Mindbody Online Privacy Policy: Protecting Your Information

At MINDBODY, Inc. and our Mindbody subsidiaries (“Mindbody”), safeguarding your privacy is paramount. We are dedicated to maintaining your trust through transparent and robust data protection practices. This Privacy Policy (“Privacy Policy”) is designed to inform visitors of our Mindbody websites and users of Mindbody Services about our commitment to privacy.

TRUSTe Privacy Seal: Mindbody Online Certified Privacy Practices

This Privacy Policy outlines our procedures and your rights concerning the information we collect, utilize, or disclose through the following platforms:

Our user-friendly mobile application, known as the “Mindbody App”.
Our consumer-facing websites, currently accessible at https://www.mindbodyonline.com/explore and https://www.fitmetrix.io (referred to as the “Mindbody Consumer Site(s)”).
Our comprehensive online business management software products, known as “Software Service”.
Our various social media platforms.
Our applications that facilitate access to the Software Service, including the Mindbody business app and mobile apps branded as Mindbody, Booker, and FitMetrix (collectively referred to as the “Apps”).
HTML-formatted email communications we send that contain a direct link to this Privacy Policy.
Any additional products and services provided through diverse channels, websites, and mobile applications that redirect you to this Privacy Policy.

Collectively, these are known as the “Mindbody Services”.

By accessing or utilizing Mindbody Services, you inherently consent to the terms and conditions stipulated in this Privacy Policy. You acknowledge that the information detailed herein serves as formal notification at or before the point of data collection for all information gathered as described below.

1. Understanding Key Definitions

To ensure clarity, the following terms are defined as indicated below. For any capitalized terms not explicitly defined in this Privacy Policy, please refer to our Subscriber Terms of Service or the Mindbody Consumer Agreement.

“End User” refers to any individual who interacts with Mindbody Services. This includes users of our mobile applications, such as the Mindbody App, and individuals who schedule appointments, purchase services, and otherwise engage with our Subscribers through Mindbody Services.

“Other Information” encompasses any data that does not directly reveal your specific identity or is not directly associated with an individual. This includes usage data that is not linked to unique identifiers.

“Personal Information” denotes data that pertains to or is about an identified or identifiable natural person or, where applicable, a household as defined by relevant law. This may include details such as name, postal address, telephone number, email address, or unique online identifiers.

“Subscriber” is any business or entity that subscribes to or utilizes our Software Service. This also includes any staff, employees, consultants, advisors, or independent contractors who access Mindbody Services on behalf of the Subscriber.

Throughout this Privacy Policy, we use the term “information” which may refer to either Personal Information or Other Information.

2. Categories of Personal Information Collected

The types of Personal Information we collect depend on the specific Mindbody Services used and the nature of our interactions with individuals. Generally, Personal Information we may collect or obtain includes:

Contact Details: Information such as name, address, email, and telephone number, which may also include third-party emergency contact information.
Personal Details: Data such as date of birth, education, and nationality.
Financial and Transaction Data: Information related to purchase history, account details, shipping and billing information, including credit card details.
Health and Fitness Tracker Data: Data collected from heart rate monitors and other performance monitoring activities.
Other Mindbody Services Related Data: This includes customer requests, statistical data, and more.
Geolocation Data: With your explicit permission, we may collect geolocation data sent via a mobile device to enhance location-based services.
Images: Images you voluntarily upload to Mindbody Services.
Online Identifiers: This includes IP addresses and Device IDs.
Cookie-related Data: Data collected through cookies and similar technologies, as detailed in our comprehensive Cookie Policy.

We are committed to maintaining the privacy of de-identified information. If we possess information that has been de-identified, we pledge to maintain and use this data without any attempts to re-identify it.

