Privacy Policy Archive

Effective starting: March 16, 2022

What This Privacy Policy Covers

League Inc. (“us,”, “we,”, “our”, or “League”) is committed to protecting your data, and our highest priority is keeping your sensitive information—especially your personal health information—safe. In this policy we explain what data we collect about you and how we store, analyze and share the data through League’s website, mobile and web applications (together, the “League Platform” or “Platform”).

Nothing in this Policy limits your rights under applicable laws, including your ability, depending on your country of residence, to file a complaint with your local Data Protection Authority.

Please carefully read through this Policy. To join and enjoy League’s Platform and its Services, you are required to accept all terms of this Policy. By using the Platform, you are accepting the terms of this Privacy Policy and our Terms of Services, and you are consenting to our collection, use, disclosure and retention of your Information as described in this Privacy Policy. If you do not consent to the collection, use and disclosure of your information as described in this Policy, you will not be able to use the Platform.

Unless otherwise defined herein, capitalized terms shall have the meanings assigned to such terms set forth in the Terms of Service and which incorporate this Privacy Policy by reference.

What Information does League collect about me?

We collect Information about you when you provide it to us, when you use our Platform and when other sources provide it to us, as described below. Please note that for the purpose of clarity and ease, we will refer to Personal Information or Information for all categories mentioned below throughout this Policy.

How does League collect my Information?

Simply stated, Personal Information is any information about you as an identifiable individual. The information we may collect from you includes:

  • Your first and last name, home address and phone number;
  • Your gender and date of birth;
  • The email address you use to sign-in and communicate with us;
  • Other log-in information such as your password;
  • Information about your profession including your employee ID, income, role and employment status;
  • Your dependents (if any) and their information;
  • Information about services and products you buy or sign-up for through League’s Lifemarket;
  • Information about your participation and performance in Activities and Programs;
  • Health rewards that you can earn by participating in qualifying activities;
  • Any Information you provide to us while chatting and interacting with the League Concierge, a Lifemarket Service Provider or a Customer Care agent;
  • The comments and contributions you may make on the Platform;
  • Opinions and feedback you may share with us;
  • Additional information you may provide as you submit queries and requests to us.

Health and Wellness Information (“Health Information”) is data related to your physical and mental health as well as medical history, including symptoms, diagnosis, procedures, outcomes and claims. When using League’s Platform you may provide certain health or health-related information to us. Health Information includes:

  • Insurance data such as insurance carrier, plan, group and member ID as well as claim information if you opt in to share this data with League;
  • Identifiers connected to your health benefits and group plan membership such as Social Security Numbers (U.S.) and Social Insurance Numbers (Canada);
  • Any Health Information you provide to us while chatting and interacting with the League Concierge, a Lifemarket Service Provider or a Customer Care agent;
  • Health information when you submit a claim towards your benefit spending accounts through the Platform;
  • Information about your health, fitness, nutrition and finance provided by you through Health Profile;
  • Information shared through wearable devices and/or applications that you choose to connect to the Platform;
  • Information about health-related services and products you buy or sign-up for through League’s Lifemarket.

Payment Information is data related to your bank account, debit or credit card. We collect your bank account and billing information when you register for the Platform to process your spending account claims or for any payments through League’s Lifemarket. By linking your bank account to your League account, you authorize us to submit your Payment Information to the financial institution that will process your employee benefit payment.

If you provide us with your credit card information, this information is processed by our credit card payment processing partner. This partner collects your voluntarily provided payment information necessary to process your payment or claim. Such partner’s use and storage of information is governed by its applicable terms of service and privacy policy.

Personal Information we get from others

Employment and Benefit Information – We may also get Information about you from other sources. For example, we may get employment information from your Employer or Carrier to enroll you in your health benefits and our Platform. The data set may include your first and last name, employee ID, income, role, employment status and dependent information. The data set depends on what your employer shares with us. While you are a Member and use the Platform, we may receive additional employment or benefit information from your Employer or Carrier including claims data. We might add this Information to your account. Please note that we will only use and store the information necessary to enroll you in your benefits and our Platform and to provide you with personalized services through Health Profile and Programs.

Devices and Third Party Apps – As a Member you may be able to connect activity and health trackers (“Devices”) and third-party applications (“Third Party Apps”) to your account. These devices and applications can track a wide number of different aspects of your daily activities, including, among others, your daily steps and fitness activity as well as your nutrition. Depending on the brand and model of tracker you use, the data collected may vary. In general, these Devices and Third Party Apps have specific privacy policies that outline what data they collect. In some cases you may be able to control which data points to share with the Platform. We strongly suggest you review the right privacy policy to know what specific data points your activity tracking device collects about you.

Social Media Account Information – If you create your League account using a social media account (e.g. Google, Facebook) we may also collect Information provided to us by that social media service. This Information may include your name, email address, language preference and profile picture.

Information we collect automatically when you use the Platform

Device and Connection Information – We collect information about your computer, phone, tablet or other devices you use to access the Platform. This Device and Connection Information includes your connection type and settings when you install, access, update or use our Platform. We also collect Information through your device about your operating system, browser type, IP address, URLs of referring/exit pages, device identifiers and crash data. We use this additional information to enhance the security controls around Platform access and resolve bugs and errors that may exist on the Platform. We use your IP address and/or country preference to approximate your location so we can provide you with a better Platform experience.

Cookies and Other Tracking Technologies – We collect information about you when you use our Platform, including browsing our websites and taking certain actions within the Platform. To do so we use cookies and other tracking technologies (e.g., web beacons, device identifiers and pixels) to provide functionality and to recognize you across our Platform. For more information, please see our Cookies and Tracking Notice, which includes information on how to control or opt out of these cookies and tracking technologies.

How does League collect my Information?

League receives employment information from your employer or insurance carrier so we can set up your profile and prepare your account for enrollment. After that, we collect your Information when you sign-up for League’s Platform and as you submit it through the use of the Platform and as provided by your employer or carrier.

Depending on the Services and integrations you participate in or enable and the Service being offered to you by your employer through the League Platform, we may collect and receive Personal Information through your use of the particular Services and integrations. These integrated services and solutions may have their own and separate consent process required prior to you using them with League.

How does League use my Information?

How we use the Information we collect depends in part on which Services are offered to you, which Services you use, how you use them and any preferences you have communicated to us. Below are the specific purposes for which we use the Information we collect about you.

For enrollment and decision support – We guide you every step of the way so you fully understand your options and choose the best coverage for your needs. To do so, we gather the Information we have received from your employer about you and apply eligibility rules to facilitate your enrollment into your health benefits as well as any other benefit spending accounts offered to you through your employer.

For a personalized digital wallet – We provide you with one easily-accessible place to manage your coverage, dependents and benefit spending accounts.

For processing your claims – If you are being offered additional benefit spending accounts by your employer through the League Platform, you can submit eligible claims online. In order to process these claims and reimburse your bank account, we process the claim information provided to us by you and use the Payment Information we have on file.

For Customer Care services – Through the Platform you have immediate live chat support for all your benefit-related questions. To answer your request and to provide you with personalized recommendations, our agents access your Personal Information on file and may ask you to provide us with additional Information. Additional Information requested or provided by you may contain Health Information.

For immediate, expert health and wellness guidance – We provide health and wellness-related guidance and navigational support through live chat with Health Concierge. To answer your request and to provide you with personalized guidance, League’s Concierges access your Personal Information on file and may ask you to give them additional information including Health Information.

For creation or enhancement of your personalized health profile and programs – As a Member of League’s Platform you have access to a central place for your health information, personal progress on health and wellness programs, earned rewards and any Device and Third Party App integrations. League uses Personal Information and Health Information provided to us to help you understand your health risks and long-term outcomes and how you can use your benefits and programs to improve your overall health and wellbeing.

For health and wellness assessments – You may have access to League’s health assessment (“Health Profile”). Through a number of questions, the Health Profile assesses your wellbeing across a number of dimensions. You don’t have to complete the Health Profile if you don’t want to share this information with us.

For processing your orders and to facilitate bookings and communications with a Service Provider – Through League’s Lifemarket we provide you with offers and discounts on products and services that support better health, fitness and wellbeing. When you buy products or sign-up for services through the Lifemarket, we access your Personal Information including your benefit spending accounts and Payment Information. League needs access to this Information to process your order and payments and facilitate communication between you and the Service Provider.

For safety, security and compliance – We use information about you and your Platform use to identify you as a member of our Platform, verify accounts and activity, to monitor suspicious or fraudulent activity and to identify violations of Platform policies.

To provide the Platform and personalize your experience – We use Information about you to provide the Platform to you, to enhance the security controls around Platform access and resolve bugs and errors. We may also use your Information to verify your geographic location. We may use your geographic location data to personalize your experience in the Platform, to recommend content and to see whether the information you request is available in your location.

For research and development – We’re always looking for ways to make our Platform smarter, faster, secure, integrated and useful to you. We use collective learnings about how people use our Platform and feedback provided directly to us to troubleshoot and to identify trends, usage, activity patterns and areas for integration and improvement of the Platform.

To market, promote and drive engagement – If you give your consent, we use your Information to send newsletters, surveys, offers and promotional materials that may be of interest to you and tailored to your individual health and wellness goals. You can opt out of receiving such messages from League by following the opt-out instructions in these messages. If you opt out, we may still send you non-commercial electronic messages, such as messages about your account or our ongoing business relations. Please note that League does not sell or share your Information to third parties for their marketing purposes.

For League Family – Your employer may offer League Family, which lets your dependents use the League Platform. If  this option is available, you can send your dependents (spouse, children, common-law partners) who are eighteen (18) years of age or older an email invitation to join the League platform and access our features. 

For Challenges  – If your employer offers League Challenges your progress may be shared with other participants and HR admins.

How League shares Information we collect

We may share your Information with third parties so we can provide our services to you. If we need to share your Information with third parties, we will limit the Information to the minimum amount necessary to ensure the provision and quality of the Services we offer you. We share your Information with third parties as follows:

Contractors – We may disclose your Personal Information with contractors that work on our behalf and assist us in providing and supporting the services we offer.

Third Party Providers – We share Information with third parties that help us operate, provide, improve, integrate, customize and support our Platform and Services we offer to you such as:

  • Cloud hosting services;
  • Customer service platform;
  • Credit card processing;
  • Health concierge;
  • Connector services and data integration.

If a Third Party Provider needs to access Information about you to perform services on our behalf, they do so under close instruction from us, including policies and procedures designed to protect your Information. Our Third Party Providers undergo a thorough security and privacy review as a part of the evaluation process and then regular SOC1, SOC2 and/or ISO/IEC 27001 audit reviews thereafter. In the event these audits have material findings that present risks to League or our clients, we work closely with the vendor to track their remediation efforts until the issue has been resolved.

Insurance Carriers – We’ll automatically feed your benefits elections and status/profile updates to your Insurance Carriers for faster, more accurate enrollment and to determine eligibility. When you reach out to us for support about your eligibility or coverage, we may share this Information with your Insurance Carriers on your behalf.

Your Employer – We may share Information with your employer in an anonymous and aggregated or group format only. Any data sharing practices going beyond anonymous, aggregated or group format need your explicit consent. When sharing de-identifiable or aggregated information, we will use procedures compliant with applicable privacy laws and regulations to ensure that all identifiable data and dimensions have been removed from the data sets and reports provided to your Employer. Please note that your Employer may combine the information we provide with other data available to them and use the combined data at their discretion, including to evaluate the overall program, as well as to provide additional benefits, programs and services. Your Employer’s use of the data and reports are not controlled by us, and this Policy does not cover your Employer’s data use and sharing practices.

“Cleared for Workplace Module” – If your Employer offers the “Cleared for Workplace Module” as part of the Platform, your participation status will always be shared with them. None of your responses to individual questions in the module will ever be shared with your Employer. Only if you give your explicit consent to share the results of the module, your COVID-19 status and a recommendation for testing or self-isolation will be passed to your employer. No other health conditions or symptoms will be disclosed to your Employer. If your Employer is not using this service this does not apply to you.

It is Your Employer’s responsibility to comply with its own privacy policy and applicable laws. We encourage you to review your Employer’s data practices with your Human Resources team.

Service Providers – We may share your information with Service Providers you choose through the League Platform including our Lifemarket. When you book an appointment and buy a product through the Platform, we automatically provide your first and last name as well as a Service or product description to the Service Provider. We want everyone to feel safe and cared for when they visit League Lifemarket or use a Service Provider offered through the Platform. So before we admit any new Service Providers, we thoroughly review their practices to make sure they’re in line with our standards. We also regularly review our Service Providers to make sure they stay compliant.

Devices and Third Party Apps – You may choose to add new functionality and Information to your account by connecting Devices and Third Party Apps to your account. If you do, you may give these Devices and Third Party Apps access to your account and Information about you like your name and email address, and any content you choose to use in connection with those apps and devices. Device and Third Party App policies and procedures are not controlled by us, and this Policy does not cover how Devices and Third Party Apps use your Information. We encourage you to review the privacy policies of third parties before connecting to or using their applications or services to learn more about their privacy and information handling practices. If you object to Information about you being shared with these third parties, please disable the device or app within your League account settings.

Law Enforcement, Governmental Authorities and Agencies – We may disclose information we have collected from and about you – including Personal Information – if we believe in good faith that it’s necessary to:

  • comply with relevant laws or to respond to subpoenas or warrants served toon us;
  • enforce our Terms of Service and Privacy Policy;
  • protect and defend our rights or property, our Customers, our Suppliers, or other third parties; or
  • in certain situations, abide by lawful requests by public authorities to disclosure of Personal Information, including to meet national security or law enforcement requirements.

Merger, Sales and Acquisition – In the event that we (a) undergo reorganization or (b) that League is sold to a third party, any Personal Information we hold about you may be transferred to the re-organized entity or third party, in accordance with applicable laws and regulations. If an acquisition like this occurs, the new entity will continue to use your Personal Information within the limits of this Policy, to continue delivering your service.

For League Family – If you are the primary account holder and have dependents using League Family, all of the following will be private and not accessible by your dependents without your explicit consent:

  • Usage of your benefits
  • Usage of Health Programs and third-party providers through the League platform
  • Details of your Spending Account transactions
  • Claims submitted to League 
  • Chats (usage and records) with League’s Care Team 
  • League Rewards Points
  • League Credit
  • Health journey and goals, including Health Profile and recommendations
  • Lifemarket purchases

Aggregated/non-personal data may be shared between accounts (such as the balance of a shared Spending Account, deductibles and out-of-pocket spending).

Is my Personal Information and other data secure?

At League, we take security and privacy very seriously. We’re committed to protecting your data, and our highest priority is keeping your sensitive information – especially your personal health information – safe. We follow strict security and compliance standards not only because we need to meet specific regulations, but because we consider it one of the most important things we can do for you.

Security is at the heart of every process and every technology we use across all our teams at League. The League Platform is regularly audited to make sure it complies with security, availability and confidentiality requirements for managing client data.

Communication with League should always be done through the League Platform where the information is encrypted. While League makes every effort to secure all communications within our control and in our Platform, please be advised that no method of delivery is absolutely secure and any communication of Personal Information may be accidentally or deliberately intercepted by third parties. No company, including League, can fully eliminate security risks associated with your Information. While we strive to protect your Information, we cannot guarantee its security.

To help protect yourself and your Information, choose a unique password for our Platforms and do not use a password that you would use on any other website or online service. You are responsible for the security of your Information that you transmit to us or view, download or otherwise access when using public or otherwise unsecured networks. If you use a mobile device to accept your authorization code, you should have the ability to remotely wipe the phone in the event that your device is lost or stolen.

Who at League has access to my Information?

Your Personal Information is maintained on League’s infrastructure or those of third-party providers. For that reason, League employees and contractors have access to your Information so we can provide you with quality services, including Member support and Health Concierge services. Our employees and contractors are obligated to respect the confidentiality of your Personal Information and are only authorized to access your Information as necessary to provide you with Services or support.

In the event that we (a) undergo reorganization or (b) that League is sold to a third party, any Personal Information we hold about you may be transferred to the re-organized entity or third party, in accordance with applicable laws and regulations. In the event of an acquisition, the new entity will continue to use your Personal Information within the limits of this Policy, to continue delivering your service.

Can I correct or update my Information?

Yes. If your Personal Information changes over time or you realize your Information is outdated or incorrect, you have a right to be able to update or correct it. You may update or correct the Information by changing it right in the Platform. If you aren’t able to update or correct the Information right in your account, you can reach out to us through the Chat function in the Platform. You can also contact us at help@league.com to request that we update or correct the Information for you. We will respond to your request within a reasonable timeframe.

Can I find out what Information League has collected about me?

Yes. All our Members, no matter where they live, except in specific circumstances identified by local laws, have a legal right to access the Information we have collected about them and an account of its use and disclosure. You can request a copy of all the Information and data we hold about you. We’ll give you a copy of the data in a standard format through a secure channel. To make this request, reach out to us at help@league.com. We will respond to your request within a reasonable timeframe.

For California residents – In accordance with the California Civil Code Section 1798.83, you may contact us at the address below to request certain information about the disclosure of Personal Information to third parties for their direct marketing purposes.

Can my Information be deleted?

Please note that we may not be able to delete your Information without also deleting your Member account. You may terminate your account at any time by submitting a deletion request to help@league.com. Once your account is terminated, you will no longer be able to access or use your health and wellness benefit accounts offered through the League Platform as well as Programs and Services.

Please note that we will only retain your Personal Information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements. To figure out the appropriate retention period for Personal Information, we consider the amount, nature and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, the applicable legal requirements, and regulatory retention periods.

Can I request that League restrict processing for some of my Information?

Because of the type of Services we offer, we can’t accommodate requests to restrict the processing of certain sets of Information. You, however, will be able to limit the Information added to your profile based on your use of Services and participation in Programs, the Devices and Third Party Apps you connect to your account and the consent you provide for any data sharing practices. If you want us to stop processing parts of your Information, you can request that all data be deleted through the process above. You can also limit the Personal Information provided to us as you participate in the Services and programs offered to you.

If you have connected any Devices or Third Party Apps, you can manage the data sharing and processing setting for each of them through your League account.

If you’ve provided your consent for additional data sharing, you can withdraw your consent at any time. To do so, please reach out to us through the Chat function in the Platform or by contacting help@league.com.

If you provide your consent, we use your Information to send newsletters, surveys, offers and promotional materials that may be of interest to you and tailored to your individual health and wellness goals. You may opt out of receiving such messages from League by following the opt out instructions in these messages. If you opt out, we may still send you non-commercial electronic messages, such as messages about your account or our ongoing business relations.

Where is my Information being transferred?

League is headquartered in Canada, has an office in the United States, and uses Third Party Providers in other countries. Your Personal Information may be transferred to the Canada, United States or other locations outside of your state, province, country, or other governmental jurisdiction where the privacy laws may not be as protective as those in your jurisdiction. League takes appropriate steps to protect your privacy and implement reasonable security measures to protect your Personal Information in storage and transmission. We also enter into contracts with our Third Party Providers that require them to treat Personal Information in a way that’s consistent with this Policy.

I am using League Family – What do I need to know?

This is for individuals using League Family. You can expect the same level of privacy as the primary account holder as all information in this Privacy Policy applies to you, with the following differences:

  • You will not need to provide any information about your employment
  • You will not have the option to provide dependent information
  • All of the following will be private and inaccessible by the primary account holder or other dependents without your explicit consent:
    • Usage of your benefits
    • Usage of Health Programs and third-party providers through the League platform
    • Details of your Spending Account transactions
    • Claims submitted to League 
    • Chats (usage and records) with League’s Care Team  
    • League Rewards Points
    • League Credit
    • Health journey and goals, including Health Profile and recommendations
    • Lifemarket purchases
  • You will not be able to view any of the above information of the primary account holder or other dependents without their explicit consent
  • Aggregated/non-personal data may be shared between accounts with the primary account holder or other dependents (such as the balance of a shared Spending Account, deductibles and out-of-pocket spending)

All dependents using League Family must be eighteen (18) years of age or older.

I am an EU resident – What do I need to know?

This is for residents of the European Union (“EU”) including the European Economic Area (“EEA”) countries of Iceland, Liechtenstein, Norway and, where applicable, Switzerland. Our processing of Personal Information of Members who are in the EU is governed by the General Data Protection Regulation (“GDPR”). The GDPR requires us to give you certain information about your data and rights:

Personal information – References to “Personal Information” and “Information” in this Privacy Policy are equivalent to “personal data” governed by the GDPR.

Data Controller – League is the data controller of Personal Information provided to, or collected by or for, our Platform and Services. But we may act as a data processor on behalf of your employer for Personal Information that we process on their behalf when providing the Platform and Services.

Legal basis for processing – We only use your Information as permitted by law. We are required to inform you of the legal basis of our processing of your Personal Information, which are described in this Policy. If you have questions about the legal basis of how we process your Information, reach out to us at privacy@league.com.

Processing ActivityLegal Basis for Processing
Enrollment and decision support
Personalized digital wallet
Processing your claims
Customer Care services
Expert health and wellness guidanceThis processing is necessary to the fulfillment of our contracts with employers.
Creation of your personalized health profile
Health and wellness assessments
Processing your orders and to facilitate bookings and communications with a Service Provider
Providing the Platform and personalizing your experience
Safety, security and compliance
Research and development This processing is necessary to the legitimate interests of League
Marketing, promoting and driving engagement

Use for new purposes – We may use your Personal Information for reasons not described in this Policy where permitted by law and the reason is compatible with the purpose for which we collected it. If we need to use your Personal Information for an unrelated purpose, we will notify you and explain the legal basis.

