensure maximum data protection for both individual wearers and enterprise distribution networks, FITVII implements multi-layered security controls across hardware, cloud backend, and mobile software applications:
- AES-256 Cloud Encryption: All sensitive biometric metrics and user profile records are encrypted both in transit (TLS 1.3) and at rest using bank-grade AES-256 encryption.
- Local Data Storage Control: Raw sensor readings remain stored locally on the smartwatch hardware until explicitly synchronized by the authorized user.
- Role-Based Access Control (RBAC): Access to production databases is strictly limited to authorized engineers and customer support agents under enforced multi-factor authentication (MFA).
- Optional Family Sharing Control: Wearers maintain complete control over family sharing features. Authorized contacts view shared metrics only upon explicit wearer consent, which can be revoked at any time.
3. User Rights & Regulatory Compliance
Regardless of jurisdiction, FITVII provides transparent data rights to all individual wearers and business partners globally:
Right to Access & Portability
Users and procurement clients can request a digital copy of all personal records and historical telemetry data stored within our servers.
Right to Erasure ("Right to Be Forgotten")
Account deletion completely purges all synchronized biometric logs, app history, and personal contact records from active and backup databases.
4. Cross-Border Transfers & B2B Partner Protections
As a global wellness wearable brand serving distributors, healthcare organizations, and retail chains worldwide, FITVII ensures that cross-border data transfers comply with international standards. European Economic Area (EEA) and UK data transfers utilize European Commission Standard Contractual Clauses (SCCs) to maintain legal data protection equivalence.
For B2B partners, OEM clients, and regional distributors, proprietary trade terms, wholesale contract details, and custom hardware configurations are kept strictly confidential and isolated from consumer analytics pipelines.
5. Privacy Policy Frequently Asked Questions
Is my health data accessible to third parties or insurance companies?
Are monthly subscriptions required to keep my data private?
How can enterprise buyers and distributors submit compliance inquiries?
Have Privacy Concerns or Need Data Compliance Support?
Our dedicated Data Protection Officer and technical support team are ready to assist global buyers, institutional partners, and individual customers with data security requests.
Contact Us