3. Methods of Information Collection

We collect information through various interactions with Mindbody Services:

Directly Through Mindbody Services:

Account Creation: When End Users create an account on the Mindbody App or through the Mindbody Consumer Site(s), we may request Personal Information such as name, email and postal address, social media account IDs, and any Other Information you choose to provide within your account profile.
Interactions with Subscribers: When End Users interact with Mindbody Services via a Subscriber, we collect Personal Information provided during transactions or engagements. This includes booking appointments, making purchases, or responding to marketing campaigns initiated by the Subscriber.
Subscriber Sign-up: When businesses sign up for our Software Service as Subscribers, we collect company details such as name, address, phone number, email, credit card information, tax identification number, and other pertinent business information. We also gather names and email addresses of authorized individuals associated with the account.
Event Participation: If you participate in Mindbody events such as tradeshows, webinars, or training sessions, we may collect feedback, contact details, or other information for follow-up purposes, including sending marketing communications in line with your preferences.
Transaction Processing: During transactions initiated through Mindbody Services, such as purchases, we collect necessary information to process the transaction. This may include your name, email, phone number, address, credit card information, and any other details required to complete the transaction. This information may be shared with relevant parties to facilitate the transaction. Credit card numbers are encrypted using industry-standard security measures. We may also collect additional Personal Information at the request of the Subscriber you are transacting with.
Device Information: We may store information that your computer or mobile device provides when you use Mindbody Services. This includes IP address, operating system, device ID, and device type to optimize your experience and for security purposes.
Emergency Contacts: We may collect information about others from you, such as emergency contacts, and will strictly use this information for the specific reason it was provided.
Location Data: We and our service providers collect data about your location when you use or access Mindbody Services. The precision of location data varies depending on the source:
- Device Settings: Data obtained directly from your device based on activated location settings.
- IP Address: Your IP address can provide a general location.

We collect and utilize location-related data to:

- Deliver services you have purchased or requested, such as locating nearby studios or gyms.
- Provide content relevant to your geographic location.
- Offer marketing or advertising content tailored to your location.
- Protect against misuse or abuse of services or your account.
- Enhance and improve our sites and services based on user location trends.

You have the option to disable the collection and use of your location data through your browser, operating system, or device-level settings. You can withdraw consent for location data collection at any time by adjusting these settings.

Information from Other Sources:

In addition to the information collected directly through Mindbody Services, we may receive information about you from external sources. These include public databases, strategic marketing partners, joint marketing partners, social media platforms, individuals you are connected with on social media, and other third-party entities. For example, if you choose to link your social media account to your Mindbody App account, certain information from your social media profile may be shared with us, including details from your profile or your friends’ profiles. We may also collect other Personal Information through Mindbody Services under the direction of our Subscribers.

While providing certain Personal Information is optional, please note that if you choose not to provide or enable us to collect necessary information, we may not be able to fully provide the Mindbody Service. By disclosing Personal Information related to other individuals to us or our service providers in connection with Mindbody Services, you confirm that you have the authority to do so and permit us to use the information in accordance with this Privacy Policy.

4. Utilization of Personal Information

We may utilize your Personal Information for various legitimate business purposes, including:

Providing Mindbody Services Functionality and Support:
- To create and manage user accounts, process and record transactions, and offer related support services such as technical assistance and responses to inquiries regarding Personal Information.
- To send administrative communications, including updates about our services, and modifications to our terms, conditions, and policies.

These activities are essential for managing our contractual obligations with you, with your explicit consent where required, and to comply with applicable legal obligations.

Marketing, Promotions, and Social Sharing:
- To deliver marketing communications and promotional materials that we believe may be of interest to you. This includes newsletters and direct communications.
- To share information with other marketers and their service providers, enabling them to send you marketing communications, always consistent with your expressed preferences.
- To facilitate your participation in sweepstakes, contests, or similar promotional activities.
- To enable social sharing functionalities should you choose to use them, allowing you to connect and share experiences across social platforms.

These marketing and promotional activities are conducted with your consent, to fulfill our contractual agreements, or when we have a legitimate business interest. Importantly, health and fitness tracker data obtained via third parties will not be used for these marketing purposes.

Please be aware that during phone conversations conducted via Zoom with Subscribers and other third parties, we may inquire if you wish to receive additional information via SMS. If you agree, the phone number and opt-in you provide will not be sold to or shared with third-party providers or affiliates for marketing or promotional purposes.

Reporting and Trend Analysis:
- To gain a deeper understanding of our users, enabling us to refine and personalize our service offerings to better meet your needs and preferences.
- To conduct trend analysis and generate statistical reports, which help us to continually improve our products and services and adapt to evolving user demands.

These activities are undertaken based on our legitimate interest in improving and optimizing Mindbody Services.