Cross-Border Data Transfer – Whenever we transfer your personal information out of the EU to countries not deemed by the European Commission to provide an adequate level of protection, the transfer will be based on contracts approved by the European Commission which impose data protection obligations on the parties to the transfer. For details, see European Commission Model contracts for the transfer of Personal Information to third countries. Please reach out to us if you want more information on the specific mechanism we use when transferring your Personal Information out of the EU.

Your rights to access, correct, restrict or delete your Personal Information and object to processing – You have the right to request access to your Personal Information, to have your Information corrected, restricted or deleted, and to object to our processing of your Personal Information. You also have the right of data portability, which means that you can request that we provide you (or a third party you designate) with a transferable copy of the Personal Information that you have provided to us. Your rights may be subject to various limitations under the GDPR. If you wish to exercise any of these rights, or if you have any concerns about our processing of your Personal Information, please contact us in any of the ways listed in the section “Contact Us” below.

Right to Lodge a Complaint with a Supervisory Authority – You have the right to file a complaint about our processing of your Personal Information with your national (or in some countries, regional) data protection authority.The EU Commission has a list here: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

Privacy of Minors

Individuals under the age of eighteen (18) should not transfer any Personal Information to us. We will neither intentionally ask for Information of users under the age of eighteen, nor process their Personal Information. League Family can only be used by dependents who are eighteen (18) years of age or older.

Additional notice to residents of the United States: We do not intentionally collect or maintain Information from visitors of the website or Platform who are under thirteen (13) years old.

Dispute Resolution

If you believe that League has not adhered to this Privacy Policy, please contact League by email at privacy@league.com. We’ll do our best to make things right. If you feel that your complaint hasn’t been fully addressed, let us know and we’ll investigate further.

If you’d rather file an anonymous complaint, you can do so through our whistleblower hotline provided by an independent Third Party Provider. You always have the option to remain completely anonymous. Complaints can be made 24/7/365 through one of the following channels:

Phone – 1-866-921-6714 (toll free number in North America)
Web Portal – https://www.integritycounts.ca/org/league

For EU Residents – To lodge a complaint with a supervisory authority under the GDPR, please see “I am an EU resident – What do I need to know?” above.

Contact US

If you have questions or concerns about this Privacy Policy, please contact us at:

Attention: Privacy Officer – Information Security & Privacy
League, Inc.
225 King St W, Suite 800, Toronto, Ontario M5V3C6
privacy@league.com

Changes to This Privacy Policy

If this Privacy Policy changes, the revised policy will be posted online and if we make material changes, you may be notified by email. Your continued use of the Platform after the effective date constitutes your acceptance of the amended Privacy Policy. Any amended Privacy Policy supersedes all previous versions. Please check back periodically, and especially before you provide any personal information. This Privacy Policy was last updated on March 16th, 2022. You can find all versions of our Privacy Policy here.

Effective starting: January 31, 2022

What This Privacy Policy Covers

League Inc. (“us,”, “we,”, “our”, or “League”) is committed to protecting your data, and our highest priority is keeping your sensitive information—especially your personal health information—safe. In this policy we explain what data we collect about you and how we store, analyze and share the data through League’s website, mobile and web applications (together, the “League Platform” or “Platform”). This Privacy Policy (“Policy”) is intended to help you understand:

Nothing in this Policy limits your rights under applicable laws, including your ability, depending on your country of residence, to file a complaint with your local Data Protection Authority.

Please carefully read through this Policy. To join and enjoy League’s Platform and its Services, you are required to accept all terms of this Policy. By using the Platform, you are accepting the terms of this Privacy Policy and our Terms of Services, and you are consenting to our collection, use, disclosure and retention of your Information as described in this Privacy Policy. If you do not consent to the collection, use and disclosure of your information as described in this Policy, you will not be able to use the Platform.

Unless otherwise defined herein, capitalized terms shall have the meanings assigned to such terms set forth in the Terms of Service and which incorporate this Privacy Policy by reference.

Applicability of This Privacy Policy

This Privacy Policy is only applicable to the Platform and does not apply to any other website or service that you may be able to access through League’s Platform or any website or digital services of League’s business partners, each of which may have data collection, storage and use practices and policies that may differ from this Policy. We are not responsible for the actions or privacy practices of these third-party websites or services nor does it signify our endorsement of such websites, locations or its contents. Please consult those websites and services directly to understand their privacy practices. Your use of the League Platform is governed by this Privacy Policy and the Agreement (as the term “Agreement” is defined in our Terms of Services).

What Information does League collect about me?

We collect Information about you when you provide it to us, when you use our Platform and when other sources provide it to us, as described below. Please note that for the purpose of clarity and ease, we will refer to Personal Information or Information for all categories mentioned below throughout this Policy.

Personal Information you provide to us

Simply stated, Personal Information is any information about you as an identifiable individual. The information we may collect from you includes:

  • Your first and last name, home address and phone number;
  • Your gender and date of birth;
  • The email address you use to sign-in and communicate with us;
  • Other log-in information such as your password;
  • Information about your profession including your employee ID, income, role and employment status;
  • Your dependents (if any) and their information;
  • Information about services and products you buy or sign-up for through League’s Lifemarket;
  • Information about your participation and performance in Activities and Programs;
  • Health rewards that you can earn by participating in qualifying activities;
  • Any Information you provide to us while chatting and interacting with the League Concierge, a Lifemarket Service Provider or a Customer Care agent;
  • The comments and contributions you may make on the Platform;
  • Additional information you may provide as you submit queries and requests to us.

Health and Wellness Information (“Health Information”) is data related to your physical and mental health as well as medical history, including symptoms, diagnosis, procedures, outcomes and claims. When using League’s Platform you may provide certain health or health-related information to us. Health Information includes:

  • Insurance data such as insurance carrier, plan, group and member ID as well as claim information if you opt in to share this data with League;
  • Identifiers connected to your health benefits and group plan membership such as Social Security Numbers (U.S.) and Social Insurance Numbers (Canada);
  • Any Health Information you provide to us while chatting and interacting with the League Concierge, a Lifemarket Service Provider or a Customer Care agent;
  • Health information when you submit a claim towards your benefit spending accounts through the Platform;
  • Information about your health, fitness, nutrition and finance provided by you through Health Profile;
  • Information about health-related services and products you buy or sign-up for through League’s Lifemarket.

Payment Information is data related to your bank account, debit or credit card. We collect your bank account and billing information when you register for the Platform to process your spending account claims or for any payments through League’s Lifemarket. By linking your bank account to your League account, you authorize us to submit your Payment Information to the financial institution that will process your employee benefit payment.

If you provide us with your credit card information, this information is processed by our credit card payment processing partner. This partner collects your voluntarily provided payment information necessary to process your payment or claim. Such partner’s use and storage of information is governed by its applicable terms of service and privacy policy.

Personal Information we get from others

Employment and Benefit Information – We may also get Information about you from other sources. For example, we may get employment information from your Employer or Carrier to enroll you in your health benefits and our Platform. The data set may include your first and last name, employee ID, income, role, employment status and dependent information. The data set depends on what your employer shares with us. While you are a Member and use the Platform, we may receive additional employment or benefit information from your Employer or Carrier including claims data. We might add this Information to your account. Please note that we will only use and store the information necessary to enroll you in your benefits and our Platform and to provide you with personalized services through Health Profile and Programs.

Devices and Third Party Apps – As a Member you may be able to connect activity and health trackers (“Devices”) and third-party applications (“Third Party Apps”) to your account. These devices and applications can track a wide number of different aspects of your daily activities, including, among others, your daily steps and fitness activity as well as your nutrition. Depending on the brand and model of tracker you use, the data collected may vary. In general, these Devices and Third Party Apps have specific privacy policies that outline what data they collect. We strongly suggest you review the right privacy policy to know what specific data points your activity tracking device collects about you.

Social Media Account Information – If you create your League account using a social media account (e.g. Google, Facebook) we may also collect Information provided to us by that social media service. This Information may include your name, email address, language preference and profile picture.

Information we collect automatically when you use the Platform

Device and Connection Information – We collect information about your computer, phone, tablet or other devices you use to access the Platform. This Device and Connection Information includes your connection type and settings when you install, access, update or use our Platform. We also collect Information through your device about your operating system, browser type, IP address, URLs of referring/exit pages, device identifiers and crash data. We use this additional information to enhance the security controls around Platform access and resolve bugs and errors that may exist on the Platform. We use your IP address and/or country preference to approximate your location so we can provide you with a better Platform experience.

Cookies and Other Tracking Technologies – We collect information about you when you use our Platform, including browsing our websites and taking certain actions within the Platform. To do so we use cookies and other tracking technologies (e.g., web beacons, device identifiers and pixels) to provide functionality and to recognize you across our Platform. For more information, please see our Cookies and Tracking Notice, which includes information on how to control or opt out of these cookies and tracking technologies.

How does League collect my Information?

League receives employment information from your employer or insurance carrier so we can set up your profile and prepare your account for enrollment. After that, we collect your Information when you sign-up for League’s Platform and as you submit it through the use of the Platform and as provided by your employer or carrier.

Depending on the Services and integrations you participate in or enable and the Service being offered to you by your employer through the League Platform, we may collect and receive Personal Information through your use of the particular Services and integrations. These integrated services and solutions may have their own and separate consent process required prior to you using them with League.

How does League use my Information?

How we use the Information we collect depends in part on which Services are offered to you, which Services you use, how you use them and any preferences you have communicated to us. Below are the specific purposes for which we use the Information we collect about you.

For enrollment and decision support – We guide you every step of the way so you fully understand your options and choose the best coverage for your needs. To do so, we gather the Information we have received from your employer about you and apply eligibility rules to facilitate your enrollment into your health benefits as well as any other benefit spending accounts offered to you through your employer.

For a personalized digital wallet – We provide you with one easily-accessible place to manage your coverage, dependents and benefit spending accounts.

For processing your claims – If you are being offered additional benefit spending accounts by your employer through the League Platform, you can submit eligible claims online. In order to process these claims and reimburse your bank account, we process the claim information provided to us by you and use the Payment Information we have on file.

For Customer Care services – Through the Platform you have immediate live chat support for all your benefit-related questions. To answer your request and to provide you with personalized recommendations, our agents access your Personal Information on file and may ask you to provide us with additional Information. Additional Information requested or provided by you may contain Health Information.

For immediate, expert health and wellness guidance – We provide health and wellness-related guidance and navigational support through live chat with Health Concierge. To answer your request and to provide you with personalized guidance, League’s Concierges access your Personal Information on file and may ask you to give them additional information including Health Information.

For creation of your personalized health profile and programs – As a Member of League’s Platform you have access to a central place for your health information, personal progress on health and wellness programs, earned rewards and any Device and Third Party App integrations. League uses Personal Information and Health Information provided to us to help you understand your health risks and long-term outcomes and how you can use your benefits and programs to improve your overall health and wellbeing.

For health and wellness assessments – You may have access to League’s health assessment (“Health Profile”). Through a number of questions, the Health Profile assesses your wellbeing across a number of dimensions. You don’t have to complete the Health Profile if you don’t want to share this information with us.

For processing your orders and to facilitate bookings and communications with a Service Provider – Through League’s Lifemarket we provide you with offers and discounts on products and services that support better health, fitness and wellbeing. When you buy products or sign-up for services through the Lifemarket, we access your Personal Information including your benefit spending accounts and Payment Information. League needs access to this Information to process your order and payments and facilitate communication between you and the Service Provider.

For safety, security and compliance – We use information about you and your Platform use to identify you as a member of our Platform, verify accounts and activity, to monitor suspicious or fraudulent activity and to identify violations of Platform policies.

To provide the Platform and personalize your experience – We use Information about you to provide the Platform to you, to enhance the security controls around Platform access and resolve bugs and errors. We may also use your Information to verify your geographic location. We may use your geographic location data to personalize your experience in the Platform, to recommend content and to see whether the information you request is available in your location.

For research and development – We’re always looking for ways to make our Platform smarter, faster, secure, integrated and useful to you. We use collective learnings about how people use our Platform and feedback provided directly to us to troubleshoot and to identify trends, usage, activity patterns and areas for integration and improvement of the Platform.

To market, promote and drive engagement – If you give your consent, we use your Information to send newsletters, surveys, offers and promotional materials that may be of interest to you and tailored to your individual health and wellness goals. You can opt out of receiving such messages from League by following the opt-out instructions in these messages. If you opt out, we may still send you non-commercial electronic messages, such as messages about your account or our ongoing business relations. Please note that League does not sell or share your Information to third parties for their marketing purposes.

For League Family – Your employer may offer League Family, which lets your dependents use the League Platform. If  this option is available, you can send your dependents (spouse, children, common-law partners) who are eighteen (18) years of age or older an email invitation to join the League platform and access our features. 

How League shares Information we collect

We may share your Information with third parties so we can provide our services to you. If we need to share your Information with third parties, we will limit the Information to the minimum amount necessary to ensure the provision and quality of the Services we offer you. We share your Information with third parties as follows:

Contractors – We may disclose your Personal Information with contractors that work on our behalf and assist us in providing and supporting the services we offer.

Third Party Providers – We share Information with third parties that help us operate, provide, improve, integrate, customize and support our Platform and Services we offer to you such as:

  • Cloud hosting services;
  • Customer service platform;
  • Credit card processing;
  • Health concierge;
  • Connector services and data integration.

If a Third Party Provider needs to access Information about you to perform services on our behalf, they do so under close instruction from us, including policies and procedures designed to protect your Information. Our Third Party Providers undergo a thorough security and privacy review as a part of the evaluation process and then regular SOC1, SOC2 and/or ISO/IEC 27001 audit reviews thereafter. In the event these audits have material findings that present risks to League or our clients, we work closely with the vendor to track their remediation efforts until the issue has been resolved.

Insurance Carriers – We’ll automatically feed your benefits elections and status/profile updates to your Insurance Carriers for faster, more accurate enrollment and to determine eligibility. When you reach out to us for support about your eligibility or coverage, we may share this Information with your Insurance Carriers on your behalf.

Your Employer – We may share Information with your employer in an anonymous and aggregated or group format only. Any data sharing practices going beyond anonymous, aggregated or group format need your explicit consent. Even with your consent, we will only share de-identifiable data with your Employer. We will use procedures compliant with applicable privacy laws and regulations to ensure that all identifiable data and dimensions have been removed from the data sets and reports provided to your Employer. Please note that your Employer may combine the information we provide with other data available to them and use the combined data at their discretion, including to evaluate the overall program, as well as to provide additional benefits, programs and services. Your Employer’s use of the data and reports are not controlled by us, and this Policy does not cover your Employer’s data use and sharing practices.

“Cleared for Workplace Module” – If your Employer offers the “Cleared for Workplace Module” as part of the Platform, your participation status will always be shared with them. None of your responses to individual questions in the module will ever be shared with your Employer. Only if you give your explicit consent to share the results of the module, your COVID-19 status and a recommendation for testing or self-isolation will be passed to your employer. No other health conditions or symptoms will be disclosed to your Employer. If your Employer is not using this service this does not apply to you.

It is Your Employer’s responsibility to comply with its own privacy policy and applicable laws. We encourage you to review your Employer’s data practices with your Human Resources team.

Service Providers – We may share your information with Service Providers you choose through the League Platform including our Lifemarket. When you book an appointment and buy a product through the Platform, we automatically provide your first and last name as well as a Service or product description to the Service Provider. We want everyone to feel safe and cared for when they visit League Lifemarket or use a Service Provider offered through the Platform. So before we admit any new Service Providers, we thoroughly review their practices to make sure they’re in line with our standards. We also regularly review our Service Providers to make sure they stay compliant.

Devices and Third Party Apps – You may choose to add new functionality and Information to your account by connecting Devices and Third Party Apps to your account. If you do, you may give these Devices and Third Party Apps access to your account and Information about you like your name and email address, and any content you choose to use in connection with those apps and devices. Device and Third Party App policies and procedures are not controlled by us, and this Policy does not cover how Devices and Third Party Apps use your Information. We encourage you to review the privacy policies of third parties before connecting to or using their applications or services to learn more about their privacy and information handling practices. If you object to Information about you being shared with these third parties, please disable the device or app within your League account settings.

Law Enforcement, Governmental Authorities and Agencies – We may disclose information we have collected from and about you – including Personal Information – if we believe in good faith that it’s necessary to:

  • comply with relevant laws or to respond to subpoenas or warrants served toon us;
  • enforce our Terms of Service and Privacy Policy;
  • protect and defend our rights or property, our Customers, our Suppliers, or other third parties; or
  • in certain situations, abide by lawful requests by public authorities to disclosure of Personal Information, including to meet national security or law enforcement requirements.

Merger, Sales and Acquisition – In the event that we (a) undergo reorganization or (b) that League is sold to a third party, any Personal Information we hold about you may be transferred to the re-organized entity or third party, in accordance with applicable laws and regulations. If an acquisition like this occurs, the new entity will continue to use your Personal Information within the limits of this Policy, to continue delivering your service.

For League Family – If you are the primary account holder and have dependents using League Family, all of the following will be private and not accessible by your dependents without your explicit consent:

  • Usage of your benefits
  • Usage of Health Programs and third-party providers through the League platform
  • Details of your Spending Account transactions
  • Claims submitted to League 
  • Chats (usage and records) with League’s Care Team 
  • League Rewards Points
  • League Credit
  • Health journey and goals, including Health Profile and recommendations
  • Lifemarket purchases

Aggregated/non-personal data may be shared between accounts (such as the balance of a shared Spending Account, deductibles and out-of-pocket spending).

Is my Personal Information and other data secure?

At League, we take security and privacy very seriously. We’re committed to protecting your data, and our highest priority is keeping your sensitive information – especially your personal health information – safe. We follow strict security and compliance standards not only because we need to meet specific regulations, but because we consider it one of the most important things we can do for you.

Security is at the heart of every process and every technology we use across all our teams at League. The League Platform is regularly audited to make sure it complies with security, availability and confidentiality requirements for managing client data.

Communication with League should always be done through the League Platform where the information is encrypted. While League makes every effort to secure all communications within our control and in our Platform, please be advised that no method of delivery is absolutely secure and any communication of Personal Information may be accidentally or deliberately intercepted by third parties. No company, including League, can fully eliminate security risks associated with your Information. While we strive to protect your Information, we cannot guarantee its security.

To help protect yourself and your Information, choose a unique password for our Platforms and do not use a password that you would use on any other website or online service. You are responsible for the security of your Information that you transmit to us or view, download or otherwise access when using public or otherwise unsecured networks. If you use a mobile device to accept your authorization code, you should have the ability to remotely wipe the phone in the event that your device is lost or stolen.

Who at League has access to my Information?

Your Personal Information is maintained on League’s infrastructure or those of third-party providers. For that reason, League employees and contractors have access to your Information so we can provide you with quality services, including Member support and Health Concierge services. Our employees and contractors are obligated to respect the confidentiality of your Personal Information and are only authorized to access your Information as necessary to provide you with Services or support.

In the event that we (a) undergo reorganization or (b) that League is sold to a third party, any Personal Information we hold about you may be transferred to the re-organized entity or third party, in accordance with applicable laws and regulations. In the event of an acquisition, the new entity will continue to use your Personal Information within the limits of this Policy, to continue delivering your service.

Can I correct or update my Information?

Yes. If your Personal Information changes over time or you realize your Information is outdated or incorrect, you have a right to be able to update or correct it. You may update or correct the Information by changing it right in the Platform. If you aren’t able to update or correct the Information right in your account, you can reach out to us through the Chat function in the Platform. You can also contact us at help@league.com to request that we update or correct the Information for you. We will respond to your request within a reasonable timeframe.

Can I find out what Information League has collected about me?

Yes. All our Members, no matter where they live, except in specific circumstances identified by local laws, have a legal right to access the Information we have collected about them and an account of its use and disclosure. You can request a copy of all the Information and data we hold about you. We’ll give you a copy of the data in a standard format through a secure channel. To make this request, reach out to us at help@league.com. We will respond to your request within a reasonable timeframe.

For California residents – In accordance with the California Civil Code Section 1798.83, you may contact us at the address below to request certain information about the disclosure of Personal Information to third parties for their direct marketing purposes.

Can my Information be deleted?

Please note that we may not be able to delete your Information without also deleting your Member account. You may terminate your account at any time by submitting a deletion request to help@league.com. Once your account is terminated, you will no longer be able to access or use your health and wellness benefit accounts offered through the League Platform as well as Programs and Services.

Please note that we will only retain your Personal Information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements. To figure out the appropriate retention period for Personal Information, we consider the amount, nature and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, the applicable legal requirements, and regulatory retention periods.

Can I request that League restrict processing for some of my Information?

Because of the type of Services we offer, we can’t accommodate requests to restrict the processing of certain sets of Information. You, however, will be able to limit the Information added to your profile based on your use of Services and participation in Programs, the Devices and Third Party Apps you connect to your account and the consent you provide for any data sharing practices. If you want us to stop processing parts of your Information, you can request that all data be deleted through the process above. You can also limit the Personal Information provided to us as you participate in the Services and programs offered to you.

If you have connected any Devices or Third Party Apps, you can manage the data sharing and processing setting for each of them through your League account.

If you’ve provided your consent for additional data sharing, you can withdraw your consent at any time. To do so, please reach out to us through the Chat function in the Platform or by contacting help@league.com.

