Crunch Fitness

"We may disclose your personal information to the following third party controllers for business purposes: Vitality, EGYM, ClubReady, Google Ads, MatrixPoint, AJB Law Group, HappyFox, LinkedIn Ads, Meta Ads, Pinterest Ads, Tiktok Ads, Snapchat Ads, Amazon Advertising, The Trade Desk, DXFactor, Studio Labs, Touch Point."

Crunch shares personal data with a large number of named third-party advertising and analytics platforms, many of which are ad networks that will use the data for their own tracking and targeting purposes.

"The Site uses Facebook meta pixels. This pixel is used for tracking and serving targeted ads. While this data is anonymized, it is still linked to individual user profiles within Facebook's ecosystem. We track Site users over time and across third-party websites; however, we do not currently respond to web browser 'Do Not Track' signals."

Crunch explicitly admits to tracking users across third-party websites over time and uses Facebook pixels that link activity back to individual user profiles, enabling cross-site profiling.

"If you allow our mobile App to access your location information on your device, our mobile App may use your mobile device's Global Positioning System (GPS) technology and other technology (such as wireless transmitters known as beacons) to provide you with information and offers based on the location of your device. We may share this information with third parties, including business partners and service providers."

The app uses GPS and physical beacons to track user location within facilities and shares this location data with third parties for marketing purposes.

"We may collect: your name, address, email address, date of birth, age, gender, address, phone number, credit card number, bank routing and account number, biometric information (e.g., fingerprints to redeem Personal Training services at certain clubs) and in certain cases, health or medical information."

Crunch collects biometric data (fingerprints) and health/medical information, which are highly sensitive categories of personal data collected beyond what basic gym membership requires.

"This Policy may change over time as we modify or expand our Site and Services. In the event we make material changes to the Policy, we will provide notice through the Site, and we suggest that you check from time to time to review how we treat your personal information. You understand and agree that your continued use of the Site or Services after the effective date means that the collection, use, and sharing of your PI is subject to the updated Policy."

Crunch can change the privacy policy at any time and treats continued use as acceptance of new terms, with no requirement for affirmative consent to material changes.

"We retain your PI for as long as necessary, such as to provide you products and Services or while you have an open membership with us. We may retain your PI for longer if it is necessary to comply with our legal or reporting obligations, resolve disputes, collect fees, etc. or as permitted or required by applicable law. We may also retain your PI in a deidentified or aggregated form so that it can no longer be associated with you."

There are no specific retention timelines — data is kept indefinitely under broad justifications like resolving disputes or collecting fees, with no clear deletion schedule even after account closure.

"Under certain circumstances, we may not be able to fulfill your request such as when it interferes with our regulatory obligations, affects legal matters, we cannot verify your identity, or it involves disproportionate cost or effort. Still, in any event, we will endeavor to respond to your request within forty five (45) days and provide you with an explanation if we are not able to comply with your request."

Deletion requests can be denied for vague reasons like 'disproportionate cost or effort,' and there is no clear self-service deletion option — users must submit requests and wait up to 45 days.