Business Operations and Legal Compliance:
- To perform audits, ensuring that our internal processes function as intended and comply with all relevant legal, regulatory, and contractual requirements.
- For fraud detection and security monitoring, aimed at preventing cyberattacks and identity theft attempts, thereby protecting our users and our business operations.
- To respond to legal obligations, such as requests from public and governmental authorities, ensuring we operate within the bounds of the law.
- To defend our legal rights and the rights of others in legal proceedings or disputes.

These activities are essential for legal compliance and are also pursued based on our legitimate interest in protecting our business and legal rights.

To the extent that we process your Personal Information based on your consent, you have the right to withdraw this consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

5. Disclosure of Personal Information: Who May See Your Data?

Certain privacy laws mandate that we disclose specific information about the categories of Personal Information we have disclosed for business purposes, as well as categories that have been “sold” or “shared” as defined under applicable law.

Disclosures for Business Purposes: We may disclose the following categories of Personal Information (detailed in Section 2) to our Partners and Service Providers to deliver Mindbody Services effectively:

Contact details
Personal details
Financial and transaction data
Health and fitness tracker data
Other Mindbody Services related data
Geolocation data
Online identifiers
Cookie-related data

Specifically, we may disclose your Personal Information in the following circumstances:

To Our Affiliates: For purposes consistent with this Privacy Policy. MINDBODY, Inc. is the responsible party for managing jointly used Personal Information within our affiliated entities.
To Integrated Partners and Service Providers: We collaborate with service providers who offer services such as website hosting, data analysis, payment processing, order fulfillment, IT infrastructure, customer service, email delivery, credit card processing, and auditing. These partners are essential for the seamless operation of Mindbody Services.
To Subscribers: If you are an End User interacting with Mindbody Services through a Subscriber, your information may be shared with that Subscriber. We encourage you to directly contact the Subscriber you interact with to understand their specific privacy practices.
To Third-Party Marketers (with Consent): With your explicit consent, we may share information with third parties to enable them (or their customers) to send you marketing communications, aligning with your preferences.
To Sweepstakes and Contest Sponsors (with Consent): If you participate in sweepstakes, contests, or similar promotions, we may share your information with the sponsors, consistent with your choices and any applicable rules.
Publicly, Through Mindbody Services Features: Information may be disclosed publicly through message boards, dashboards, challenges, chat features, profile pages, blogs, and other interactive services where you can post information and materials. This includes testimonials, ratings, and reviews as detailed in subsequent sections.
Social Sharing: In connection with social sharing activities, such as linking your Facebook account to your Mindbody App account or interacting with our social media pages, information may be shared with other website users and your social media account provider.
In Corporate Transactions: In the event of a corporate transaction such as a merger, acquisition, reorganization, sale of assets, joint venture, or transfer of business, Mindbody retains a legitimate interest in disclosing or transferring your Personal Information to relevant parties. This includes negotiations leading to such transactions and may involve disclosing information to acquiring or target entities and their advisors.

Please note that we may use and disclose Other Information for any purpose, except where restricted by applicable law. If we are legally required to treat Other Information as Personal Information, we will use and disclose it according to the same standards as Personal Information. In cases where we combine Other Information with Personal Information, the combined data will be treated as Personal Information.

6. Your Privacy Rights Regarding Personal Information

This section details your privacy rights, particularly relevant for residents of states with comprehensive privacy laws in the United States (including California, Colorado, Connecticut, Delaware, Iowa, Indiana, Montana, New Jersey, Oregon, Texas, Tennessee, Utah, and Virginia), as well as other jurisdictions like the European Economic Area, the United Kingdom, and under the General Data Protection Regulation (“GDPR”).