If you provide your consent, we use your Information to send newsletters, surveys, offers and promotional materials that may be of interest to you and tailored to your individual health and wellness goals. You may opt out of receiving such messages from League by following the opt out instructions in these messages. If you opt out, we may still send you non-commercial electronic messages, such as messages about your account or our ongoing business relations.

Where is my Information being transferred?

League is headquartered in Canada, has an office in the United States, and uses Third Party Providers in other countries. Your Personal Information may be transferred to the Canada, United States or other locations outside of your state, province, country, or other governmental jurisdiction where the privacy laws may not be as protective as those in your jurisdiction. League takes appropriate steps to protect your privacy and implement reasonable security measures to protect your Personal Information in storage and transmission. We also enter into contracts with our Third Party Providers that require them to treat Personal Information in a way that’s consistent with this Policy.

I am using League Family – What do I need to know?

This is for individuals using League Family. You can expect the same level of privacy as the primary account holder as all information in this Privacy Policy applies to you, with the following differences:

  • You will not need to provide any information about your employment
  • You will not have the option to provide dependent information
  • All of the following will be private and inaccessible by the primary account holder or other dependents without your explicit consent:
    • Usage of your benefits
    • Usage of Health Programs and third-party providers through the League platform
    • Details of your Spending Account transactions
    • Claims submitted to League 
    • Chats (usage and records) with League’s Care Team  
    • League Rewards Points
    • League Credit
    • Health journey and goals, including Health Profile and recommendations
    • Lifemarket purchases
  • You will not be able to view any of the above information of the primary account holder or other dependents without their explicit consent
  • Aggregated/non-personal data may be shared between accounts with the primary account holder or other dependents (such as the balance of a shared Spending Account, deductibles and out-of-pocket spending)

All dependents using League Family must be eighteen (18) years of age or older.

I am an EU resident – What do I need to know?

This is for residents of the European Union (“EU”) including the European Economic Area (“EEA”) countries of Iceland, Liechtenstein, Norway and, where applicable, Switzerland. Our processing of Personal Information of Members who are in the EU is governed by the General Data Protection Regulation (“GDPR”). The GDPR requires us to give you certain information about your data and rights:

Personal information – References to “Personal Information” and “Information” in this Privacy Policy are equivalent to “personal data” governed by the GDPR.

Data Controller – League is the data controller of Personal Information provided to, or collected by or for, our Platform and Services. But we may act as a data processor on behalf of your employer for Personal Information that we process on their behalf when providing the Platform and Services.

Legal basis for processing – We only use your Information as permitted by law. We are required to inform you of the legal basis of our processing of your Personal Information, which are described in this Policy. If you have questions about the legal basis of how we process your Information, reach out to us at privacy@league.com.

Processing ActivityLegal Basis for Processing
Enrollment and decision support
Personalized digital wallet
Processing your claims
Customer Care services
Expert health and wellness guidanceThis processing is necessary to the fulfillment of our contracts with employers.
Creation of your personalized health profile
Health and wellness assessments
Processing your orders and to facilitate bookings and communications with a Service Provider
Providing the Platform and personalizing your experience
Safety, security and compliance
Research and development This processing is necessary to the legitimate interests of League
Marketing, promoting and driving engagement

Use for new purposes – We may use your Personal Information for reasons not described in this Policy where permitted by law and the reason is compatible with the purpose for which we collected it. If we need to use your Personal Information for an unrelated purpose, we will notify you and explain the legal basis.

Cross-Border Data Transfer – Whenever we transfer your personal information out of the EU to countries not deemed by the European Commission to provide an adequate level of protection, the transfer will be based on one of the following safeguards recognized by the European Commission as providing adequate protection for Personal Information:

Contracts approved by the European Commission which impose data protection obligations on the parties to the transfer. For details, see European Commission Model contracts for the transfer of Personal Information to third countries.

For transfers to Third Party Providers in the United States, ensuring they participate in the EU-US Privacy Shield Framework

Please reach out to us if you want more information on the specific mechanism we use when transferring your Personal Information out of the EU.

Your rights to access, correct, restrict or delete your Personal Information and object to processing – You have the right to request access to your Personal Information, to have your Information corrected, restricted or deleted, and to object to our processing of your Personal Information. You also have the right of data portability, which means that you can request that we provide you (or a third party you designate) with a transferable copy of the Personal Information that you have provided to us. Your rights may be subject to various limitations under the GDPR. If you wish to exercise any of these rights, or if you have any concerns about our processing of your Personal Information, please contact us in any of the ways listed in the section “Contact Us” below.

Right to Lodge a Complaint with a Supervisory Authority – You have the right to file a complaint about our processing of your Personal Information with your national (or in some countries, regional) data protection authority.The EU Commission has a list here: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

Privacy of Minors

Individuals under the age of eighteen (18) should not transfer any Personal Information to us. We will neither intentionally ask for Information of users under the age of eighteen, nor process their Personal Information. League Family can only be used by dependents who are eighteen (18) years of age or older.

Additional notice to residents of the United States: We do not intentionally collect or maintain Information from visitors of the website or Platform who are under thirteen (13) years old.

Dispute Resolution

If you believe that League has not adhered to this Privacy Policy, please contact League by email at privacy@league.com. We’ll do our best to make things right. If you feel that your complaint hasn’t been fully addressed, let us know and we’ll investigate further.

If you’d rather file an anonymous complaint, you can do so through our whistleblower hotline provided by an independent Third Party Provider. You always have the option to remain completely anonymous. Complaints can be made 24/7/365 through one of the following channels:

Phone – 1-866-921-6714 (toll free number in North America)
Web Portal – https://www.integritycounts.ca/org/league

For EU Residents – To lodge a complaint with a supervisory authority under the GDPR, please see “I am an EU resident – What do I need to know?” above.

Contact US

If you have questions or concerns about this Privacy Policy, please contact us at:

Attention: Privacy Officer – Information Security & Privacy
League, Inc.
225 King St W, Suite 800, Toronto, Ontario M5V3C6
privacy@league.com

Changes to This Privacy Policy

If this Privacy Policy changes, the revised policy will be posted online and if we make material changes, you may be notified by email. Your continued use of the Platform after the effective date constitutes your acceptance of the amended Privacy Policy. Any amended Privacy Policy supersedes all previous versions. Please check back periodically, and especially before you provide any personal information. This Privacy Policy was last updated on January 5th, 2021. You can find all versions of our Privacy Policy here.

Effective starting: January 5, 2021

What This Privacy Policy Covers

League Inc. (“us,”, “we,”, “our”, or “League”) is committed to protecting your data, and our highest priority is keeping your sensitive information—especially your personal health information—safe. In this policy we explain what data we collect about you and how we store, analyze and share the data through League’s website, mobile and web applications (together, the “League Platform” or “Platform”). This Privacy Policy (“Policy”) is intended to help you understand:

Nothing in this Policy limits your rights under applicable laws, including your ability, depending on your country of residence, to file a complaint with your local Data Protection Authority.

Please carefully read through this Policy. To join and enjoy League’s Platform and its Services, you are required to accept all terms of this Policy. By using the Platform, you are accepting the terms of this Privacy Policy and our Terms of Services, and you are consenting to our collection, use, disclosure and retention of your Information as described in this Privacy Policy. If you do not consent to the collection, use and disclosure of your information as described in this Policy, you will not be able to use the Platform.

Unless otherwise defined herein, capitalized terms shall have the meanings assigned to such terms set forth in the Terms of Service and which incorporate this Privacy Policy by reference.

Applicability of This Privacy Policy

This Privacy Policy is only applicable to the Platform and does not apply to any other website or service that you may be able to access through League’s Platform or any website or digital services of League’s business partners, each of which may have data collection, storage and use practices and policies that may differ from this Policy. We are not responsible for the actions or privacy practices of these third-party websites or services nor does it signify our endorsement of such websites, locations or its contents. Please consult those websites and services directly to understand their privacy practices. Your use of the League Platform is governed by this Privacy Policy and the Agreement (as the term “Agreement” is defined in our Terms of Services).

What Information does League collect about me?

We collect Information about you when you provide it to us, when you use our Platform and when other sources provide it to us, as described below. Please note that for the purpose of clarity and ease, we will refer to Personal Information or Information for all categories mentioned below throughout this Policy.

Personal Information you provide to us

Simply stated, Personal Information is any information about you as an identifiable individual. The information we may collect from you includes:

  • Your first and last name, home address and phone number;
  • Your gender and date of birth;
  • The email address you use to sign-in and communicate with us;
  • Other log-in information such as your password;
  • Information about your profession including your employee ID, income, role and employment status;
  • Your dependents (if any) and their information;
  • Information about services and products you buy or sign-up for through League’s Lifemarket;
  • Information about your participation and performance in Activities and Programs;
  • Health rewards that you can earn by participating in qualifying activities;
  • Any Information you provide to us while chatting and interacting with the League Concierge, a Lifemarket Service Provider or a Customer Care agent;
  • The comments and contributions you may make on the Platform;
  • Additional information you may provide as you submit queries and requests to us.

Health and Wellness Information (“Health Information”) is data related to your physical and mental health as well as medical history, including symptoms, diagnosis, procedures, outcomes and claims. When using League’s Platform you may provide certain health or health-related information to us. Health Information includes:

  • Insurance data such as insurance carrier, plan, group and member ID as well as claim information if you opt in to share this data with League;
  • Identifiers connected to your health benefits and group plan membership such as Social Security Numbers (U.S.) and Social Insurance Numbers (Canada);
  • Any Health Information you provide to us while chatting and interacting with the League Concierge, a Lifemarket Service Provider or a Customer Care agent;
  • Health information when you submit a claim towards your benefit spending accounts through the Platform;
  • Information about your health, fitness, nutrition and finance provided by you through Health Profile;
  • Information about health-related services and products you buy or sign-up for through League’s Lifemarket.

Payment Information is data related to your bank account, debit or credit card. We collect your bank account and billing information when you register for the Platform to process your spending account claims or for any payments through League’s Lifemarket. By linking your bank account to your League account, you authorize us to submit your Payment Information to the financial institution that will process your employee benefit payment.

If you provide us with your credit card information, this information is processed by our credit card payment processing partner. This partner collects your voluntarily provided payment information necessary to process your payment or claim. Such partner’s use and storage of information is governed by its applicable terms of service and privacy policy.

Personal Information we get from others

Employment and Benefit Information – We may also get Information about you from other sources. For example, we may get employment information from your Employer or Carrier to enroll you in your health benefits and our Platform. The data set may include your first and last name, employee ID, income, role, employment status and dependent information. The data set depends on what your employer shares with us. While you are a Member and use the Platform, we may receive additional employment or benefit information from your Employer or Carrier including claims data. We might add this Information to your account. Please note that we will only use and store the information necessary to enroll you in your benefits and our Platform and to provide you with personalized services through Health Profile and Programs.

Devices and Third Party Apps – As a Member you may be able to connect activity and health trackers (“Devices”) and third-party applications (“Third Party Apps”) to your account. These devices and applications can track a wide number of different aspects of your daily activities, including, among others, your daily steps and fitness activity as well as your nutrition. Depending on the brand and model of tracker you use, the data collected may vary. In general, these Devices and Third Party Apps have specific privacy policies that outline what data they collect. We strongly suggest you review the right privacy policy to know what specific data points your activity tracking device collects about you.

Social Media Account Information – If you create your League account using a social media account (e.g. Google, Facebook) we may also collect Information provided to us by that social media service. This Information may include your name, email address, language preference and profile picture.

Information we collect automatically when you use the Platform

Device and Connection Information – We collect information about your computer, phone, tablet or other devices you use to access the Platform. This Device and Connection Information includes your connection type and settings when you install, access, update or use our Platform. We also collect Information through your device about your operating system, browser type, IP address, URLs of referring/exit pages, device identifiers and crash data. We use this additional information to enhance the security controls around Platform access and resolve bugs and errors that may exist on the Platform. We use your IP address and/or country preference to approximate your location so we can provide you with a better Platform experience.

Cookies and Other Tracking Technologies – We collect information about you when you use our Platform, including browsing our websites and taking certain actions within the Platform. To do so we use cookies and other tracking technologies (e.g., web beacons, device identifiers and pixels) to provide functionality and to recognize you across our Platform. For more information, please see our Cookies and Tracking Notice, which includes information on how to control or opt out of these cookies and tracking technologies.

How does League collect my Information?

League receives employment information from your employer or insurance carrier so we can set up your profile and prepare your account for enrollment. After that, we collect your Information when you sign-up for League’s Platform and as you submit it through the use of the Platform and as provided by your employer or carrier.

Depending on the Services and integrations you participate in or enable and the Service being offered to you by your employer through the League Platform, we may collect and receive Personal Information through your use of the particular Services and integrations. These integrated services and solutions may have their own and separate consent process required prior to you using them with League.

How does League use my Information?

How we use the Information we collect depends in part on which Services are offered to you, which Services you use, how you use them and any preferences you have communicated to us. Below are the specific purposes for which we use the Information we collect about you.

For enrollment and decision support – We guide you every step of the way so you fully understand your options and choose the best coverage for your needs. To do so, we gather the Information we have received from your employer about you and apply eligibility rules to facilitate your enrollment into your health benefits as well as any other benefit spending accounts offered to you through your employer.

For a personalized digital wallet – We provide you with one easily-accessible place to manage your coverage, dependents and benefit spending accounts.

For processing your claims – If you are being offered additional benefit spending accounts by your employer through the League Platform, you can submit eligible claims online. In order to process these claims and reimburse your bank account, we process the claim information provided to us by you and use the Payment Information we have on file.

For Customer Care services – Through the Platform you have immediate live chat support for all your benefit-related questions. To answer your request and to provide you with personalized recommendations, our agents access your Personal Information on file and may ask you to provide us with additional Information. Additional Information requested or provided by you may contain Health Information.

For immediate, expert health and wellness guidance – We provide health and wellness-related guidance and navigational support through live chat with Health Concierge. To answer your request and to provide you with personalized guidance, League’s Concierges access your Personal Information on file and may ask you to give them additional information including Health Information.

For creation of your personalized health profile and programs – As a Member of League’s Platform you have access to a central place for your health information, personal progress on health and wellness programs, earned rewards and any Device and Third Party App integrations. League uses Personal Information and Health Information provided to us to help you understand your health risks and long-term outcomes and how you can use your benefits and programs to improve your overall health and wellbeing.

For health and wellness assessments – You may have access to League’s health assessment (“Health Profile”). Through a number of questions, the Health Profile assesses your wellbeing across a number of dimensions. You don’t have to complete the Health Profile if you don’t want to share this information with us.

For processing your orders and to facilitate bookings and communications with a Service Provider – Through League’s Lifemarket we provide you with offers and discounts on products and services that support better health, fitness and wellbeing. When you buy products or sign-up for services through the Lifemarket, we access your Personal Information including your benefit spending accounts and Payment Information. League needs access to this Information to process your order and payments and facilitate communication between you and the Service Provider.

For safety, security and compliance – We use information about you and your Platform use to identify you as a member of our Platform, verify accounts and activity, to monitor suspicious or fraudulent activity and to identify violations of Platform policies.

To provide the Platform and personalize your experience – We use Information about you to provide the Platform to you, to enhance the security controls around Platform access and resolve bugs and errors. We may also use your Information to verify your geographic location. We may use your geographic location data to personalize your experience in the Platform, to recommend content and to see whether the information you request is available in your location.

For research and development – We’re always looking for ways to make our Platform smarter, faster, secure, integrated and useful to you. We use collective learnings about how people use our Platform and feedback provided directly to us to troubleshoot and to identify trends, usage, activity patterns and areas for integration and improvement of the Platform.

To market, promote and drive engagement – If you give your consent, we use your Information to send newsletters, surveys, offers and promotional materials that may be of interest to you and tailored to your individual health and wellness goals. You can opt out of receiving such messages from League by following the opt-out instructions in these messages. If you opt out, we may still send you non-commercial electronic messages, such as messages about your account or our ongoing business relations. Please note that League does not sell or share your Information to third parties for their marketing purposes.

For League Family – Your employer may offer League Family, which lets your dependents use the League Platform. If  this option is available, you can send your dependents (spouse, children, common-law partners) who are eighteen (18) years of age or older an email invitation to join the League platform and access our features. 

How League shares Information we collect

We may share your Information with third parties so we can provide our services to you. If we need to share your Information with third parties, we will limit the Information to the minimum amount necessary to ensure the provision and quality of the Services we offer you. We share your Information with third parties as follows:

Contractors – We may disclose your Personal Information with contractors that work on our behalf and assist us in providing and supporting the services we offer.

Third Party Providers – We share Information with third parties that help us operate, provide, improve, integrate, customize and support our Platform and Services we offer to you such as:

  • Cloud hosting services;
  • Customer service platform;
  • Credit card processing;
  • Health concierge;
  • Connector services and data integration.

If a Third Party Provider needs to access Information about you to perform services on our behalf, they do so under close instruction from us, including policies and procedures designed to protect your Information. Our Third Party Providers undergo a thorough security and privacy review as a part of the evaluation process and then regular SOC1, SOC2 and/or ISO/IEC 27001 audit reviews thereafter. In the event these audits have material findings that present risks to League or our clients, we work closely with the vendor to track their remediation efforts until the issue has been resolved.

Insurance Carriers – We’ll automatically feed your benefits elections and status/profile updates to your Insurance Carriers for faster, more accurate enrollment and to determine eligibility. When you reach out to us for support about your eligibility or coverage, we may share this Information with your Insurance Carriers on your behalf.

Your Employer – We may share Information with your employer in an anonymous and aggregated or group format only. Any data sharing practices going beyond anonymous, aggregated or group format need your explicit consent. Even with your consent, we will only share de-identifiable data with your Employer. We will use procedures compliant with applicable privacy laws and regulations to ensure that all identifiable data and dimensions have been removed from the data sets and reports provided to your Employer. Please note that your Employer may combine the information we provide with other data available to them and use the combined data at their discretion, including to evaluate the overall program, as well as to provide additional benefits, programs and services. Your Employer’s use of the data and reports are not controlled by us, and this Policy does not cover your Employer’s data use and sharing practices.

“Cleared for Workplace Module” – If your Employer offers the “Cleared for Workplace Module” as part of the Platform, your participation status will always be shared with them. None of your responses to individual questions in the module will ever be shared with your Employer. Only if you give your explicit consent to share the results of the module, your COVID-19 status and a recommendation for testing or self-isolation will be passed to your employer. No other health conditions or symptoms will be disclosed to your Employer. If your Employer is not using this service this does not apply to you.

It is Your Employer’s responsibility to comply with its own privacy policy and applicable laws. We encourage you to review your Employer’s data practices with your Human Resources team.

Service Providers – We may share your information with Service Providers you choose through the League Platform including our Lifemarket. When you book an appointment and buy a product through the Platform, we automatically provide your first and last name as well as a Service or product description to the Service Provider. We want everyone to feel safe and cared for when they visit League Lifemarket or use a Service Provider offered through the Platform. So before we admit any new Service Providers, we thoroughly review their practices to make sure they’re in line with our standards. We also regularly review our Service Providers to make sure they stay compliant.

Devices and Third Party Apps – You may choose to add new functionality and Information to your account by connecting Devices and Third Party Apps to your account. If you do, you may give these Devices and Third Party Apps access to your account and Information about you like your name and email address, and any content you choose to use in connection with those apps and devices. Device and Third Party App policies and procedures are not controlled by us, and this Policy does not cover how Devices and Third Party Apps use your Information. We encourage you to review the privacy policies of third parties before connecting to or using their applications or services to learn more about their privacy and information handling practices. If you object to Information about you being shared with these third parties, please disable the device or app within your League account settings.

Law Enforcement, Governmental Authorities and Agencies – We may disclose information we have collected from and about you – including Personal Information – if we believe in good faith that it’s necessary to:

  • comply with relevant laws or to respond to subpoenas or warrants served toon us;
  • enforce our Terms of Service and Privacy Policy;
  • protect and defend our rights or property, our Customers, our Suppliers, or other third parties; or
  • in certain situations, abide by lawful requests by public authorities to disclosure of Personal Information, including to meet national security or law enforcement requirements.

Merger, Sales and Acquisition – In the event that we (a) undergo reorganization or (b) that League is sold to a third party, any Personal Information we hold about you may be transferred to the re-organized entity or third party, in accordance with applicable laws and regulations. If an acquisition like this occurs, the new entity will continue to use your Personal Information within the limits of this Policy, to continue delivering your service.

For League Family – If you are the primary account holder and have dependents using League Family, all of the following will be private and not accessible by your dependents without your explicit consent:

  • Usage of your benefits
  • Usage of Health Programs and third-party providers through the League platform
  • Details of your Spending Account transactions
  • Claims submitted to League 
  • Chats (usage and records) with League’s Care Team 
  • League Rewards Points
  • League Credit
  • Health journey and goals, including Health Profile and recommendations
  • Lifemarket purchases

Aggregated/non-personal data may be shared between accounts (such as the balance of a shared Spending Account, deductibles and out-of-pocket spending).

Is my Personal Information and other data secure?

At League, we take security and privacy very seriously. We’re committed to protecting your data, and our highest priority is keeping your sensitive information – especially your personal health information – safe. We follow strict security and compliance standards not only because we need to meet specific regulations, but because we consider it one of the most important things we can do for you.

Security is at the heart of every process and every technology we use across all our teams at League. The League Platform is regularly audited to make sure it complies with security, availability and confidentiality requirements for managing client data.

