Data processing terms for member imports

Whose data it is

The member data in your file belongs to your gym. Your gym decides why it is used. Marrow handles it on your behalf, to run your gym on Marrow, and for nothing else.

What these terms cover

Every file you upload through the importer: member lists, class pack reports and class schedules. That includes the columns Marrow reads, such as names, email addresses, phone numbers, dates of birth, join dates, membership state, the plan a member is on, the id your old system gave them, class pack balances, and class names, times and instructors.

Marrow also keeps each row of a member file as it arrived, next to the fields it read, as the record of what was imported. Columns Marrow does not use are kept in that record and are not used for anything.

The importer does not move cards, memberships or dues, and nothing is charged by importing.

What Marrow does with it

Only what the importer does. It shows you a review before anything is added. For the members you approve, it creates their Marrow accounts with the coach you picked, sends each of them one email from your gym saying their account is ready, and carries class pack balances over as free class credits. For a schedule, it adds the classes you choose to your coaches' calendars.

Marrow does not sell this data, does not use it to market to your members, and does not share it with anyone for their own marketing.

What your gym is responsible for

By agreeing, your gym confirms that it has the right to share this member data with Marrow, that it has a lawful basis for doing so (you name the basis on the import review), and that it has told its members whatever the law where you operate requires.

Your gym also commits to honoring any member's request to opt out within 7 days, including asking Marrow to delete that member's data.

How it is kept

Files travel to Marrow over encrypted connections. Imported data is stored in Marrow's database in the United States, in tables that the website and the app cannot read directly; only Marrow's own server reaches them. Only the gym owner can run an import or bring members over.

Who else handles it

Marrow uses a small number of service providers to run the platform: a hosting and network provider, a database provider, an email delivery provider that sends the account emails, and a payments provider for members who pay through Marrow. Each one handles the data only to provide its service to Marrow. The named providers are listed on the subprocessors page.

Deletion

Ask Marrow through the contact page to delete imported data, for the members you name or for the whole import, and Marrow deletes it within 30 days. The record of your agreement to these terms, and of each import you approved, is kept, because it is the proof of what was agreed.

If something goes wrong

If Marrow learns that someone reached member data your gym imported without permission, Marrow tells your gym without undue delay, with what is known at the time, so your gym can meet its own obligations to its members.

Questions

Ask through the contact page. These terms sit alongside the terms of service and the privacy policy.