Understanding Your Rights:

Right to Access and Data Portability: You have the right to request, free of charge, a copy of the specific pieces of Personal Information we have collected about you. This will be provided in a readily usable format, allowing you to easily transfer this information to another entity without hindrance.
Right to Know: You have the right to request information about our data handling practices, including:
- The categories of Personal Information collected.
- The categories of sources from which Personal Information is collected.
- The business or commercial purposes for collecting your Personal Information.
- The categories of third parties with whom we share Personal Information.
- Whether we “sell” or “share” any categories of Personal Information to third parties, as defined under applicable law.
Right to Deletion: You have the right to request the deletion of your Personal Information that we have collected, subject to certain legal exceptions. Please note that we may need to retain certain information for record-keeping purposes or to complete transactions initiated before your request (e.g., purchases or contest entries). We may also retain residual information to document that your request has been fulfilled.
Right to Non-Discrimination: You have the right not to receive discriminatory treatment for exercising your privacy rights under applicable law. We will not penalize you for exercising your privacy rights.
Right to Correction/Rectification: You have the right to request the correction of any inaccurate Personal Information we hold about you, ensuring your data is accurate and up to date.
Right to Object/Restrict Processing: You have the right to object to specific uses of your Personal Information as outlined in this Privacy Policy, subject to our legitimate business interests and legal obligations.
Right to Appeal: If we deny your request to exercise a privacy right, you may have the right to appeal our decision. You can do so by contacting us as detailed in the “Submitting a Request” section below.

How to Submit a Request:

Where applicable law grants you these rights, and you wish to access, correct, object to the use of, restrict the processing of, or delete your Personal Information, or if you wish to receive an electronic copy of your Personal Information for data portability, please submit your request through Mindbody Services or contact us at [email protected] with the subject line “Data Subject Request”. We will respond to your request in accordance with applicable law.

If you are an End User, you may also be able to access, correct, or request deletion of your Personal Information through your online customer account, depending on the Mindbody Service you use. Data Subject Requests and other rights, including objection, restriction, and data portability, can also be directed to the relevant Subscriber who manages your interactions with Mindbody Services.

For security reasons, we will only process requests related to the email address you use to send us your request, and we may need to verify your identity before fulfilling your request. If applicable law permits an authorized agent to submit requests on your behalf, please contact us at [email protected] with the subject line “Data Subject Request – Agent Request,” and we will contact both the agent and the End User to verify the request. We will endeavor to comply with your request as soon as reasonably possible. If you are an End User, Mindbody may need to forward your request to the Subscriber who is better positioned to address your specific request.

If you are under 18 and a user of Mindbody Services, you may also request the removal of content or information you have posted by submitting a Support Request. Please note that while we will attempt to remove the content, complete removal may not always be possible if it infringes on the rights of another user or due to technical limitations.

If you are an End User of a Subscriber and wish to stop receiving communications from that Subscriber or exercise your privacy rights concerning Personal Information held by them, please contact the Subscriber directly.

7. Managing Your Choices: Use and Disclosure of Your Information

Except for health and fitness tracker data obtained from third parties, Mindbody may use the information we collect for marketing purposes, including promotional emails, mobile text messages, direct mail, and sales contacts. We provide you with choices regarding our use and disclosure of your Personal Information for marketing purposes:

Opt-in or Opt-out of Electronic Communications: If you are a user of the Mindbody App or Mindbody Consumer Site(s) and no longer wish to receive marketing emails or mobile text messages from us, you can opt-out by adjusting your preferences in your account settings or by using the unsubscribe links provided in the messages themselves. Upon opting out, Mindbody will implement processes to honor your request, which may include retaining some information to remember your opt-out preference.
Consent to Sharing with Third-Party Marketers: We only share your Personal Information with unaffiliated third parties for their direct marketing purposes if you have explicitly consented to such sharing. Consent is required for each data transfer to third parties and will be limited to a single transfer. To understand how these third parties handle your data once shared, please consult their privacy policies directly.

We will strive to comply with your requests as quickly as reasonably practicable. Please note that even if you opt-out of marketing communications, we may still send you administrative, transactional, or other essential messages related to your use of Mindbody Services, from which you cannot opt-out.

Our mobile applications may also send push notifications to your mobile device, provided you have consented to this feature. If you wish to disable push notifications, you can do so at the device level settings. Applications may also request access to your device’s calendar, storage, Bluetooth, camera, and microphone. You can manage these permissions in your device settings.

8. Tracking and Advertising Technologies

Mindbody, our service providers, and partners may collect Other Information and certain Personal Information using various technologies. We utilize tracking technologies like cookies, web beacons, and analytics software to enhance the functionality and content of Mindbody Services. These tools help us understand what content is effective and how users interact with our services. For detailed information on our use of cookies and similar technologies, including how to manage your preferences and opt-out, please refer to our Cookies Policy.