Communication with League should always be done through the League Platform where the information is encrypted. While League makes every effort to secure all communications within our control and in our Platform, please be advised that no method of delivery is absolutely secure and any communication of Personal Information may be accidentally or deliberately intercepted by third parties. No company, including League, can fully eliminate security risks associated with your Information. While we strive to protect your Information, we cannot guarantee its security.

To help protect yourself and your Information, choose a unique password for our Platforms and do not use a password that you would use on any other website or online service. You are responsible for the security of your Information that you transmit to us or view, download or otherwise access when using public or otherwise unsecured networks. If you use a mobile device to accept your authorization code, you should have the ability to remotely wipe the phone in the event that your device is lost or stolen.

Who at League has access to my Information?

Your Personal Information is maintained on League’s infrastructure or those of third-party providers. For that reason, League employees and contractors have access to your Information so we can provide you with quality services, including Member support and Health Concierge services. Our employees and contractors are obligated to respect the confidentiality of your Personal Information and are only authorized to access your Information as necessary to provide you with Services or support.

In the event that we (a) undergo reorganization or (b) that League is sold to a third party, any Personal Information we hold about you may be transferred to the re-organized entity or third party, in accordance with applicable laws and regulations. In the event of an acquisition, the new entity will continue to use your Personal Information within the limits of this Policy, to continue delivering your service.

Can I correct or update my Information?

Yes. If your Personal Information changes over time or you realize your Information is outdated or incorrect, you have a right to be able to update or correct it. You may update or correct the Information by changing it right in the Platform. If you aren’t able to update or correct the Information right in your account, you can reach out to us through the Chat function in the Platform. You can also contact us at help@league.com to request that we update or correct the Information for you. We will respond to your request within a reasonable timeframe.

Can I find out what Information League has collected about me?

Yes. All our Members, no matter where they live, except in specific circumstances identified by local laws, have a legal right to access the Information we have collected about them and an account of its use and disclosure. You can request a copy of all the Information and data we hold about you. We’ll give you a copy of the data in a standard format through a secure channel. To make this request, reach out to us at help@league.com. We will respond to your request within a reasonable timeframe.

For California residents – In accordance with the California Civil Code Section 1798.83, you may contact us at the address below to request certain information about the disclosure of Personal Information to third parties for their direct marketing purposes.

Can my Information be deleted?

Please note that we may not be able to delete your Information without also deleting your Member account. You may terminate your account at any time by submitting a deletion request to help@league.com. Once your account is terminated, you will no longer be able to access or use your health and wellness benefit accounts offered through the League Platform as well as Programs and Services.

Please note that we will only retain your Personal Information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements. To figure out the appropriate retention period for Personal Information, we consider the amount, nature and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, the applicable legal requirements, and regulatory retention periods.

Can I request that League restrict processing for some of my Information?

Because of the type of Services we offer, we can’t accommodate requests to restrict the processing of certain sets of Information. You, however, will be able to limit the Information added to your profile based on your use of Services and participation in Programs, the Devices and Third Party Apps you connect to your account and the consent you provide for any data sharing practices. If you want us to stop processing parts of your Information, you can request that all data be deleted through the process above. You can also limit the Personal Information provided to us as you participate in the Services and programs offered to you.

If you have connected any Devices or Third Party Apps, you can manage the data sharing and processing setting for each of them through your League account.

If you’ve provided your consent for additional data sharing, you can withdraw your consent at any time. To do so, please reach out to us through the Chat function in the Platform or by contacting help@league.com.

If you provide your consent, we use your Information to send newsletters, surveys, offers and promotional materials that may be of interest to you and tailored to your individual health and wellness goals. You may opt out of receiving such messages from League by following the opt out instructions in these messages. If you opt out, we may still send you non-commercial electronic messages, such as messages about your account or our ongoing business relations.

Where is my Information being transferred?

League is headquartered in Canada, has an office in the United States, and uses Third Party Providers in other countries. Your Personal Information may be transferred to the Canada, United States or other locations outside of your state, province, country, or other governmental jurisdiction where the privacy laws may not be as protective as those in your jurisdiction. League takes appropriate steps to protect your privacy and implement reasonable security measures to protect your Personal Information in storage and transmission. We also enter into contracts with our Third Party Providers that require them to treat Personal Information in a way that’s consistent with this Policy.

I am using League Family – What do I need to know?

This is for individuals using League Family. You can expect the same level of privacy as the primary account holder as all information in this Privacy Policy applies to you, with the following differences:

  • You will not need to provide any information about your employment
  • You will not have the option to provide dependent information
  • All of the following will be private and inaccessible by the primary account holder or other dependents without your explicit consent:
    • Usage of your benefits
    • Usage of Health Programs and third-party providers through the League platform
    • Details of your Spending Account transactions
    • Claims submitted to League 
    • Chats (usage and records) with League’s Care Team  
    • League Rewards Points
    • League Credit
    • Health journey and goals, including Health Profile and recommendations
    • Lifemarket purchases
  • You will not be able to view any of the above information of the primary account holder or other dependents without their explicit consent
  • Aggregated/non-personal data may be shared between accounts with the primary account holder or other dependents (such as the balance of a shared Spending Account, deductibles and out-of-pocket spending)

All dependents using League Family must be eighteen (18) years of age or older.

I am an EU resident – What do I need to know?

This is for residents of the European Union (“EU”) including the European Economic Area (“EEA”) countries of Iceland, Liechtenstein, Norway and, where applicable, Switzerland. Our processing of Personal Information of Members who are in the EU is governed by the General Data Protection Regulation (“GDPR”). The GDPR requires us to give you certain information about your data and rights:

Personal information – References to “Personal Information” and “Information” in this Privacy Policy are equivalent to “personal data” governed by the GDPR.

Data Controller – League is the data controller of Personal Information provided to, or collected by or for, our Platform and Services. But we may act as a data processor on behalf of your employer for Personal Information that we process on their behalf when providing the Platform and Services.

Legal basis for processing – We only use your Information as permitted by law. We are required to inform you of the legal basis of our processing of your Personal Information, which are described in this Policy. If you have questions about the legal basis of how we process your Information, reach out to us at privacy@league.com.

Processing ActivityLegal Basis for Processing
Enrollment and decision supportThis processing is necessary to the fulfillment of our contracts with employers.
Personalized digital wallet 
Processing your claims
Customer Care services
Expert health and wellness guidance
Creation of your personalized health profile
Health and wellness assessments
Processing your orders and to facilitate bookings and communications with a Service Provider
Providing the Platform and personalizing your experience
Safety, security and complianceThis processing is necessary to the legitimate interests of League
Research and development
Marketing, promoting and driving engagement

Use for new purposes – We may use your Personal Information for reasons not described in this Policy where permitted by law and the reason is compatible with the purpose for which we collected it. If we need to use your Personal Information for an unrelated purpose, we will notify you and explain the legal basis.

Cross-Border Data Transfer – Whenever we transfer your personal information out of the EU to countries not deemed by the European Commission to provide an adequate level of protection, the transfer will be based on one of the following safeguards recognized by the European Commission as providing adequate protection for Personal Information:

Contracts approved by the European Commission which impose data protection obligations on the parties to the transfer. For details, see European Commission Model contracts for the transfer of Personal Information to third countries.

For transfers to Third Party Providers in the United States, ensuring they participate in the EU-US Privacy Shield Framework

Please reach out to us if you want more information on the specific mechanism we use when transferring your Personal Information out of the EU.

Your rights to access, correct, restrict or delete your Personal Information and object to processing – You have the right to request access to your Personal Information, to have your Information corrected, restricted or deleted, and to object to our processing of your Personal Information. You also have the right of data portability, which means that you can request that we provide you (or a third party you designate) with a transferable copy of the Personal Information that you have provided to us. Your rights may be subject to various limitations under the GDPR. If you wish to exercise any of these rights, or if you have any concerns about our processing of your Personal Information, please contact us in any of the ways listed in the section “Contact Us” below.

Right to Lodge a Complaint with a Supervisory Authority – You have the right to file a complaint about our processing of your Personal Information with your national (or in some countries, regional) data protection authority.The EU Commission has a list here: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

Privacy of Minors

Individuals under the age of eighteen (18) should not transfer any Personal Information to us. We will neither intentionally ask for Information of users under the age of eighteen, nor process their Personal Information. League Family can only be used by dependents who are eighteen (18) years of age or older.

Additional notice to residents of the United States: We do not intentionally collect or maintain Information from visitors of the website or Platform who are under thirteen (13) years old.

Dispute Resolution

If you believe that League has not adhered to this Privacy Policy, please contact League by email at privacy@league.com. We’ll do our best to make things right. If you feel that your complaint hasn’t been fully addressed, let us know and we’ll investigate further.

If you’d rather file an anonymous complaint, you can do so through our whistleblower hotline provided by an independent Third Party Provider. You always have the option to remain completely anonymous. Complaints can be made 24/7/365 through one of the following channels:

Phone – 1-866-921-6714 (toll free number in North America)
Web Portal – https://www.integritycounts.ca/org/league

For EU Residents – To lodge a complaint with a supervisory authority under the GDPR, please see “I am an EU resident – What do I need to know?” above.

Contact US

If you have questions or concerns about this Privacy Policy, please contact us at:

Attention: Privacy Officer – Information Security & Privacy
League, Inc.
225 King St W, Suite 800, Toronto, Ontario M5V3C6
privacy@league.com

Changes to This Privacy Policy

If this Privacy Policy changes, the revised policy will be posted online and if we make material changes, you may be notified by email. Your continued use of the Platform after the effective date constitutes your acceptance of the amended Privacy Policy. Any amended Privacy Policy supersedes all previous versions. Please check back periodically, and especially before you provide any personal information. This Privacy Policy was last updated on January 5th, 2021. You can find all versions of our Privacy Policy here.

Effective starting: September 17, 2020

What This Privacy Policy Covers

League Inc. (“us,”, “we,”, “our”, or “League”) is committed to protecting your data, and our highest priority is keeping your sensitive information—especially your personal health information—safe. In this policy we explain what data we collect about you and how we store, analyze and share the data through League’s website, mobile and web applications (together, the “League Platform” or “Platform”). This Privacy Policy (“Policy”) is intended to help you understand:

Nothing in this Policy limits your rights under applicable laws, including your ability, depending on your country of residence, to file a complaint with your local Data Protection Authority.

Please carefully read through this Policy. To join and enjoy League’s Platform and its Services, you are required to accept all terms of this Policy. By using the Platform, you are accepting the terms of this Privacy Policy and our Terms of Services, and you are consenting to our collection, use, disclosure and retention of your Information as described in this Privacy Policy. If you do not consent to the collection, use and disclosure of your information as described in this Policy, you will not be able to use the Platform.

Unless otherwise defined herein, capitalized terms shall have the meanings assigned to such terms set forth in the Terms of Service and which incorporate this Privacy Policy by reference.

Applicability of This Privacy Policy

This Privacy Policy is only applicable to the Platform and does not apply to any other website or service that you may be able to access through League’s Platform or any website or digital services of League’s business partners, each of which may have data collection, storage and use practices and policies that may differ from this Policy. We are not responsible for the actions or privacy practices of these third-party websites or services nor does it signify our endorsement of such websites, locations or its contents. Please consult those websites and services directly to understand their privacy practices. Your use of the League Platform is governed by this Privacy Policy and the Agreement (as the term “Agreement” is defined in our Terms of Services).

What Information does League collect about me?

We collect Information about you when you provide it to us, when you use our Platform and when other sources provide it to us, as described below. Please note that for the purpose of clarity and ease, we will refer to Personal Information or Information for all categories mentioned below throughout this Policy.

Personal Information you provide to us

Simply stated, Personal Information is any information about you as an identifiable individual. The Member Information we may collect from you includes:

  • Your first and last name, home address and phone number;
  • Your gender and date of birth;
  • The email address you use to sign-in and communicate with us;
  • Other log-in information such as your password;
  • Information about your profession including your employee ID, income, role and employment status;
  • Your dependents (if any) and their information;
  • Information about services and products you buy or sign-up for through League’s Marketplace;
  • Information about your participation and performance in Activities and Programs;
  • Health rewards that you can earn by participating in qualifying activities;
  • Any Information you provide to us while chatting and interacting with the League Concierge, a Marketplace Service Provider or a Customer Care agent;
  • The comments and contributions you may make on the Platform;
  • Additional information you may provide as you submit queries and requests to us.

Health and Wellness Information (“Health Information”) is data related to your physical and mental health as well as medical history, including symptoms, diagnosis, procedures and outcomes. When using League’s Platform you may provide certain health or health-related information to us. Health Information includes:

  • Insurance data such as insurance carrier, plan, group and member ID as well as claim information if you opt in to share this data with League;
  • Identifiers connected to your health benefits and group plan membership such as Social Security Numbers (U.S.) and Social Insurance Numbers (Canada);
  • Any Health Information you provide to us while chatting and interacting with the League Concierge, a Marketplace Service Provider or a Customer Care agent;
  • Health information when you submit a claim towards your benefit spending accounts through the Platform;
  • Information about your health, fitness, nutrition and finance provided by you through Health Profile;
  • Information about health-related services and products you buy or sign-up for through League’s Marketplace.

Payment Information is data related to your bank account, debit or credit card. We collect your bank account and billing information when you register for the Platform to process your spending account claims or for any payments through League’s Marketplace. By linking your bank account to your League account, you authorize us to submit your Payment Information to the financial institution that will process your employee benefit payment.

If you provide us with your credit card information, this information is processed by our credit card payment processing partner. This partner collects your voluntarily provided payment information necessary to process your payment or claim. Such partner’s use and storage of information is governed by its applicable terms of service and privacy policy.

Personal Information we get from others

Employment and Benefit Information – We may also get Information about you from other sources. For example, we may get employment information from your Employer or Carrier to enroll you in your health benefits and our Platform. The data set may include your first and last name, employee ID, income, role, employment status and dependent information. The data set depends on what your employer shares with us. While you are a Member and use the Platform, we may receive additional employment or benefit information from your Employer or Carrier. We might add this Information to your account. Please note that we will only use and store the information necessary to enroll you in your benefits and our Platform.

Devices and Third Party Apps – As a Member you may be able to connect activity and health trackers (“Devices”) and third-party applications (“Third Party Apps”) to your account. These devices and applications can track a wide number of different aspects of your daily activities, including, among others, your daily steps and fitness activity as well as your nutrition. Depending on the brand and model of tracker you use, the data collected may vary. In general, these Devices and Third Party Apps have specific privacy policies that outline what data they collect. We strongly suggest you review the right privacy policy to know what specific data points your activity tracking device collects about you.

Social Media Account Information – If you create your League account using a social media account (e.g. Google, Facebook) we may also collect Information provided to us by that social media service. This Information may include your name, email address, language preference and profile picture.

Information we collect automatically when you use the Platform

Device and Connection Information – We collect information about your computer, phone, tablet or other devices you use to access the Platform. This Device and Connection Information includes your connection type and settings when you install, access, update or use our Platform. We also collect Information through your device about your operating system, browser type, IP address, URLs of referring/exit pages, device identifiers and crash data. We use this additional information to enhance the security controls around Platform access and resolve bugs and errors that may exist on the Platform. We use your IP address and/or country preference to approximate your location so we can provide you with a better Platform experience.

Cookies and Other Tracking Technologies – We collect information about you when you use our Platform, including browsing our websites and taking certain actions within the Platform. To do so we use cookies and other tracking technologies (e.g., web beacons, device identifiers and pixels) to provide functionality and to recognize you across our Platform. For more information, please see our Cookies and Tracking Notice, which includes information on how to control or opt out of these cookies and tracking technologies.

How does League collect my Information?

League receives employment information from your employer or insurance carrier so we can set up your profile and prepare your account for enrollment. After that, we collect your Information when you sign-up for League’s Platform and as you submit it through the use of the Platform.

Depending on the Services and integrations you participate in or enable and the Service being offered to you by your employer through the League Platform, we may collect Personal Information through your use of the particular Services and integrations. These integrated services and solutions may have their own and separate consent process required prior to you using them with League.

How does League use my Information?

How we use the Information we collect depends in part on which Services are offered to you, which Services you use, how you use them and any preferences you have communicated to us. Below are the specific purposes for which we use the Information we collect about you.

For enrollment and decision support – We guide you every step of the way so you fully understand your options and choose the best coverage for your needs. To do so, we gather the Information we have received from your employer about you and apply eligibility rules to facilitate your enrollment into your health benefits as well as any other benefit spending accounts offered to you through your employer.

For a personalized digital wallet – We provide you with one easily-accessible place to manage your coverage, dependents and benefit spending accounts.

For processing your claims – If you are being offered additional benefit spending accounts by your employer through the League Platform, you can submit eligible claims online. In order to process these claims and reimburse your bank account, we process the claim information provided to us by you and use the Payment Information we have on file.

For Customer Care services – Through the Platform you have immediate live chat support for all your benefit-related questions. To answer your request and to provide you with personalized recommendations, our agents access your Personal Information on file and may ask you to provide us with additional Information. Additional Information requested or provided by you may contain Health Information.

For immediate, expert health and wellness guidance – We provide health and wellness-related guidance and navigational support through live chat with Health Concierge. To answer your request and to provide you with personalized guidance, League’s Concierges access your Personal Information on file and may ask you to give them additional information including Health Information.

For creation of your personalized health profile – As a Member of League’s Platform you have access to a central place for your health information, personal progress on health and wellness programs, earned rewards and any Device and Third Party App integrations. League uses Personal Information and Health Information you provided to us to help you understand your health risks and long-term outcomes and how you can use your benefits and programs to improve your overall health and wellbeing.

For health and wellness assessments – You may have access to League’s health assessment (“Health Profile”). Through a number of questions, the Health Profile assesses your wellbeing across a number of dimensions. You don’t have to complete the Health Profile if you don’t want to share this information with us.

For processing your orders and to facilitate bookings and communications with a Service Provider – Through League’s Marketplace we provide you with offers and discounts on products and services that support better health, fitness and wellbeing. When you buy products or sign-up for services through the Marketplace, we access your Personal Information including your benefit spending accounts and Payment Information. League needs access to this Information to process your order and payments and facilitate communication between you and the Service Provider.

For safety, security and compliance – We use information about you and your Platform use to identify you as a member of our Platform, verify accounts and activity, to monitor suspicious or fraudulent activity and to identify violations of Platform policies.

To provide the Platform and personalize your experience – We use Information about you to provide the Platform to you, to enhance the security controls around Platform access and resolve bugs and errors. We may also use your Information to verify your geographic location. We may use your geographic location data to personalize your experience in the Platform, to recommend content and to see whether the information you request is available in your location.

For research and development – We’re always looking for ways to make our Platform smarter, faster, secure, integrated and useful to you. We use collective learnings about how people use our Platform and feedback provided directly to us to troubleshoot and to identify trends, usage, activity patterns and areas for integration and improvement of the Platform.

To market, promote and drive engagement – If you give your consent, we use your Information to send newsletters, surveys, offers and promotional materials that may be of interest to you and tailored to your individual health and wellness goals. You can opt out of receiving such messages from League by following the opt-out instructions in these messages. If you opt out, we may still send you non-commercial electronic messages, such as messages about your account or our ongoing business relations. Please note that League does not sell or share your Information to third parties for their marketing purposes.

How League shares Information we collect

We may share your Information with third parties so we can provide our services to you. If we need to share your Information with third parties, we will limit the Information to the minimum amount necessary to ensure the provision and quality of the Services we offer you. We share your Information with third parties as follows:

Contractors – We may disclose your Personal Information with contractors that work on our behalf and assist us in providing and supporting the services we offer.

Third Party Providers – We share Information with third parties that help us operate, provide, improve, integrate, customize and support our Platform and Services we offer to you such as:

  • Cloud hosting services;
  • Customer service platform;
  • Credit card processing;
  • Health concierge;
  • Connector services and data integration.

If a Third Party Provider needs to access Information about you to perform services on our behalf, they do so under close instruction from us, including policies and procedures designed to protect your Information. Our Third Party Providers undergo a thorough security and privacy review as a part of the evaluation process and then regular SOC1, SOC2 and/or ISO/IEC 27001 audit reviews thereafter. In the event these audits have material findings that present risks to League or our clients, we work closely with the vendor to track their remediation efforts until the issue has been resolved.

Insurance Carriers – We’ll automatically feed your benefits elections and status/profile updates to your Insurance Carriers for faster, more accurate enrollment and to determine eligibility. When you reach out to us for support about your eligibility or coverage, we may share this Information with your Insurance Carriers on your behalf.

Your Employer – We may share Information with your employer in an anonymous and aggregated or group format only. Any data sharing practices going beyond anonymous, aggregated or group format need your explicit consent. Even with your consent, we will only share de-identifiable data with your Employer. We will use procedures compliant with applicable privacy laws and regulations to ensure that all identifiable data and dimensions have been removed from the data sets and reports provided to your Employer. Please note that your Employer may combine the information we provide with other data available to them and use the combined data at their discretion, including to evaluate the overall program, as well as to provide additional benefits, programs and services. Your Employer’s use of the data and reports are not controlled by us, and this Policy does not cover your Employer’s data use and sharing practices. It is Your Employer’s responsibility to comply with its own privacy policy and applicable laws. We encourage you to review your Employer’s data practices with your Human Resources team.

Service Providers – We may share your information with Service Providers you choose through the League Platform including our Marketplace. When you book an appointment and buy a product through the Platform, we automatically provide your first and last name as well as a Service or product description to the Service Provider. We want everyone to feel safe and cared for when they visit League Marketplace or use a Service Provider offered through the Platform. So before we admit any new Service Providers, we thoroughly review their practices to make sure they’re in line with our standards. We also regularly review our Service Providers to make sure they stay compliant.

Devices and Third Party Apps – You may choose to add new functionality and Information to your account by connecting Devices and Third Party Apps to your account. If you do, you may give these Devices and Third Party Apps access to your account and Information about you like your name and email address, and any content you choose to use in connection with those apps and devices. Device and Third Party App policies and procedures are not controlled by us, and this Policy does not cover how Devices and Third Party Apps use your Information. We encourage you to review the privacy policies of third parties before connecting to or using their applications or services to learn more about their privacy and information handling practices. If you object to Information about you being shared with these third parties, please disable the device or app within your League account settings.

Law Enforcement, Governmental Authorities and Agencies – We may disclose information we have collected from and about you – including Personal Information – if we believe in good faith that it’s necessary to:

  • comply with relevant laws or to respond to subpoenas or warrants served toon us;
  • enforce our Terms of Service and Privacy Policy;
  • protect and defend our rights or property, our Customers, our Suppliers, or other third parties; or
  • in certain situations, abide by lawful requests by public authorities to disclosure of Personal Information, including to meet national security or law enforcement requirements.

Merger, Sales and Acquisition – In the event that we (a) undergo reorganization or (b) that League is sold to a third party, any Personal Information we hold about you may be transferred to the re-organized entity or third party, in accordance with applicable laws and regulations. If an acquisition like this occurs, the new entity will continue to use your Personal Information within the limits of this Policy, to continue delivering your service.

Is my Personal Information and other data secure?

At League, we take security and privacy very seriously. We’re committed to protecting your data, and our highest priority is keeping your sensitive information – especially your personal health information – safe. We follow strict security and compliance standards not only because we need to meet specific regulations, but because we consider it one of the most important things we can do for you.

Security is at the heart of every process and every technology we use across all our teams at League. The League Platform is regularly audited to make sure it complies with security, availability and confidentiality requirements for managing client data.

Communication with League should always be done through the League Platform where the information is encrypted. While League makes every effort to secure all communications within our control and in our Platform, please be advised that no method of delivery is absolutely secure and any communication of Personal Information may be accidentally or deliberately intercepted by third parties. No company, including League, can fully eliminate security risks associated with your Information. While we strive to protect your Information, we cannot guarantee its security.

To help protect yourself and your Information, choose a unique password for our Platforms and do not use a password that you would use on any other website or online service. You are responsible for the security of your Information that you transmit to us or view, download or otherwise access when using public or otherwise unsecured networks. If you use a mobile device to accept your authorization code, you should have the ability to remotely wipe the phone in the event that your device is lost or stolen.

Who at League has access to my Information?

Your Personal Information is maintained on League’s infrastructure or those of third-party providers. For that reason, League employees and contractors have access to your Information so we can provide you with quality services, including Member support and Health Concierge services. Our employees and contractors are obligated to respect the confidentiality of your Personal Information and are only authorized to access your Information as necessary to provide you with Services or support.

In the event that we (a) undergo reorganization or (b) that League is sold to a third party, any Personal Information we hold about you may be transferred to the re-organized entity or third party, in accordance with applicable laws and regulations. In the event of an acquisition, the new entity will continue to use your Personal Information within the limits of this Policy, to continue delivering your service.

Can I correct or update my Information?

Yes. If your Personal Information changes over time or you realize your Information is outdated or incorrect, you have a right to be able to update or correct it. You may update or correct the Information by changing it right in the Platform. If you aren’t able to update or correct the Information right in your account, you can reach out to us through the Chat function in the Platform. You can also contact us at help@league.com to request that we update or correct the Information for you. We will respond to your request within a reasonable timeframe.

Can I find out what Information League has collected about me?

Yes. All our Members, no matter where they live, except in specific circumstances identified by local laws, have a legal right to access the Information we have collected about them and an account of its use and disclosure. You can request a copy of all the Information and data we hold about you. We’ll give you a copy of the data in a standard format through a secure channel. To make this request, reach out to us at help@league.com. We will respond to your request within a reasonable timeframe.

For California residents – In accordance with the California Civil Code Section 1798.83, you may contact us at the address below to request certain information about the disclosure of Personal Information to third parties for their direct marketing purposes.

Can my Information be deleted?

Please note that we may not be able to delete your Information without also deleting your Member account. You may terminate your account at any time by submitting a deletion request to help@league.com. Once your account is terminated, you will no longer be able to access or use your health and wellness benefit accounts offered through the League Platform as well as Programs and Services.

Please note that we will only retain your Personal Information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements. To figure out the appropriate retention period for Personal Information, we consider the amount, nature and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, the applicable legal requirements, and regulatory retention periods.

Can I request that League restrict processing for some of my Information?

Because of the type of Services we offer, we can’t accommodate requests to restrict the processing of certain sets of Information. You, however, will be able to limit the Information added to your profile based on your use of Services and participation in Programs, the Devices and Third Party Apps you connect to your account and the consent you provide for any data sharing practices. If you want us to stop processing parts of your Information, you can request that all data be deleted through the process above. You can also limit the Personal Information provided to us as you participate in the Services and programs offered to you.

If you have connected any Devices or Third Party Apps, you can manage the data sharing and processing setting for each of them through your League account.

If you’ve provided your consent for additional data sharing, you can withdraw your consent at any time. To do so, please reach out to us through the Chat function in the Platform or by contacting help@league.com.

If you provide your consent, we use your Information to send newsletters, surveys, offers and promotional materials that may be of interest to you and tailored to your individual health and wellness goals. You may opt out of receiving such messages from League by following the opt out instructions in these messages. If you opt out, we may still send you non-commercial electronic messages, such as messages about your account or our ongoing business relations.

Where is my Information being transferred?

League is headquartered in Canada, has an office in the United States, and uses Third Party Providers in other countries. Your Personal Information may be transferred to the United States or other locations outside of your state, province, country, or other governmental jurisdiction where the privacy laws may not be as protective as those in your jurisdiction. League takes appropriate steps to protect your privacy and implement reasonable security measures to protect your Personal Information in storage and transmission. We also enter into contracts with our Third Party Providers that require them to treat Personal Information in a way that’s consistent with this Policy.

I am an EU resident – What do I need to know?

This is for residents of the European Union (“EU”) including the European Economic Area (“EEA”) countries of Iceland, Liechtenstein, Norway and, where applicable, Switzerland. Our processing of Personal Information of Members who are in the EU is governed by the General Data Protection Regulation (“GDPR”). The GDPR requires us to give you certain information about your data and rights:

Personal information – References to “Personal Information” and “Information” in this Privacy Policy are equivalent to “personal data” governed by the GDPR.

Data Controller – League is the data controller of Personal Information provided to, or collected by or for, our Platform and Services. But we may act as a data processor on behalf of your employer for Personal Information that we process on their behalf when providing the Platform and Services.

Legal basis for processing – We only use your Information as permitted by law. We are required to inform you of the legal basis of our processing of your Personal Information, which are described in this Policy. If you have questions about the legal basis of how we process your Information, reach out to us at privacy@league.com.

Processing ActivityLegal Basis for Processing
Enrollment and decision supportThis processing is necessary to the fulfillment of our contracts with employers.
Personalized digital wallet 
Processing your claims
Customer Care services
Expert health and wellness guidance
Creation of your personalized health profile
Health and wellness assessments
Processing your orders and to facilitate bookings and communications with a Service Provider
Providing the Platform and personalizing your experience
Safety, security and complianceThis processing is necessary to the legitimate interests of League
Research and development
Marketing, promoting and driving engagement

Use for new purposes – We may use your Personal Information for reasons not described in this Policy where permitted by law and the reason is compatible with the purpose for which we collected it. If we need to use your Personal Information for an unrelated purpose, we will notify you and explain the legal basis.

Cross-Border Data Transfer – Whenever we transfer your personal information out of the EU to countries not deemed by the European Commission to provide an adequate level of protection, the transfer will be based on one of the following safeguards recognized by the European Commission as providing adequate protection for Personal Information:

Contracts approved by the European Commission which impose data protection obligations on the parties to the transfer. For details, see European Commission Model contracts for the transfer of Personal Information to third countries.

For transfers to Third Party Providers in the United States, ensuring they participate in the EU-US Privacy Shield Framework

Please reach out to us if you want more information on the specific mechanism we use when transferring your Personal Information out of the EU.

Your rights to access, correct, restrict or delete your Personal Information and object to processing – You have the right to request access to your Personal Information, to have your Information corrected, restricted or deleted, and to object to our processing of your Personal Information. You also have the right of data portability, which means that you can request that we provide you (or a third party you designate) with a transferable copy of the Personal Information that you have provided to us. Your rights may be subject to various limitations under the GDPR. If you wish to exercise any of these rights, or if you have any concerns about our processing of your Personal Information, please contact us in any of the ways listed in the section “Contact Us” below.

Right to Lodge a Complaint with a Supervisory Authority – You have the right to file a complaint about our processing of your Personal Information with your national (or in some countries, regional) data protection authority.The EU Commission has a list here: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

Privacy of Minors

Individuals under the age of eighteen (18) should not transfer any Personal Information to us. We will neither intentionally ask for Information of users under the age of eighteen, nor process their Personal Information. League Family can only be used by dependents who are eighteen (18) years of age or older.

Additional notice to residents of the United States: We do not intentionally collect or maintain Information from visitors of the website or Platform who are under thirteen (13) years old.

Dispute Resolution

If you believe that League has not adhered to this Privacy Policy, please contact League by email at privacy@league.com. We’ll do our best to make things right. If you feel that your complaint hasn’t been fully addressed, let us know and we’ll investigate further.

If you’d rather file an anonymous complaint, you can do so through our whistleblower hotline provided by an independent Third Party Provider. You always have the option to remain completely anonymous. Complaints can be made 24/7/365 through one of the following channels:

Phone – 1-866-921-6714 (toll free number in North America)
Web Portal – https://www.integritycounts.ca/org/league

For EU Residents – To lodge a complaint with a supervisory authority under the GDPR, please see “I am an EU resident – What do I need to know?” above.

Contact US

If you have questions or concerns about this Privacy Policy, please contact us at:

Attention: Privacy Officer – Information Security & Privacy
League, Inc.
225 King St W, Suite 800, Toronto, Ontario M5V3C6
privacy@league.com

Changes to This Privacy Policy

If this Privacy Policy changes, the revised policy will be posted online and if we make material changes, you may be notified by email. Your continued use of the Platform after the effective date constitutes your acceptance of the amended Privacy Policy. Any amended Privacy Policy supersedes all previous versions. Please check back periodically, and especially before you provide any personal information. This Privacy Policy was last updated on April 14, 2020. You can find all versions of our Privacy Policy here.

Effective starting: September 17, 2020

What This Privacy Policy Covers

League Inc. (“us,”, “we,”, “our”, or “League”) is committed to protecting your data, and our highest priority is keeping your sensitive information—especially your personal health information—safe. In this policy we explain what data we collect about you and how we store, analyze and share the data through League’s website, mobile and web applications (together, the “League Platform” or “Platform”). This Privacy Policy (“Policy”) is intended to help you understand:

Nothing in this Policy limits your rights under applicable laws, including your ability, depending on your country of residence, to file a complaint with your local Data Protection Authority.

Please carefully read through this Policy. To join and enjoy League’s Platform and its Services, you are required to accept all terms of this Policy. By using the Platform, you are accepting the terms of this Privacy Policy and our Terms of Services, and you are consenting to our collection, use, disclosure and retention of your Information as described in this Privacy Policy. If you do not consent to the collection, use and disclosure of your information as described in this Policy, you will not be able to use the Platform.

Unless otherwise defined herein, capitalized terms shall have the meanings assigned to such terms set forth in the Terms of Service and which incorporate this Privacy Policy by reference.

Applicability of This Privacy Policy

This Privacy Policy is only applicable to the Platform and does not apply to any other website or service that you may be able to access through League’s Platform or any website or digital services of League’s business partners, each of which may have data collection, storage and use practices and policies that may differ from this Policy. We are not responsible for the actions or privacy practices of these third-party websites or services nor does it signify our endorsement of such websites, locations or its contents. Please consult those websites and services directly to understand their privacy practices. Your use of the League Platform is governed by this Privacy Policy and the Agreement (as the term “Agreement” is defined in our Terms of Services).

What Information does League collect about me?

We collect Information about you when you provide it to us, when you use our Platform and when other sources provide it to us, as described below. Please note that for the purpose of clarity and ease, we will refer to Personal Information or Information for all categories mentioned below throughout this Policy.

Personal Information you provide to us

Simply stated, Personal Information is any information about you as an identifiable individual. The Member Information we may collect from you includes:

  • Your first and last name, home address and phone number;
  • Your gender and date of birth;
  • The email address you use to sign-in and communicate with us;
  • Other log-in information such as your password;
  • Information about your profession including your employee ID, income, role and employment status;
  • Your dependents (if any) and their information;
  • Information about services and products you buy or sign-up for through League’s Marketplace;
  • Information about your participation and performance in Activities and Programs;
  • Health rewards that you can earn by participating in qualifying activities;
  • Any Information you provide to us while chatting and interacting with the League Concierge, a Marketplace Service Provider or a Customer Care agent;
  • The comments and contributions you may make on the Platform;
  • Additional information you may provide as you submit queries and requests to us.

Health and Wellness Information (“Health Information”) is data related to your physical and mental health as well as medical history, including symptoms, diagnosis, procedures and outcomes. When using League’s Platform you may provide certain health or health-related information to us. Health Information includes:

  • Insurance data such as insurance carrier, plan, group and member ID as well as claim information if you opt in to share this data with League;
  • Identifiers connected to your health benefits and group plan membership such as Social Security Numbers (U.S.) and Social Insurance Numbers (Canada);
  • Any Health Information you provide to us while chatting and interacting with the League Concierge, a Marketplace Service Provider or a Customer Care agent;
  • Health information when you submit a claim towards your benefit spending accounts through the Platform;
  • Information about your health, fitness, nutrition and finance provided by you through Health Profile;
  • Information about health-related services and products you buy or sign-up for through League’s Marketplace.

Payment Information is data related to your bank account, debit or credit card. We collect your bank account and billing information when you register for the Platform to process your spending account claims or for any payments through League’s Marketplace. By linking your bank account to your League account, you authorize us to submit your Payment Information to the financial institution that will process your employee benefit payment.

If you provide us with your credit card information, this information is processed by our credit card payment processing partner. This partner collects your voluntarily provided payment information necessary to process your payment or claim. Such partner’s use and storage of information is governed by its applicable terms of service and privacy policy.

Personal Information we get from others

Employment and Benefit Information – We may also get Information about you from other sources. For example, we may get employment information from your Employer or Carrier to enroll you in your health benefits and our Platform. The data set may include your first and last name, employee ID, income, role, employment status and dependent information. The data set depends on what your employer shares with us. While you are a Member and use the Platform, we may receive additional employment or benefit information from your Employer or Carrier. We might add this Information to your account. Please note that we will only use and store the information necessary to enroll you in your benefits and our Platform.

Devices and Third Party Apps – As a Member you may be able to connect activity and health trackers (“Devices”) and third-party applications (“Third Party Apps”) to your account. These devices and applications can track a wide number of different aspects of your daily activities, including, among others, your daily steps and fitness activity as well as your nutrition. Depending on the brand and model of tracker you use, the data collected may vary. In general, these Devices and Third Party Apps have specific privacy policies that outline what data they collect. We strongly suggest you review the right privacy policy to know what specific data points your activity tracking device collects about you.

Social Media Account Information – If you create your League account using a social media account (e.g. Google, Facebook) we may also collect Information provided to us by that social media service. This Information may include your name, email address, language preference and profile picture.

Information we collect automatically when you use the Platform

Device and Connection Information – We collect information about your computer, phone, tablet or other devices you use to access the Platform. This Device and Connection Information includes your connection type and settings when you install, access, update or use our Platform. We also collect Information through your device about your operating system, browser type, IP address, URLs of referring/exit pages, device identifiers and crash data. We use this additional information to enhance the security controls around Platform access and resolve bugs and errors that may exist on the Platform. We use your IP address and/or country preference to approximate your location so we can provide you with a better Platform experience.

Cookies and Other Tracking Technologies – We collect information about you when you use our Platform, including browsing our websites and taking certain actions within the Platform. To do so we use cookies and other tracking technologies (e.g., web beacons, device identifiers and pixels) to provide functionality and to recognize you across our Platform. For more information, please see our Cookies and Tracking Notice, which includes information on how to control or opt out of these cookies and tracking technologies.

How does League collect my Information?

League receives employment information from your employer or insurance carrier so we can set up your profile and prepare your account for enrollment. After that, we collect your Information when you sign-up for League’s Platform and as you submit it through the use of the Platform.

Depending on the Services and integrations you participate in or enable and the Service being offered to you by your employer through the League Platform, we may collect Personal Information through your use of the particular Services and integrations. These integrated services and solutions may have their own and separate consent process required prior to you using them with League.

How does League use my Information?

How we use the Information we collect depends in part on which Services are offered to you, which Services you use, how you use them and any preferences you have communicated to us. Below are the specific purposes for which we use the Information we collect about you.

For enrollment and decision support – We guide you every step of the way so you fully understand your options and choose the best coverage for your needs. To do so, we gather the Information we have received from your employer about you and apply eligibility rules to facilitate your enrollment into your health benefits as well as any other benefit spending accounts offered to you through your employer.

For a personalized digital wallet – We provide you with one easily-accessible place to manage your coverage, dependents and benefit spending accounts.

For processing your claims – If you are being offered additional benefit spending accounts by your employer through the League Platform, you can submit eligible claims online. In order to process these claims and reimburse your bank account, we process the claim information provided to us by you and use the Payment Information we have on file.

For Customer Care services – Through the Platform you have immediate live chat support for all your benefit-related questions. To answer your request and to provide you with personalized recommendations, our agents access your Personal Information on file and may ask you to provide us with additional Information. Additional Information requested or provided by you may contain Health Information.

For immediate, expert health and wellness guidance – We provide health and wellness-related guidance and navigational support through live chat with Health Concierge. To answer your request and to provide you with personalized guidance, League’s Concierges access your Personal Information on file and may ask you to give them additional information including Health Information.

For creation of your personalized health profile – As a Member of League’s Platform you have access to a central place for your health information, personal progress on health and wellness programs, earned rewards and any Device and Third Party App integrations. League uses Personal Information and Health Information you provided to us to help you understand your health risks and long-term outcomes and how you can use your benefits and programs to improve your overall health and wellbeing.

For health and wellness assessments – You may have access to League’s health assessment (“Health Profile”). Through a number of questions, the Health Profile assesses your wellbeing across a number of dimensions. You don’t have to complete the Health Profile if you don’t want to share this information with us.

For processing your orders and to facilitate bookings and communications with a Service Provider – Through League’s Marketplace we provide you with offers and discounts on products and services that support better health, fitness and wellbeing. When you buy products or sign-up for services through the Marketplace, we access your Personal Information including your benefit spending accounts and Payment Information. League needs access to this Information to process your order and payments and facilitate communication between you and the Service Provider.

For safety, security and compliance – We use information about you and your Platform use to identify you as a member of our Platform, verify accounts and activity, to monitor suspicious or fraudulent activity and to identify violations of Platform policies.

To provide the Platform and personalize your experience – We use Information about you to provide the Platform to you, to enhance the security controls around Platform access and resolve bugs and errors. We may also use your Information to verify your geographic location. We may use your geographic location data to personalize your experience in the Platform, to recommend content and to see whether the information you request is available in your location.

For research and development – We’re always looking for ways to make our Platform smarter, faster, secure, integrated and useful to you. We use collective learnings about how people use our Platform and feedback provided directly to us to troubleshoot and to identify trends, usage, activity patterns and areas for integration and improvement of the Platform.

To market, promote and drive engagement – If you give your consent, we use your Information to send newsletters, surveys, offers and promotional materials that may be of interest to you and tailored to your individual health and wellness goals. You can opt out of receiving such messages from League by following the opt-out instructions in these messages. If you opt out, we may still send you non-commercial electronic messages, such as messages about your account or our ongoing business relations. Please note that League does not sell or share your Information to third parties for their marketing purposes.

How League shares Information we collect

We may share your Information with third parties so we can provide our services to you. If we need to share your Information with third parties, we will limit the Information to the minimum amount necessary to ensure the provision and quality of the Services we offer you. We share your Information with third parties as follows:

Contractors – We may disclose your Personal Information with contractors that work on our behalf and assist us in providing and supporting the services we offer.

Third Party Providers – We share Information with third parties that help us operate, provide, improve, integrate, customize and support our Platform and Services we offer to you such as:

  • Cloud hosting services;
  • Customer service platform;
  • Credit card processing;
  • Health concierge;
  • Connector services and data integration.

If a Third Party Provider needs to access Information about you to perform services on our behalf, they do so under close instruction from us, including policies and procedures designed to protect your Information. Our Third Party Providers undergo a thorough security and privacy review as a part of the evaluation process and then regular SOC1, SOC2 and/or ISO/IEC 27001 audit reviews thereafter. In the event these audits have material findings that present risks to League or our clients, we work closely with the vendor to track their remediation efforts until the issue has been resolved.

Insurance Carriers – We’ll automatically feed your benefits elections and status/profile updates to your Insurance Carriers for faster, more accurate enrollment and to determine eligibility. When you reach out to us for support about your eligibility or coverage, we may share this Information with your Insurance Carriers on your behalf.