9. Social Media Features and Widgets

Mindbody Services integrate social media features, such as the Facebook Like button, and widgets like the Share This button or interactive mini-programs. These features may collect your IP address and information about the pages you visit on our websites, and they may set cookies to function correctly. Social media features and widgets are hosted either by third parties or directly on our websites. Your interactions with these features are governed by the privacy policy of the company providing them.

10. Public Forums and Community Engagement

Mindbody websites may host publicly accessible message boards, blogs, and community forums. Please be aware that any Personal Information you disclose in these public areas may be viewed, collected, and used by others. To request removal of your Personal Information from our blog or community forum, please submit a Support Request. In some instances, we may not be able to remove all of your Personal Information or content, especially if it has been reposted by another user. If removal is not possible, we will inform you and explain the reasons.

11. Sign-In Services Integration

You can log in to certain Mindbody Services using sign-in services like Facebook Connect, Google, or an Open ID provider. These services authenticate your identity and offer the option to share certain Personal Information with us, such as your name and email address, to pre-fill our sign-up forms. Some services, like Facebook Connect, also allow you to post information about your activities on our websites to your social profile, for sharing with your network. Additionally, within some of our mobile applications, we may provide options to connect with friends by accessing contacts from your Facebook or other social media accounts.

12. Testimonials, Ratings, and Reviews Management

If you submit testimonials, ratings, or reviews to Mindbody Services, any Personal Information included may be publicly displayed within the services. To request the removal of a testimonial, please submit a Support Request.

We also partner with service providers to collect and display ratings and review content on our websites, ensuring transparency and user feedback integration.

13. Payment Processing and Third-Party Services

We utilize third-party payment processors to facilitate internet-based payment services for transactions within Mindbody Services. If you make a payment, your Personal Information may be collected directly by these third parties, not by Mindbody, and will be subject to the third party’s privacy policy. We do not control and are not responsible for the data collection, use, and disclosure practices of these third-party payment processors.

When a third-party payment processor acts as a sub-processor, we ensure appropriate safeguards are in place for the onward transfer of your Personal Information. Section 23 provides a list of our sub-processors and links to their privacy policies.

14. Links to External Websites

This Privacy Policy does not extend to and we are not responsible for the privacy practices, information handling, or other operations of third parties, including our Subscribers and any third party operating any Third Party Offering, site, or other products and services linked to or used in conjunction with Mindbody Services. The inclusion of any link does not imply our endorsement of the linked site or service.

We are not responsible for the data collection, usage, and disclosure policies and practices (including data security practices) of other organizations, such as Facebook, Apple, Google, Microsoft, RIM, or any other app developer, app provider, social media platform provider, operating system provider, wireless service provider, or device manufacturer. This includes any Personal Information you disclose to these organizations through or in connection with Mindbody Services, including via our social media pages.

15. Data Retention Policy

We retain your Personal Information for as long as necessary or permitted based on the purpose(s) for which it was obtained and in accordance with applicable law. Our data retention periods are determined by several factors, including:

The duration of our ongoing relationship with you and the provision of Mindbody Services to you (e.g., as long as you maintain an account or continue using Mindbody Services).
Legal obligations that require us to retain data for a certain period (e.g., transaction records for legal compliance).
The necessity of retention in light of our legal position (e.g., statutes of limitations, pending litigation, or regulatory investigations).

16. Security Measures for Your Information

The security of Personal Information is a top priority at Mindbody. We implement reasonable technical, administrative, and physical safeguards designed to protect Personal Information within our organization from unauthorized access, use, or disclosure. However, no data transmission or storage system can be guaranteed to be 100% secure. For more details about our security practices, please refer to our Security Policy.

17. Services Not Intended for Minors

Mindbody Services are not directed at or intended for children under the age of 16, and we request that individuals under this age do not provide Personal Information through Mindbody Services. We do not knowingly collect Personal Information from children under 16.