Your Employer – We may share Information with your employer in an anonymous and aggregated or group format only. Any data sharing practices going beyond anonymous, aggregated or group format need your explicit consent. Even with your consent, we will only share de-identifiable data with your Employer. We will use procedures compliant with applicable privacy laws and regulations to ensure that all identifiable data and dimensions have been removed from the data sets and reports provided to your Employer. Please note that your Employer may combine the information we provide with other data available to them and use the combined data at their discretion, including to evaluate the overall program, as well as to provide additional benefits, programs and services. Your Employer’s use of the data and reports are not controlled by us, and this Policy does not cover your Employer’s data use and sharing practices.

“Cleared for Workplace Module” – If your Employer offers the “Cleared for Workplace Module” as part of the Platform, your participation status will always be shared with them. None of your responses to individual questions in the module will ever be shared with your Employer. Only if you give your explicit consent to share the results of the module, your COVID-19 status and a recommendation for testing or self-isolation will be passed to your employer. No other health conditions or symptoms will be disclosed to your Employer. If your Employer is not using this service this does not apply to you.

It is Your Employer’s responsibility to comply with its own privacy policy and applicable laws. We encourage you to review your Employer’s data practices with your Human Resources team.

Service Providers – We may share your information with Service Providers you choose through the League Platform including our Marketplace. When you book an appointment and buy a product through the Platform, we automatically provide your first and last name as well as a Service or product description to the Service Provider. We want everyone to feel safe and cared for when they visit League Marketplace or use a Service Provider offered through the Platform. So before we admit any new Service Providers, we thoroughly review their practices to make sure they’re in line with our standards. We also regularly review our Service Providers to make sure they stay compliant.

Devices and Third Party Apps – You may choose to add new functionality and Information to your account by connecting Devices and Third Party Apps to your account. If you do, you may give these Devices and Third Party Apps access to your account and Information about you like your name and email address, and any content you choose to use in connection with those apps and devices. Device and Third Party App policies and procedures are not controlled by us, and this Policy does not cover how Devices and Third Party Apps use your Information. We encourage you to review the privacy policies of third parties before connecting to or using their applications or services to learn more about their privacy and information handling practices. If you object to Information about you being shared with these third parties, please disable the device or app within your League account settings.

Law Enforcement, Governmental Authorities and Agencies – We may disclose information we have collected from and about you – including Personal Information – if we believe in good faith that it’s necessary to:

  • comply with relevant laws or to respond to subpoenas or warrants served toon us;
  • enforce our Terms of Service and Privacy Policy;
  • protect and defend our rights or property, our Customers, our Suppliers, or other third parties; or
  • in certain situations, abide by lawful requests by public authorities to disclosure of Personal Information, including to meet national security or law enforcement requirements.

Merger, Sales and Acquisition – In the event that we (a) undergo reorganization or (b) that League is sold to a third party, any Personal Information we hold about you may be transferred to the re-organized entity or third party, in accordance with applicable laws and regulations. If an acquisition like this occurs, the new entity will continue to use your Personal Information within the limits of this Policy, to continue delivering your service.

Is my Personal Information and other data secure?

At League, we take security and privacy very seriously. We’re committed to protecting your data, and our highest priority is keeping your sensitive information – especially your personal health information – safe. We follow strict security and compliance standards not only because we need to meet specific regulations, but because we consider it one of the most important things we can do for you.

Security is at the heart of every process and every technology we use across all our teams at League. The League Platform is regularly audited to make sure it complies with security, availability and confidentiality requirements for managing client data.

Communication with League should always be done through the League Platform where the information is encrypted. While League makes every effort to secure all communications within our control and in our Platform, please be advised that no method of delivery is absolutely secure and any communication of Personal Information may be accidentally or deliberately intercepted by third parties. No company, including League, can fully eliminate security risks associated with your Information. While we strive to protect your Information, we cannot guarantee its security.

To help protect yourself and your Information, choose a unique password for our Platforms and do not use a password that you would use on any other website or online service. You are responsible for the security of your Information that you transmit to us or view, download or otherwise access when using public or otherwise unsecured networks. If you use a mobile device to accept your authorization code, you should have the ability to remotely wipe the phone in the event that your device is lost or stolen.

Who at League has access to my Information?

Your Personal Information is maintained on League’s infrastructure or those of third-party providers. For that reason, League employees and contractors have access to your Information so we can provide you with quality services, including Member support and Health Concierge services. Our employees and contractors are obligated to respect the confidentiality of your Personal Information and are only authorized to access your Information as necessary to provide you with Services or support.

In the event that we (a) undergo reorganization or (b) that League is sold to a third party, any Personal Information we hold about you may be transferred to the re-organized entity or third party, in accordance with applicable laws and regulations. In the event of an acquisition, the new entity will continue to use your Personal Information within the limits of this Policy, to continue delivering your service.

Can I correct or update my Information?

Yes. If your Personal Information changes over time or you realize your Information is outdated or incorrect, you have a right to be able to update or correct it. You may update or correct the Information by changing it right in the Platform. If you aren’t able to update or correct the Information right in your account, you can reach out to us through the Chat function in the Platform. You can also contact us at help@league.com to request that we update or correct the Information for you. We will respond to your request within a reasonable timeframe.

Can I find out what Information League has collected about me?

Yes. All our Members, no matter where they live, except in specific circumstances identified by local laws, have a legal right to access the Information we have collected about them and an account of its use and disclosure. You can request a copy of all the Information and data we hold about you. We’ll give you a copy of the data in a standard format through a secure channel. To make this request, reach out to us at help@league.com. We will respond to your request within a reasonable timeframe.

For California residents – In accordance with the California Civil Code Section 1798.83, you may contact us at the address below to request certain information about the disclosure of Personal Information to third parties for their direct marketing purposes.

Can my Information be deleted?

Please note that we may not be able to delete your Information without also deleting your Member account. You may terminate your account at any time by submitting a deletion request to help@league.com. Once your account is terminated, you will no longer be able to access or use your health and wellness benefit accounts offered through the League Platform as well as Programs and Services.

Please note that we will only retain your Personal Information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements. To figure out the appropriate retention period for Personal Information, we consider the amount, nature and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, the applicable legal requirements, and regulatory retention periods.

Can I request that League restrict processing for some of my Information?

Because of the type of Services we offer, we can’t accommodate requests to restrict the processing of certain sets of Information. You, however, will be able to limit the Information added to your profile based on your use of Services and participation in Programs, the Devices and Third Party Apps you connect to your account and the consent you provide for any data sharing practices. If you want us to stop processing parts of your Information, you can request that all data be deleted through the process above. You can also limit the Personal Information provided to us as you participate in the Services and programs offered to you.

If you have connected any Devices or Third Party Apps, you can manage the data sharing and processing setting for each of them through your League account.

If you’ve provided your consent for additional data sharing, you can withdraw your consent at any time. To do so, please reach out to us through the Chat function in the Platform or by contacting help@league.com.

If you provide your consent, we use your Information to send newsletters, surveys, offers and promotional materials that may be of interest to you and tailored to your individual health and wellness goals. You may opt out of receiving such messages from League by following the opt out instructions in these messages. If you opt out, we may still send you non-commercial electronic messages, such as messages about your account or our ongoing business relations.

Where is my Information being transferred?

League is headquartered in Canada, has an office in the United States, and uses Third Party Providers in other countries. Your Personal Information may be transferred to the United States or other locations outside of your state, province, country, or other governmental jurisdiction where the privacy laws may not be as protective as those in your jurisdiction. League takes appropriate steps to protect your privacy and implement reasonable security measures to protect your Personal Information in storage and transmission. We also enter into contracts with our Third Party Providers that require them to treat Personal Information in a way that’s consistent with this Policy.

I am an EU resident – What do I need to know?

This is for residents of the European Union (“EU”) including the European Economic Area (“EEA”) countries of Iceland, Liechtenstein, Norway and, where applicable, Switzerland. Our processing of Personal Information of Members who are in the EU is governed by the General Data Protection Regulation (“GDPR”). The GDPR requires us to give you certain information about your data and rights:

Personal information – References to “Personal Information” and “Information” in this Privacy Policy are equivalent to “personal data” governed by the GDPR.

Data Controller – League is the data controller of Personal Information provided to, or collected by or for, our Platform and Services. But we may act as a data processor on behalf of your employer for Personal Information that we process on their behalf when providing the Platform and Services.

Legal basis for processing – We only use your Information as permitted by law. We are required to inform you of the legal basis of our processing of your Personal Information, which are described in this Policy. If you have questions about the legal basis of how we process your Information, reach out to us at privacy@league.com.

Processing ActivityLegal Basis for Processing
Enrollment and decision supportThis processing is necessary to the fulfillment of our contracts with employers.
Personalized digital wallet 
Processing your claims
Customer Care services
Expert health and wellness guidance
Creation of your personalized health profile
Health and wellness assessments
Processing your orders and to facilitate bookings and communications with a Service Provider
Providing the Platform and personalizing your experience
Safety, security and complianceThis processing is necessary to the legitimate interests of League
Research and development
Marketing, promoting and driving engagement

Use for new purposes – We may use your Personal Information for reasons not described in this Policy where permitted by law and the reason is compatible with the purpose for which we collected it. If we need to use your Personal Information for an unrelated purpose, we will notify you and explain the legal basis.

Cross-Border Data Transfer – Whenever we transfer your personal information out of the EU to countries not deemed by the European Commission to provide an adequate level of protection, the transfer will be based on one of the following safeguards recognized by the European Commission as providing adequate protection for Personal Information:

Contracts approved by the European Commission which impose data protection obligations on the parties to the transfer. For details, see European Commission Model contracts for the transfer of Personal Information to third countries.

For transfers to Third Party Providers in the United States, ensuring they participate in the EU-US Privacy Shield Framework

Please reach out to us if you want more information on the specific mechanism we use when transferring your Personal Information out of the EU.

Your rights to access, correct, restrict or delete your Personal Information and object to processing – You have the right to request access to your Personal Information, to have your Information corrected, restricted or deleted, and to object to our processing of your Personal Information. You also have the right of data portability, which means that you can request that we provide you (or a third party you designate) with a transferable copy of the Personal Information that you have provided to us. Your rights may be subject to various limitations under the GDPR. If you wish to exercise any of these rights, or if you have any concerns about our processing of your Personal Information, please contact us in any of the ways listed in the section “Contact Us” below.

Right to Lodge a Complaint with a Supervisory Authority – You have the right to file a complaint about our processing of your Personal Information with your national (or in some countries, regional) data protection authority.The EU Commission has a list here: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

Privacy of Minors

Individuals under the age of eighteen (18) should not transfer any Personal Information to us. We will neither intentionally ask for Information of users under the age of eighteen, nor process their Personal Information.

Additional notice to residents of the United States: We do not intentionally collect or maintain Information from visitors of the website or Platform who are under thirteen (13) years old.

Dispute Resolution

If you believe that League has not adhered to this Privacy Policy, please contact League by email at privacy@league.com. We’ll do our best to make things right. If you feel that your complaint hasn’t been fully addressed, let us know and we’ll investigate further.

If you’d rather file an anonymous complaint, you can do so through our whistleblower hotline provided by an independent Third Party Provider. You always have the option to remain completely anonymous. Complaints can be made 24/7/365 through one of the following channels:

Phone – 1-866-921-6714 (toll free number in North America)
Web Portal – https://www.integritycounts.ca/org/league

For EU Residents – To lodge a complaint with a supervisory authority under the GDPR, please see “I am an EU resident – What do I need to know?” above.

Contact US

If you have questions or concerns about this Privacy Policy, please contact us at:

Attention: Privacy Officer – Information Security & Privacy
League, Inc.
225 King St W, Suite 800, Toronto, Ontario M5V3C6
privacy@league.com

Changes to This Privacy Policy

If this Privacy Policy changes, the revised policy will be posted online and if we make material changes, you may be notified by email. Your continued use of the Platform after the effective date constitutes your acceptance of the amended Privacy Policy. Any amended Privacy Policy supersedes all previous versions. Please check back periodically, and especially before you provide any personal information. This Privacy Policy was last updated on September 17, 2020. You can find all versions of our Privacy Policy here.

Effective starting: April 14, 2020

What This Privacy Policy Covers

League Inc. (“us,”, “we,”, “our”, or “League”) is committed to protecting your data, and our highest priority is keeping your sensitive information—especially your personal health information—safe. In this policy we explain what data we collect about you and how we store, analyze and share the data through League’s website, mobile and web applications (together, the “League Platform” or “Platform”). This Privacy Policy (“Policy”) is intended to help you understand:

Nothing in this Policy limits your rights under applicable laws, including your ability, depending on your country of residence, to file a complaint with your local Data Protection Authority.

Please carefully read through this Policy. To join and enjoy League’s Platform and its Services, you are required to accept all terms of this Policy. By using the Platform, you are accepting the terms of this Privacy Policy and our Terms of Services, and you are consenting to our collection, use, disclosure and retention of your Information as described in this Privacy Policy. If you do not consent to the collection, use and disclosure of your information as described in this Policy, you will not be able to use the Platform.

Unless otherwise defined herein, capitalized terms shall have the meanings assigned to such terms set forth in the Terms of Service and which incorporate this Privacy Policy by reference.

Applicability of This Privacy Policy

This Privacy Policy is only applicable to the Platform and does not apply to any other website or service that you may be able to access through League’s Platform or any website or digital services of League’s business partners, each of which may have data collection, storage and use practices and policies that may differ from this Policy. We are not responsible for the actions or privacy practices of these third-party websites or services nor does it signify our endorsement of such websites, locations or its contents. Please consult those websites and services directly to understand their privacy practices. Your use of the League Platform is governed by this Privacy Policy and the Agreement (as the term “Agreement” is defined in our Terms of Services).

What Information does League collect about me?

We collect Information about you when you provide it to us, when you use our Platform and when other sources provide it to us, as described below. Please note that for the purpose of clarity and ease, we will refer to Personal Information or Information for all categories mentioned below throughout this Policy.

Personal Information you provide to us

Simply stated, Personal Information is any information about you as an identifiable individual. The Member Information we may collect from you includes:

  • Your first and last name, home address and phone number;
  • Your gender and date of birth;
  • The email address you use to sign-in and communicate with us;
  • Other log-in information such as your password;
  • Information about your profession including your employee ID, income, role and employment status;
  • Your dependents (if any) and their information;
  • Information about services and products you buy or sign-up for through League’s Marketplace;
  • Information about your participation and performance in Activities and Programs;
  • Health rewards that you can earn by participating in qualifying activities;
  • Any Information you provide to us while chatting and interacting with the League Concierge, a Marketplace Service Provider or a Customer Care agent;
  • The comments and contributions you may make on the Platform;
  • Additional information you may provide as you submit queries and requests to us.

Health and Wellness Information (“Health Information”) is data related to your physical and mental health as well as medical history, including symptoms, diagnosis, procedures and outcomes. When using League’s Platform you may provide certain health or health-related information to us. Health Information includes:

  • Insurance data such as insurance carrier, plan, group and member ID as well as claim information if you opt in to share this data with League;
  • Identifiers connected to your health benefits and group plan membership such as Social Security Numbers (U.S.) and Social Insurance Numbers (Canada);
  • Any Health Information you provide to us while chatting and interacting with the League Concierge, a Marketplace Service Provider or a Customer Care agent;
  • Health information when you submit a claim towards your benefit spending accounts through the Platform;
  • Information about your health, fitness, nutrition and finance provided by you through Health Profile;
  • Information about health-related services and products you buy or sign-up for through League’s Marketplace.

Payment Information is data related to your bank account, debit or credit card. We collect your bank account and billing information when you register for the Platform to process your spending account claims or for any payments through League’s Marketplace. By linking your bank account to your League account, you authorize us to submit your Payment Information to the financial institution that will process your employee benefit payment.

If you provide us with your credit card information, this information is processed by our credit card payment processing partner. This partner collects your voluntarily provided payment information necessary to process your payment or claim. Such partner’s use and storage of information is governed by its applicable terms of service and privacy policy.

Personal Information we get from others

Employment and Benefit Information – We may also get Information about you from other sources. For example, we may get employment information from your Employer or Carrier to enroll you in your health benefits and our Platform. The data set may include your first and last name, employee ID, income, role, employment status and dependent information. The data set depends on what your employer shares with us. While you are a Member and use the Platform, we may receive additional employment or benefit information from your Employer or Carrier. We might add this Information to your account. Please note that we will only use and store the information necessary to enroll you in your benefits and our Platform.

Devices and Third Party Apps – As a Member you may be able to connect activity and health trackers (“Devices”) and third-party applications (“Third Party Apps”) to your account. These devices and applications can track a wide number of different aspects of your daily activities, including, among others, your daily steps and fitness activity as well as your nutrition. Depending on the brand and model of tracker you use, the data collected may vary. In general, these Devices and Third Party Apps have specific privacy policies that outline what data they collect. We strongly suggest you review the right privacy policy to know what specific data points your activity tracking device collects about you.

Social Media Account Information – If you create your League account using a social media account (e.g. Google, Facebook) we may also collect Information provided to us by that social media service. This Information may include your name, email address, language preference and profile picture.

Information we collect automatically when you use the Platform

Device and Connection Information – We collect information about your computer, phone, tablet or other devices you use to access the Platform. This Device and Connection Information includes your connection type and settings when you install, access, update or use our Platform. We also collect Information through your device about your operating system, browser type, IP address, URLs of referring/exit pages, device identifiers and crash data. We use this additional information to enhance the security controls around Platform access and resolve bugs and errors that may exist on the Platform. We use your IP address and/or country preference to approximate your location so we can provide you with a better Platform experience.

Cookies and Other Tracking Technologies – We collect information about you when you use our Platform, including browsing our websites and taking certain actions within the Platform. To do so we use cookies and other tracking technologies (e.g., web beacons, device identifiers and pixels) to provide functionality and to recognize you across our Platform. For more information, please see our Cookies and Tracking Notice, which includes information on how to control or opt out of these cookies and tracking technologies.

How does League collect my Information?

League receives employment information from your employer or insurance carrier so we can set up your profile and prepare your account for enrollment. After that, we collect your Information when you sign-up for League’s Platform and as you submit it through the use of the Platform.

Depending on the Services and integrations you participate in or enable and the Service being offered to you by your employer through the League Platform, we may collect Personal Information through your use of the particular Services and integrations. These integrated services and solutions may have their own and separate consent process required prior to you using them with League.

How does League use my Information?

How we use the Information we collect depends in part on which Services are offered to you, which Services you use, how you use them and any preferences you have communicated to us. Below are the specific purposes for which we use the Information we collect about you.

For enrollment and decision support – We guide you every step of the way so you fully understand your options and choose the best coverage for your needs. To do so, we gather the Information we have received from your employer about you and apply eligibility rules to facilitate your enrollment into your health benefits as well as any other benefit spending accounts offered to you through your employer.

For a personalized digital wallet – We provide you with one easily-accessible place to manage your coverage, dependents and benefit spending accounts.

For processing your claims – If you are being offered additional benefit spending accounts by your employer through the League Platform, you can submit eligible claims online. In order to process these claims and reimburse your bank account, we process the claim information provided to us by you and use the Payment Information we have on file.

For Customer Care services – Through the Platform you have immediate live chat support for all your benefit-related questions. To answer your request and to provide you with personalized recommendations, our agents access your Personal Information on file and may ask you to provide us with additional Information. Additional Information requested or provided by you may contain Health Information.

For immediate, expert health and wellness guidance – We provide health and wellness-related guidance and navigational support through live chat with Health Concierge. To answer your request and to provide you with personalized guidance, League’s Concierges access your Personal Information on file and may ask you to give them additional information including Health Information.

For creation of your personalized health profile – As a Member of League’s Platform you have access to a central place for your health information, personal progress on health and wellness programs, earned rewards and any Device and Third Party App integrations. League uses Personal Information and Health Information you provided to us to help you understand your health risks and long-term outcomes and how you can use your benefits and programs to improve your overall health and wellbeing.

For health and wellness assessments – You may have access to League’s health assessment (“Health Profile”). Through a number of questions, the Health Profile assesses your wellbeing across a number of dimensions. You don’t have to complete the Health Profile if you don’t want to share this information with us.

For processing your orders and to facilitate bookings and communications with a Service Provider – Through League’s Marketplace we provide you with offers and discounts on products and services that support better health, fitness and wellbeing. When you buy products or sign-up for services through the Marketplace, we access your Personal Information including your benefit spending accounts and Payment Information. League needs access to this Information to process your order and payments and facilitate communication between you and the Service Provider.

For safety, security and compliance – We use information about you and your Platform use to identify you as a member of our Platform, verify accounts and activity, to monitor suspicious or fraudulent activity and to identify violations of Platform policies.

To provide the Platform and personalize your experience – We use Information about you to provide the Platform to you, to enhance the security controls around Platform access and resolve bugs and errors. We may also use your Information to verify your geographic location. We may use your geographic location data to personalize your experience in the Platform, to recommend content and to see whether the information you request is available in your location.

For research and development – We’re always looking for ways to make our Platform smarter, faster, secure, integrated and useful to you. We use collective learnings about how people use our Platform and feedback provided directly to us to troubleshoot and to identify trends, usage, activity patterns and areas for integration and improvement of the Platform.