18. International Data Transfers

Mindbody Services are managed and operated from the United States. We do not intend to subject ourselves to the laws or jurisdiction of any state, country, or territory other than the United States. Your Personal Information may be stored and processed in any country where we have facilities or engage service providers, including the United States and the United Kingdom. By using Mindbody Services, you acknowledge that your information may be transferred to countries outside of your country of residence, including the United States. These countries may have data protection rules that differ from those in your country and may not offer the same level of protection as in the European Economic Area (“EEA”) or the UK. In certain circumstances, courts, law enforcement agencies, regulatory bodies, or security authorities in these other countries may be authorized to access your Personal Information.

Some non-EEA countries are recognized by the European Commission as providing an adequate level of data protection according to EEA standards. For transfers from the EEA and Switzerland to countries not deemed adequate by the European Commission (such as the United States), we have implemented appropriate safeguards, including the use of Standard Contractual Clauses. For transfers from the United Kingdom to countries not considered adequate by the Commissioner, we utilize the relevant UK Standard Contractual Clauses. Copies of these clauses can be obtained by contacting us as detailed in Section 22.

19. Sensitive Personal Information

We request that you do not send us or disclose any sensitive Personal Information (e.g., information related to racial or ethnic origin, political opinions, religion, genetic data, trade union membership, criminal background, etc.) through Mindbody Services or otherwise, unless explicitly requested or with your explicit consent.

Certain states in the United States, like California, provide residents with the right to limit the use of their sensitive personal information. However, Mindbody does not engage in uses or disclosures of sensitive personal information that would trigger this right to limit under state law.

20. Data Privacy Framework Compliance

Mindbody adheres to the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as established by the U.S. Department of Commerce. We have certified our adherence to the DPF Principles regarding the processing of personal data received from EEA member countries, the United Kingdom, and Switzerland. In case of any conflict between this Privacy Policy and the DPF Principles, the Principles will govern. To learn more about the Data Privacy Framework program and to view our certification, please visit https://www.dataprivacyframework.gov/.

Mindbody is accountable for the processing of personal data it receives under the DPF and subsequently transfers to a third party acting as an agent on our behalf. We comply with the DPF Principles for all onward transfers of personal data from the EEA, the UK, and Switzerland, including the onward transfer liability provisions.

The Federal Trade Commission (FTC) has jurisdiction over Mindbody’s compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and Swiss-U.S. DPF. In certain situations, Mindbody may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

In compliance with the DPF, Mindbody commits to resolving complaints about our handling of personal data received in reliance on the DPF. Unresolved complaints will be referred to TRUSTe, an alternative dispute resolution provider based in the U.S. If you do not receive timely acknowledgment of your DPF-related complaint, or if it is not resolved to your satisfaction, please visit https://feedback-form.truste.com/watchdog/request for more information or to file a complaint. These dispute resolution services are provided free of charge to you.

For DPF compliance complaints not resolved through other DPF mechanisms, you may have the option to invoke binding arbitration under certain conditions. Further details can be found on the official DPF website: https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf?tabset-35584=2.

21. Updates to This Privacy Policy

Mindbody may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Any changes will be effective immediately upon posting the revised Privacy Policy at https://co.mindbodyonline.com/legal/privacy-policy. For significant changes, we may provide additional notification by posting a notice on our websites or within Mindbody Services, or by sending you an email. By continuing to use Mindbody Services after any changes are announced, you accept the revised Privacy Policy. If you do not agree with any changes, you must discontinue using Mindbody Services. It is your responsibility to regularly review the latest version of the Privacy Policy. The “Last Updated” date at the top of this Privacy Policy indicates the most recent revision.

22. Contact Information

If you have any questions or concerns regarding this Privacy Policy, please contact us via email at [email protected] or by postal mail at:

ATTN: Mindbody Legal – Privacy Policy Issues
MINDBODY, Inc.
651 Tank Farm Road
San Luis Obispo, CA 93401

For individuals in the EEA, you may also:

[Contact details for EEA representative and Data Protection Officer if applicable in the original policy would be added here if available.]

23. List of Sub-Processors

The following is a current list of third-party vendors that may collect information from you, directly or indirectly, as sub-processors. Please review their respective privacy policies for more information on their data handling practices (links are current as of the publication date of this Privacy Policy):

Sendgrid – https://sendgrid.com/policies/privacy/
Stripe – https://stripe.com/us/privacy
Twilio – https://www.twilio.com/legal/privacy
Mailchimp – https://mailchimp.com/legal/privacy