To market, promote and drive engagement – If you give your consent, we use your Information to send newsletters, surveys, offers and promotional materials that may be of interest to you and tailored to your individual health and wellness goals. You can opt out of receiving such messages from League by following the opt-out instructions in these messages. If you opt out, we may still send you non-commercial electronic messages, such as messages about your account or our ongoing business relations. Please note that League does not sell or share your Information to third parties for their marketing purposes.

How League shares Information we collect

We may share your Information with third parties so we can provide our services to you. If we need to share your Information with third parties, we will limit the Information to the minimum amount necessary to ensure the provision and quality of the Services we offer you. We share your Information with third parties as follows:

Contractors – We may disclose your Personal Information with contractors that work on our behalf and assist us in providing and supporting the services we offer.

Third Party Providers – We share Information with third parties that help us operate, provide, improve, integrate, customize and support our Platform and Services we offer to you such as:

  • Cloud hosting services;
  • Customer service platform;
  • Credit card processing;
  • Health concierge;
  • Connector services and data integration.

If a Third Party Provider needs to access Information about you to perform services on our behalf, they do so under close instruction from us, including policies and procedures designed to protect your Information. Our Third Party Providers undergo a thorough security and privacy review as a part of the evaluation process and then regular SOC1, SOC2 and/or ISO/IEC 27001 audit reviews thereafter. In the event these audits have material findings that present risks to League or our clients, we work closely with the vendor to track their remediation efforts until the issue has been resolved.

Insurance Carriers – We’ll automatically feed your benefits elections and status/profile updates to your Insurance Carriers for faster, more accurate enrollment and to determine eligibility. When you reach out to us for support about your eligibility or coverage, we may share this Information with your Insurance Carriers on your behalf.

Your Employer – We may share Information with your employer in an anonymous and aggregated or group format only. Any data sharing practices going beyond anonymous, aggregated or group format need your explicit consent. Even with your consent, we will only share de-identifiable data with your Employer. We will use procedures compliant with applicable privacy laws and regulations to ensure that all identifiable data and dimensions have been removed from the data sets and reports provided to your Employer. Please note that your Employer may combine the information we provide with other data available to them and use the combined data at their discretion, including to evaluate the overall program, as well as to provide additional benefits, programs and services. Your Employer’s use of the data and reports are not controlled by us, and this Policy does not cover your Employer’s data use and sharing practices. It is Your Employer’s responsibility to comply with its own privacy policy and applicable laws. We encourage you to review your Employer’s data practices with your Human Resources team.

Service Providers – We may share your information with Service Providers you choose through the League Platform including our Marketplace. When you book an appointment and buy a product through the Platform, we automatically provide your first and last name as well as a Service or product description to the Service Provider. We want everyone to feel safe and cared for when they visit League Marketplace or use a Service Provider offered through the Platform. So before we admit any new Service Providers, we thoroughly review their practices to make sure they’re in line with our standards. We also regularly review our Service Providers to make sure they stay compliant.

Devices and Third Party Apps – You may choose to add new functionality and Information to your account by connecting Devices and Third Party Apps to your account. If you do, you may give these Devices and Third Party Apps access to your account and Information about you like your name and email address, and any content you choose to use in connection with those apps and devices. Device and Third Party App policies and procedures are not controlled by us, and this Policy does not cover how Devices and Third Party Apps use your Information. We encourage you to review the privacy policies of third parties before connecting to or using their applications or services to learn more about their privacy and information handling practices. If you object to Information about you being shared with these third parties, please disable the device or app within your League account settings.

Law Enforcement, Governmental Authorities and Agencies – We may disclose information we have collected from and about you – including Personal Information – if we believe in good faith that it’s necessary to:

  • comply with relevant laws or to respond to subpoenas or warrants served toon us;
  • enforce our Terms of Service and Privacy Policy;
  • protect and defend our rights or property, our Customers, our Suppliers, or other third parties; or
  • in certain situations, abide by lawful requests by public authorities to disclosure of Personal Information, including to meet national security or law enforcement requirements.

Merger, Sales and Acquisition – In the event that we (a) undergo reorganization or (b) that League is sold to a third party, any Personal Information we hold about you may be transferred to the re-organized entity or third party, in accordance with applicable laws and regulations. If an acquisition like this occurs, the new entity will continue to use your Personal Information within the limits of this Policy, to continue delivering your service.

Is my Personal Information and other data secure?

At League, we take security and privacy very seriously. We’re committed to protecting your data, and our highest priority is keeping your sensitive information – especially your personal health information – safe. We follow strict security and compliance standards not only because we need to meet specific regulations, but because we consider it one of the most important things we can do for you.

Security is at the heart of every process and every technology we use across all our teams at League. The League Platform is regularly audited to make sure it complies with security, availability and confidentiality requirements for managing client data.

Communication with League should always be done through the League Platform where the information is encrypted. While League makes every effort to secure all communications within our control and in our Platform, please be advised that no method of delivery is absolutely secure and any communication of Personal Information may be accidentally or deliberately intercepted by third parties. No company, including League, can fully eliminate security risks associated with your Information. While we strive to protect your Information, we cannot guarantee its security.

To help protect yourself and your Information, choose a unique password for our Platforms and do not use a password that you would use on any other website or online service. You are responsible for the security of your Information that you transmit to us or view, download or otherwise access when using public or otherwise unsecured networks. If you use a mobile device to accept your authorization code, you should have the ability to remotely wipe the phone in the event that your device is lost or stolen.

Who at League has access to my Information?

Your Personal Information is maintained on League’s infrastructure or those of third-party providers. For that reason, League employees and contractors have access to your Information so we can provide you with quality services, including Member support and Health Concierge services. Our employees and contractors are obligated to respect the confidentiality of your Personal Information and are only authorized to access your Information as necessary to provide you with Services or support.

In the event that we (a) undergo reorganization or (b) that League is sold to a third party, any Personal Information we hold about you may be transferred to the re-organized entity or third party, in accordance with applicable laws and regulations. In the event of an acquisition, the new entity will continue to use your Personal Information within the limits of this Policy, to continue delivering your service.

Can I correct or update my Information?

Yes. If your Personal Information changes over time or you realize your Information is outdated or incorrect, you have a right to be able to update or correct it. You may update or correct the Information by changing it right in the Platform. If you aren’t able to update or correct the Information right in your account, you can reach out to us through the Chat function in the Platform. You can also contact us at help@league.com to request that we update or correct the Information for you. We will respond to your request within a reasonable timeframe.

Can I find out what Information League has collected about me?

Yes. All our Members, no matter where they live, except in specific circumstances identified by local laws, have a legal right to access the Information we have collected about them and an account of its use and disclosure. You can request a copy of all the Information and data we hold about you. We’ll give you a copy of the data in a standard format through a secure channel. To make this request, reach out to us at help@league.com. We will respond to your request within a reasonable timeframe.

For California residents – In accordance with the California Civil Code Section 1798.83, you may contact us at the address below to request certain information about the disclosure of Personal Information to third parties for their direct marketing purposes.

Can my Information be deleted?

Please note that we may not be able to delete your Information without also deleting your Member account. You may terminate your account at any time by submitting a deletion request to help@league.com. Once your account is terminated, you will no longer be able to access or use your health and wellness benefit accounts offered through the League Platform as well as Programs and Services.

Please note that we will only retain your Personal Information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements. To figure out the appropriate retention period for Personal Information, we consider the amount, nature and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, the applicable legal requirements, and regulatory retention periods.

Can I request that League restrict processing for some of my Information?

Because of the type of Services we offer, we can’t accommodate requests to restrict the processing of certain sets of Information. You, however, will be able to limit the Information added to your profile based on your use of Services and participation in Programs, the Devices and Third Party Apps you connect to your account and the consent you provide for any data sharing practices. If you want us to stop processing parts of your Information, you can request that all data be deleted through the process above. You can also limit the Personal Information provided to us as you participate in the Services and programs offered to you.

If you have connected any Devices or Third Party Apps, you can manage the data sharing and processing setting for each of them through your League account.

If you’ve provided your consent for additional data sharing, you can withdraw your consent at any time. To do so, please reach out to us through the Chat function in the Platform or by contacting help@league.com.

If you provide your consent, we use your Information to send newsletters, surveys, offers and promotional materials that may be of interest to you and tailored to your individual health and wellness goals. You may opt out of receiving such messages from League by following the opt out instructions in these messages. If you opt out, we may still send you non-commercial electronic messages, such as messages about your account or our ongoing business relations.

Where is my Information being transferred?

League is headquartered in Canada, has an office in the United States, and uses Third Party Providers in other countries. Your Personal Information may be transferred to the United States or other locations outside of your state, province, country, or other governmental jurisdiction where the privacy laws may not be as protective as those in your jurisdiction. League takes appropriate steps to protect your privacy and implement reasonable security measures to protect your Personal Information in storage and transmission. We also enter into contracts with our Third Party Providers that require them to treat Personal Information in a way that’s consistent with this Policy.

I am an EU resident – What do I need to know?

This is for residents of the European Union (“EU”) including the European Economic Area (“EEA”) countries of Iceland, Liechtenstein, Norway and, where applicable, Switzerland. Our processing of Personal Information of Members who are in the EU is governed by the General Data Protection Regulation (“GDPR”). The GDPR requires us to give you certain information about your data and rights:

Personal information – References to “Personal Information” and “Information” in this Privacy Policy are equivalent to “personal data” governed by the GDPR.

Data Controller – League is the data controller of Personal Information provided to, or collected by or for, our Platform and Services. But we may act as a data processor on behalf of your employer for Personal Information that we process on their behalf when providing the Platform and Services.

Legal basis for processing – We only use your Information as permitted by law. We are required to inform you of the legal basis of our processing of your Personal Information, which are described in this Policy. If you have questions about the legal basis of how we process your Information, reach out to us at privacy@league.com.

Processing ActivityLegal Basis for Processing
Enrollment and decision supportThis processing is necessary to the fulfillment of our contracts with employers.
Personalized digital wallet 
Processing your claims
Customer Care services
Expert health and wellness guidance
Creation of your personalized health profile
Health and wellness assessments
Processing your orders and to facilitate bookings and communications with a Service Provider
Providing the Platform and personalizing your experience
Safety, security and complianceThis processing is necessary to the legitimate interests of League
Research and development
Marketing, promoting and driving engagement

Use for new purposes – We may use your Personal Information for reasons not described in this Policy where permitted by law and the reason is compatible with the purpose for which we collected it. If we need to use your Personal Information for an unrelated purpose, we will notify you and explain the legal basis.

Cross-Border Data Transfer – Whenever we transfer your personal information out of the EU to countries not deemed by the European Commission to provide an adequate level of protection, the transfer will be based on one of the following safeguards recognized by the European Commission as providing adequate protection for Personal Information:

Contracts approved by the European Commission which impose data protection obligations on the parties to the transfer. For details, see European Commission Model contracts for the transfer of Personal Information to third countries.

For transfers to Third Party Providers in the United States, ensuring they participate in the EU-US Privacy Shield Framework

Please reach out to us if you want more information on the specific mechanism we use when transferring your Personal Information out of the EU.

Your rights to access, correct, restrict or delete your Personal Information and object to processing – You have the right to request access to your Personal Information, to have your Information corrected, restricted or deleted, and to object to our processing of your Personal Information. You also have the right of data portability, which means that you can request that we provide you (or a third party you designate) with a transferable copy of the Personal Information that you have provided to us. Your rights may be subject to various limitations under the GDPR. If you wish to exercise any of these rights, or if you have any concerns about our processing of your Personal Information, please contact us in any of the ways listed in the section “Contact Us” below.

Right to Lodge a Complaint with a Supervisory Authority – You have the right to file a complaint about our processing of your Personal Information with your national (or in some countries, regional) data protection authority.The EU Commission has a list here: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

Privacy of Minors

Individuals under the age of eighteen (18) should not transfer any Personal Information to us. We will neither intentionally ask for Information of users under the age of eighteen, nor process their Personal Information.

Additional notice to residents of the United States: We do not intentionally collect or maintain Information from visitors of the website or Platform who are under thirteen (13) years old.

Dispute Resolution

If you believe that League has not adhered to this Privacy Policy, please contact League by email at privacy@league.com. We’ll do our best to make things right. If you feel that your complaint hasn’t been fully addressed, let us know and we’ll investigate further.

If you’d rather file an anonymous complaint, you can do so through our whistleblower hotline provided by an independent Third Party Provider. You always have the option to remain completely anonymous. Complaints can be made 24/7/365 through one of the following channels:

Phone – 1-866-921-6714 (toll free number in North America)
Web Portal – https://www.integritycounts.ca/org/league

For EU Residents – To lodge a complaint with a supervisory authority under the GDPR, please see “I am an EU resident – What do I need to know?” above.

Contact US

If you have questions or concerns about this Privacy Policy, please contact us at:

Attention: Privacy Officer – Information Security & Privacy
League, Inc.
225 King St W, Suite 800, Toronto, Ontario M5V3C6
privacy@league.com

Changes to This Privacy Policy

If this Privacy Policy changes, the revised policy will be posted online and if we make material changes, you may be notified by email. Your continued use of the Platform after the effective date constitutes your acceptance of the amended Privacy Policy. Any amended Privacy Policy supersedes all previous versions. Please check back periodically, and especially before you provide any personal information. This Privacy Policy was last updated on April 14, 2020. You can find all versions of our Privacy Policy here.

Last updated: October 30, 2019

What This Privacy Policy Covers

League Inc. (“us,”, “we,”, “our”, or “League”) is committed to protecting your data, and our highest priority is keeping your sensitive information—especially your personal health information—safe. In this policy we explain what data we collect about you and how we store, analyze and share the data through League’s website, mobile and web applications (together, the “League Platform” or “Platform”). This Privacy Policy (“Policy”) is intended to help you understand:

Nothing in this Policy limits your rights under applicable laws, including your ability, depending on your country of residence, to file a complaint with your local Data Protection Authority.

Please carefully read through this Policy. To join and enjoy League’s Platform and its Services, you are required to accept all terms of this Policy. By using the Platform, you are accepting the terms of this Privacy Policy and our Terms of Services, and you are consenting to our collection, use, disclosure and retention of your Information as described in this Privacy Policy. If you do not consent to the collection, use and disclosure of your information as described in this Policy, you will not be able to use the Platform.

Unless otherwise defined herein, capitalized terms shall have the meanings assigned to such terms set forth in the Terms of Service and which incorporate this Privacy Policy by reference.

Applicability of This Privacy Policy

This Privacy Policy is only applicable to the Platform and does not apply to any other website or service that you may be able to access through League’s Platform or any website or digital services of League’s business partners, each of which may have data collection, storage and use practices and policies that may differ from this Policy. We are not responsible for the actions or privacy practices of these third-party websites or services nor does it signify our endorsement of such websites, locations or its contents. Please consult those websites and services directly to understand their privacy practices. Your use of the League Platform is governed by this Privacy Policy and the Agreement (as the term “Agreement” is defined in our Terms of Services).

What Information does League collect about me?

We collect Information about you when you provide it to us, when you use our Platform and when other sources provide it to us, as described below. Please note that for the purpose of clarity and ease, we will refer to Personal Information or Information for all categories mentioned below throughout this Policy.

Personal Information you provide to us

Simply stated, Personal Information is any information about you as an identifiable individual. The Member Information we may collect from you includes:

  • Your first and last name, home address and phone number;
  • Your gender and date of birth;
  • The email address you use to sign-in and communicate with us;
  • Other log-in information such as your password;
  • Information about your profession including your employee ID, income, role and employment status;
  • Your dependents (if any) and their information;
  • Information about services and products you buy or sign-up for through League’s Marketplace;
  • Information about your participation and performance in Activities and Programs;
  • Health rewards that you can earn by participating in qualifying activities;
  • Any Information you provide to us while chatting and interacting with the League Concierge, a Marketplace Service Provider or a Customer Care agent;
  • The comments and contributions you may make on the Platform;
  • Additional information you may provide as you submit queries and requests to us.

Health and Wellness Information (“Health Information”) is data related to your physical and mental health as well as medical history, including symptoms, diagnosis, procedures and outcomes. When using League’s Platform you may provide certain health or health-related information to us. Health Information includes:

  • Insurance data such as insurance carrier, plan, group and member ID as well as claim information if you opt in to share this data with League;
  • Identifiers connected to your health benefits and group plan membership such as Social Security Numbers (U.S.) and Social Insurance Numbers (Canada);
  • Any Health Information you provide to us while chatting and interacting with the League Concierge, a Marketplace Service Provider or a Customer Care agent;
  • Health information when you submit a claim towards your benefit spending accounts through the Platform;
  • Information about your health, fitness, nutrition and finance provided by you through Health Profile;
  • Information about health-related services and products you buy or sign-up for through League’s Marketplace.

Payment Information is data related to your bank account, debit or credit card. We collect your bank account and billing information when you register for the Platform to process your spending account claims or for any payments through League’s Marketplace. By linking your bank account to your League account, you authorize us to submit your Payment Information to the financial institution that will process your employee benefit payment.

If you provide us with your credit card information, this information is processed by our credit card payment processing partner. This partner collects your voluntarily provided payment information necessary to process your payment or claim. Such partner’s use and storage of information is governed by its applicable terms of service and privacy policy.

Personal Information we get from others

Employment and Benefit Information – We may also get Information about you from other sources. For example, we may get employment information from your Employer or Carrier to enroll you in your health benefits and our Platform. The data set may include your first and last name, employee ID, income, role, employment status and dependent information. The data set depends on what your employer shares with us. While you are a Member and use the Platform, we may receive additional employment or benefit information from your Employer or Carrier. We might add this Information to your account. Please note that we will only use and store the information necessary to enroll you in your benefits and our Platform.

Devices and Third Party Apps – As a Member you may be able to connect activity and health trackers (“Devices”) and third-party applications (“Third Party Apps”) to your account. These devices and applications can track a wide number of different aspects of your daily activities, including, among others, your daily steps and fitness activity as well as your nutrition. Depending on the brand and model of tracker you use, the data collected may vary. In general, these Devices and Third Party Apps have specific privacy policies that outline what data they collect. We strongly suggest you review the right privacy policy to know what specific data points your activity tracking device collects about you.

Social Media Account Information – If you create your League account using a social media account (e.g. Google, Facebook) we may also collect Information provided to us by that social media service. This Information may include your name, email address, language preference and profile picture.

Information we collect automatically when you use the Platform

Device and Connection Information – We collect information about your computer, phone, tablet or other devices you use to access the Platform. This Device and Connection Information includes your connection type and settings when you install, access, update or use our Platform. We also collect Information through your device about your operating system, browser type, IP address, URLs of referring/exit pages, device identifiers and crash data. We use this additional information to enhance the security controls around Platform access and resolve bugs and errors that may exist on the Platform. We use your IP address and/or country preference to approximate your location so we can provide you with a better Platform experience.

Cookies and Other Tracking Technologies – We collect information about you when you use our Platform, including browsing our websites and taking certain actions within the Platform. To do so we use cookies and other tracking technologies (e.g., web beacons, device identifiers and pixels) to provide functionality and to recognize you across our Platform. For more information, please see our Cookies and Tracking Notice, which includes information on how to control or opt out of these cookies and tracking technologies.

How does League collect my Information?

League receives employment information from your employer or insurance carrier so we can set up your profile and prepare your account for enrollment. After that, we collect your Information when you sign-up for League’s Platform and as you submit it through the use of the Platform.

Depending on the Services and integrations you participate in or enable and the Service being offered to you by your employer through the League Platform, we may collect Personal Information through your use of the particular Services and integrations. These integrated services and solutions may have their own and separate consent process required prior to you using them with League.

How does League use my Information?

How we use the Information we collect depends in part on which Services are offered to you, which Services you use, how you use them and any preferences you have communicated to us. Below are the specific purposes for which we use the Information we collect about you.

For enrollment and decision support – We guide you every step of the way so you fully understand your options and choose the best coverage for your needs. To do so, we gather the Information we have received from your employer about you and apply eligibility rules to facilitate your enrollment into your health benefits as well as any other benefit spending accounts offered to you through your employer.

For a personalized digital wallet – We provide you with one easily-accessible place to manage your coverage, dependents and benefit spending accounts.

For processing your claims – If you are being offered additional benefit spending accounts by your employer through the League Platform, you can submit eligible claims online. In order to process these claims and reimburse your bank account, we process the claim information provided to us by you and use the Payment Information we have on file.

For Customer Care services – Through the Platform you have immediate live chat support for all your benefit-related questions. To answer your request and to provide you with personalized recommendations, our agents access your Personal Information on file and may ask you to provide us with additional Information. Additional Information requested or provided by you may contain Health Information.

For immediate, expert health and wellness guidance – We provide health and wellness-related guidance and navigational support through live chat with Health Concierge. To answer your request and to provide you with personalized guidance, League’s Concierges access your Personal Information on file and may ask you to give them additional information including Health Information.

For creation of your personalized health profile – As a Member of League’s Platform you have access to a central place for your health information, personal progress on health and wellness programs, earned rewards and any Device and Third Party App integrations. League uses Personal Information and Health Information you provided to us to help you understand your health risks and long-term outcomes and how you can use your benefits and programs to improve your overall health and wellbeing.

For health and wellness assessments – You may have access to League’s health assessment (“Health Profile”). Through a number of questions, the Health Profile assesses your wellbeing across a number of dimensions. You don’t have to complete the Health Profile if you don’t want to share this information with us.

For processing your orders and to facilitate bookings and communications with a Service Provider – Through League’s Marketplace we provide you with offers and discounts on products and services that support better health, fitness and wellbeing. When you buy products or sign-up for services through the Marketplace, we access your Personal Information including your benefit spending accounts and Payment Information. League needs access to this Information to process your order and payments and facilitate communication between you and the Service Provider.

For safety, security and compliance – We use information about you and your Platform use to identify you as a member of our Platform, verify accounts and activity, to monitor suspicious or fraudulent activity and to identify violations of Platform policies.

To provide the Platform and personalize your experience – We use Information about you to provide the Platform to you, to enhance the security controls around Platform access and resolve bugs and errors. We may also use your Information to verify your geographic location. We may use your geographic location data to personalize your experience in the Platform, to recommend content and to see whether the information you request is available in your location.

For research and development – We’re always looking for ways to make our Platform smarter, faster, secure, integrated and useful to you. We use collective learnings about how people use our Platform and feedback provided directly to us to troubleshoot and to identify trends, usage, activity patterns and areas for integration and improvement of the Platform.

To market, promote and drive engagement – If you give your consent, we use your Information to send newsletters, surveys, offers and promotional materials that may be of interest to you and tailored to your individual health and wellness goals. You can opt out of receiving such messages from League by following the opt-out instructions in these messages. If you opt out, we may still send you non-commercial electronic messages, such as messages about your account or our ongoing business relations. Please note that League does not sell or share your Information to third parties for their marketing purposes.

How League shares Information we collect

We may share your Information with third parties so we can provide our services to you. If we need to share your Information with third parties, we will limit the Information to the minimum amount necessary to ensure the provision and quality of the Services we offer you. We share your Information with third parties as follows:

Contractors – We may disclose your Personal Information with contractors that work on our behalf and assist us in providing and supporting the services we offer.

Third Party Providers – We share Information with third parties that help us operate, provide, improve, integrate, customize and support our Platform and Services we offer to you such as:

  • Cloud hosting services;
  • Customer service platform;
  • Credit card processing;
  • Health concierge;
  • Connector services and data integration.

If a Third Party Provider needs to access Information about you to perform services on our behalf, they do so under close instruction from us, including policies and procedures designed to protect your Information. Our Third Party Providers undergo a thorough security and privacy review as a part of the evaluation process and then regular SOC1, SOC2 and/or ISO/IEC 27001 audit reviews thereafter. In the event these audits have material findings that present risks to League or our clients, we work closely with the vendor to track their remediation efforts until the issue has been resolved.

Insurance Carriers – We’ll automatically feed your benefits elections and status/profile updates to your Insurance Carriers for faster, more accurate enrollment and to determine eligibility. When you reach out to us for support about your eligibility or coverage, we may share this Information with your Insurance Carriers on your behalf.

Your Employer – We may share Information with your employer in an anonymous and aggregated or group format only. Any data sharing practices going beyond anonymous, aggregated or group format need your explicit consent. Even with your consent, we will only share de-identifiable data with your Employer. We will use procedures compliant with applicable privacy laws and regulations to ensure that all identifiable data and dimensions have been removed from the data sets and reports provided to your Employer. Please note that your Employer may combine the information we provide with other data available to them and use the combined data at their discretion, including to evaluate the overall program, as well as to provide additional benefits, programs and services. Your Employer’s use of the data and reports are not controlled by us, and this Policy does not cover your Employer’s data use and sharing practices. It is Your Employer’s responsibility to comply with its own privacy policy and applicable laws. We encourage you to review your Employer’s data practices with your Human Resources team.

Service Providers – We may share your information with Service Providers you choose through the League Platform including our Marketplace. When you book an appointment and buy a product through the Platform, we automatically provide your first and last name as well as a Service or product description to the Service Provider. We want everyone to feel safe and cared for when they visit League Marketplace or use a Service Provider offered through the Platform. So before we admit any new Service Providers, we thoroughly review their practices to make sure they’re in line with our standards. We also regularly review our Service Providers to make sure they stay compliant.

Devices and Third Party Apps – You may choose to add new functionality and Information to your account by connecting Devices and Third Party Apps to your account. If you do, you may give these Devices and Third Party Apps access to your account and Information about you like your name and email address, and any content you choose to use in connection with those apps and devices. Device and Third Party App policies and procedures are not controlled by us, and this Policy does not cover how Devices and Third Party Apps use your Information. We encourage you to review the privacy policies of third parties before connecting to or using their applications or services to learn more about their privacy and information handling practices. If you object to Information about you being shared with these third parties, please disable the device or app within your League account settings.

Law Enforcement, Governmental Authorities and Agencies – We may disclose information we have collected from and about you – including Personal Information – if we believe in good faith that it’s necessary to:

  • comply with relevant laws or to respond to subpoenas or warrants served toon us;
  • enforce our Terms of Service and Privacy Policy;
  • protect and defend our rights or property, our Customers, our Suppliers, or other third parties; or
  • in certain situations, abide by lawful requests by public authorities to disclosure of Personal Information, including to meet national security or law enforcement requirements.

Merger, Sales and Acquisition – In the event that we (a) undergo reorganization or (b) that League is sold to a third party, any Personal Information we hold about you may be transferred to the re-organized entity or third party, in accordance with applicable laws and regulations. If an acquisition like this occurs, the new entity will continue to use your Personal Information within the limits of this Policy, to continue delivering your service.

Is my Personal Information and other data secure?

At League, we take security and privacy very seriously. We’re committed to protecting your data, and our highest priority is keeping your sensitive information – especially your personal health information – safe. We follow strict security and compliance standards not only because we need to meet specific regulations, but because we consider it one of the most important things we can do for you.

Security is at the heart of every process and every technology we use across all our teams at League. The League Platform is regularly audited to make sure it complies with security, availability and confidentiality requirements for managing client data.

Communication with League should always be done through the League Platform where the information is encrypted. While League makes every effort to secure all communications within our control and in our Platform, please be advised that no method of delivery is absolutely secure and any communication of Personal Information may be accidentally or deliberately intercepted by third parties. No company, including League, can fully eliminate security risks associated with your Information. While we strive to protect your Information, we cannot guarantee its security.

To help protect yourself and your Information, choose a unique password for our Platforms and do not use a password that you would use on any other website or online service. You are responsible for the security of your Information that you transmit to us or view, download or otherwise access when using public or otherwise unsecured networks. If you use a mobile device to accept your authorization code, you should have the ability to remotely wipe the phone in the event that your device is lost or stolen.

Who at League has access to my Information?

Your Personal Information is maintained on League’s infrastructure or those of third-party providers. For that reason, League employees and contractors have access to your Information so we can provide you with quality services, including Member support and Health Concierge services. Our employees and contractors are obligated to respect the confidentiality of your Personal Information and are only authorized to access your Information as necessary to provide you with Services or support.

In the event that we (a) undergo reorganization or (b) that League is sold to a third party, any Personal Information we hold about you may be transferred to the re-organized entity or third party, in accordance with applicable laws and regulations. In the event of an acquisition, the new entity will continue to use your Personal Information within the limits of this Policy, to continue delivering your service.

Can I correct or update my Information?

Yes. If your Personal Information changes over time or you realize your Information is outdated or incorrect, you have a right to be able to update or correct it. You may update or correct the Information by changing it right in the Platform. If you aren’t able to update or correct the Information right in your account, you can reach out to us through the Chat function in the Platform. You can also contact us at help@league.com to request that we update or correct the Information for you. We will respond to your request within a reasonable timeframe.

Can I find out what Information League has collected about me?

Yes. All our Members, no matter where they live, except in specific circumstances identified by local laws, have a legal right to access the Information we have collected about them and an account of its use and disclosure. You can request a copy of all the Information and data we hold about you. We’ll give you a copy of the data in a standard format through a secure channel. To make this request, reach out to us at help@league.com. We will respond to your request within a reasonable timeframe.

For California residents – In accordance with the California Civil Code Section 1798.83, you may contact us at the address below to request certain information about the disclosure of Personal Information to third parties for their direct marketing purposes.

Can my Information be deleted?

Please note that we may not be able to delete your Information without also deleting your Member account. You may terminate your account at any time by submitting a deletion request to help@league.com. Once your account is terminated, you will no longer be able to access or use your health and wellness benefit accounts offered through the League Platform as well as Programs and Services.

Please note that we will only retain your Personal Information for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements. To figure out the appropriate retention period for Personal Information, we consider the amount, nature and sensitivity of the Personal Information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your Personal Information and whether we can achieve those purposes through other means, the applicable legal requirements, and regulatory retention periods.

Can I request that League restrict processing for some of my Information?

Because of the type of Services we offer, we can’t accommodate requests to restrict the processing of certain sets of Information. You, however, will be able to limit the Information added to your profile based on your use of Services and participation in Programs, the Devices and Third Party Apps you connect to your account and the consent you provide for any data sharing practices. If you want us to stop processing parts of your Information, you can request that all data be deleted through the process above. You can also limit the Personal Information provided to us as you participate in the Services and programs offered to you.

If you have connected any Devices or Third Party Apps, you can manage the data sharing and processing setting for each of them through your League account.

If you’ve provided your consent for additional data sharing, you can withdraw your consent at any time. To do so, please reach out to us through the Chat function in the Platform or by contacting help@league.com.

If you provide your consent, we use your Information to send newsletters, surveys, offers and promotional materials that may be of interest to you and tailored to your individual health and wellness goals. You may opt out of receiving such messages from League by following the opt out instructions in these messages. If you opt out, we may still send you non-commercial electronic messages, such as messages about your account or our ongoing business relations.

Where is my Information being transferred?

League is headquartered in Canada, has an office in the United States, and uses Third Party Providers in other countries. Your Personal Information may be transferred to the United States or other locations outside of your state, province, country, or other governmental jurisdiction where the privacy laws may not be as protective as those in your jurisdiction. League takes appropriate steps to protect your privacy and implement reasonable security measures to protect your Personal Information in storage and transmission. We also enter into contracts with our Third Party Providers that require them to treat Personal Information in a way that’s consistent with this Policy.

I am an EU resident – What do I need to know?

This is for residents of the European Union (“EU”) including the European Economic Area (“EEA”) countries of Iceland, Liechtenstein, Norway and, where applicable, Switzerland. Our processing of Personal Information of Members who are in the EU is governed by the General Data Protection Regulation (“GDPR”). The GDPR requires us to give you certain information about your data and rights:

Personal information – References to “Personal Information” and “Information” in this Privacy Policy are equivalent to “personal data” governed by the GDPR.

Data Controller – League is the data controller of Personal Information provided to, or collected by or for, our Platform and Services. But we may act as a data processor on behalf of your employer for Personal Information that we process on their behalf when providing the Platform and Services.

Legal basis for processing – We only use your Information as permitted by law. We are required to inform you of the legal basis of our processing of your Personal Information, which are described in this Policy. If you have questions about the legal basis of how we process your Information, reach out to us at privacy@league.com.

Use for new purposes – We may use your Personal Information for reasons not described in this Policy where permitted by law and the reason is compatible with the purpose for which we collected it. If we need to use your Personal Information for an unrelated purpose, we will notify you and explain the legal basis.

Cross-Border Data Transfer – Whenever we transfer your personal information out of the EU to countries not deemed by the European Commission to provide an adequate level of protection, the transfer will be based on one of the following safeguards recognized by the European Commission as providing adequate protection for Personal Information:

Contracts approved by the European Commission which impose data protection obligations on the parties to the transfer. For details, see European Commission Model contracts for the transfer of Personal Information to third countries.

For transfers to Third Party Providers in the United States, ensuring they participate in the EU-US Privacy Shield Framework

Please reach out to us if you want more information on the specific mechanism we use when transferring your Personal Information out of the EU.

Your rights to access, correct, restrict or delete your Personal Information and object to processing – You have the right to request access to your Personal Information, to have your Information corrected, restricted or deleted, and to object to our processing of your Personal Information. You also have the right of data portability, which means that you can request that we provide you (or a third party you designate) with a transferable copy of the Personal Information that you have provided to us. Your rights may be subject to various limitations under the GDPR. If you wish to exercise any of these rights, or if you have any concerns about our processing of your Personal Information, please contact us in any of the ways listed in the section “Contact Us” below.

Right to Lodge a Complaint with a Supervisory Authority – You have the right to file a complaint about our processing of your Personal Information with your national (or in some countries, regional) data protection authority.The EU Commission has a list here: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

Privacy of Minors

Individuals under the age of eighteen (18) should not transfer any Personal Information to us. We will neither intentionally ask for Information of users under the age of eighteen, nor process their Personal Information.

Additional notice to residents of the United States: We do not intentionally collect or maintain Information from visitors of the website or Platform who are under thirteen (13) years old.

Dispute Resolution

If you believe that League has not adhered to this Privacy Policy, please contact League by email at privacy@league.com. We’ll do our best to make things right. If you feel that your complaint hasn’t been fully addressed, let us know and we’ll investigate further.

If you’d rather file an anonymous complaint, you can do so through our whistleblower hotline provided by an independent Third Party Provider. You always have the option to remain completely anonymous. Complaints can be made 24/7/365 through one of the following channels:

Phone – 1-866-921-6714 (toll free number in North America)
Email – league@integritycounts.ca
Web Portal – https://www.integritycounts.ca/org/league
Fax – 1-604-926-5668
Mail – PO Box 91880, West Vancouver, British Columbia V7V 4S4 Canada

For EU Residents – To lodge a complaint with a supervisory authority under the GDPR, please see “I am an EU resident – What do I need to know?” above.

Contact US

If you have questions or concerns about this Privacy Policy, please contact us at:

Attention: Privacy Officer – Information Security & Privacy
League, Inc.
225 King St W, Suite 800, Toronto, Ontario M5V3C6
privacy@league.com

Changes to This Privacy Policy

If this Privacy Policy changes, the revised policy will be posted online and if we make material changes, you may be notified by email. Your continued use of the Platform after the effective date constitutes your acceptance of the amended Privacy Policy. Any amended Privacy Policy supersedes all previous versions. Please check back periodically, and especially before you provide any personal information. This Privacy Policy was last updated on October 30, 2019. You can find all versions of our Privacy Policy here.

Last updated: December 4th, 2017

League Inc. (“us”, “we”, or “League”) is committed to privacy and the protection of your information. By using League’s website, mobile and other applications, and related Services made available through the Apple App Store, the Google PLAY Store, or otherwise on the Internet (together, the “League Applications” or “Applications”), you acknowledge that you accept the practices and policies outlined in this Privacy Policy (“Privacy Policy“). Unless otherwise defined herein, capitalized terms shall have the meanings assigned to such terms set forth in the Terms of Service and which incorporate this Privacy Policy by reference.

  1. What this Privacy Policy covers?

We created this Privacy Policy to give you confidence as you use the League Applications and to demonstrate our commitment to the protection of privacy. Thus this Privacy Policy describes the purpose for which you provide information to us  when you use the League Applications and how we use and disclose that information and the risks associated with providing the information to us.

This Privacy Policy is only applicable to the League Applications. This Privacy Policy does not apply to any other website or digital service that you may be able to access through the Applications or any website or digital services of League’s business partners, each of which may have data collection, storage and use practices and policies that may differ from this Privacy Policy. We are not responsible for the actions or privacy practices of these third-party websites or digital services; please consult those websites and digital services directly to understand their privacy practices. Your use of the League Applications is governed by this Privacy Policy and the Agreement (as the term “Agreement” is defined in our Terms of Services).

BY USING LEAGUE APPLICATIONS, YOU ARE ACCEPTING THE TERMS OF THIS PRIVACY POLICY AND OUR TERMS OF SERVICES, AND YOU ARE CONSENTING TO OUR COLLECTION, USE, DISCLOSURE, RETENTION, AND PROTECTION OF YOUR INFORMATION AS DESCRIBED IN THIS PRIVACY POLICY. IF YOU DO NOT CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED IN THIS PRIVACY POLICY, PLEASE DO NOT USE LEAGUE APPLICATIONS.

  1. What kinds of information do we collect?

Personal Information

Some of the Services require us to learn more about you so that we can best meet your needs. When you access the League Applications, we may ask you to voluntarily provide us certain information that personally identifies you or could be used to personally identify you. Personal Information includes (but is not limited to) the following categories of information:

  • Contact data (such as your name, email address, home address and phone number);
  • Demographics (such as your gender, location, postal/ ZIP code and device related information);
  • Insurance data (such as insurance carrier, insurance plan, group ID and insurance claims);
  • Wellness and medical data (such as the Service Providers you have chosen through the Application, insurance claims and conversations with League Concierge);
  • and other identifying information that you voluntarily choose to provide to us, including without limitation unique identifiers such as passwords, photos, images, reviews and Personal Information in emails, faxes and letters that you send to us.

We may collect additional information, which may be Personal Information, as otherwise described to you at the point of collection or pursuant to your consent. You may still access and use some services of the League Applications if you choose not to provide us with any Personal Information, but features that require your Personal Information will not be accessible to you.

If you create an account using, or otherwise connect your account to, a social networking services account (e.g. Google, Facebook) we may also collect information provided to us by such social networking service including for example your name; email address; birthday; geographic location; interests; profile picture; gender; networks; user ID; list of friends; likes, comments and any information you have made public and made accessible to us on such social networking account. We may combine information received from you when using the League Applications with information from external sources.

Health Information

You may also provide, and we may collect, certain demographic, health and/ or health-related information. This information may be protected by the Personal Information Protection and Electronic Documents Act which provides specific protections for the privacy and security of health information and restricts how health information is used and disclosed. These uses, disclosures, and risks are described in this Privacy Policy.

Payment Information

Should you provide us with your credit card information, this information is processed by our payment processing partner, such as Braintree (https://www.braintreepayments.com). Our payment processing partner collects your voluntarily provided payment information necessary to process your payment or claim. Such partner’s use and storage of information it collects is governed by its applicable terms of service and privacy policy. When you link your bank account to your League account to receive employee benefits, you authorize us, on behalf of your employer, to submit your bank account information to the financial institution that will process your employee benefit payment.

Traffic Data

We may automatically collect certain data when you use the League Applications. Data includes (but is not limited to) the following types of information:

  • Internet protocol address;
  • Geolocation information;
  • Device types, device model and manufacturer, identifiers, and operating system type and version;
  • Browser(s) and language settings;
  • Operating system and application version;
  • Referring webpage or other source through which you accessed the League Applications;
  • and other statistics and information associated with the interaction between your browser or device and the League Applications (collectively “Traffic Data”).

Depending on applicable law, some Traffic Data may be Personal Information.

Information From Other Sources

We may supplement the information we collect with information from third parties and add it to your account. This information may include, but is not limited to, demographic information, additional contact information, group affiliations, occupational information, background information, and more.

  1. How we collect information?

We collect information when you use and interact with the League Applications, and in some cases from third party sources. Such means of collection include (but are not limited to):

  • When you sign-up for and use the Applications;
  • When you voluntarily provide information in free-form text boxes through the League Applications or through responses to surveys, questionnaires and the like;
  • If you download and install League Applications we make available, we may receive and collect information transmitted from your device for the purpose of providing you the relevant Services, such as information regarding when you are logged on and available to receive updates or alert notices;
  • If you download League Applications or use a location-enabled browser, we may receive information about your location and device, as applicable;
  • If you chat with our League Concierge, customer support team, or a Service Provider; and
  • Through cookies, web beacons, analytics services and other tracking technology, as described below.

You are responsible for ensuring the accuracy of the information you submit to League. Inaccurate information will affect your experience when using the League Applications and our ability to contact you as described in this Privacy Policy. You may also be asked to provide authorization for uses of information in addition to what is in this Privacy Policy when you use certain features of the League Applications.

Cookies and other Tracking Technologies

We use cookies, web beacons, URL information or similar technologies to analyze trends, administer the League Applications, track users’ movement around the Applications and to gather demographic information about our user base as a whole. We collect this information to customize and improve your experience with the League and improve the League Application.

Cookies are small pieces of information that a website sends to your computer’s hard drive while you are viewing a website. We may use both session cookies (which expire once you close your web browser) and persistent cookies (which usually stay on your computer until you delete them) to provide you with a more personal and interactive experience. Web beacons are digital images that are used to log information on the Applications or in our emails. We use Web beacons to manage cookies, count visits, and to learn what marketing works and what does not. We also use Web beacons to tell if you open or act on our emails.

We may use third party analytics service providers and advertising partners that may also collect information about your online activities over time and across different web sites when you use our Applications, including as described in this Privacy Policy. This Policy does not apply to and we are not responsible for those other parties. Third party analytics services may use cookies and web beacons through our Applications (for example, Google Analytics, ChartBeat, and Mixpanel or similar services), platform device identifiers and software agents (for example, Flurry Analytics, Urban Airship, and Mixpanel or similar services) to provide us with information about how you use and interact with our Applications. We encourage you to review the privacy policies of these third parties to learn about your choices about information these types of services collect from you.

We and other third party providers of cookies and tracking tools give you choices about the use of online tracking mechanisms, including those used to track of your online activities over time and across different websites and online services. Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies from League or from third parties. If you choose to remove or reject cookies, this could affect certain features of the League Applications and the Applications may not function properly.

We use Google Analytics, a web analytics service provided by Google, Inc., on our Applications. Google Analytics uses cookies or other tracking technologies to help us analyze how users interact with and use the Applications, compile reports on the Applications’ activity, and provide other services related to League Applications activity and usage. The technologies used by Google may collect information such as your IP address, time of visit, whether you are a return visitor, and any referring website. The information generated by Google Analytics will be transmitted to and stored by Google and will be subject to Google’s privacy policies. To learn more about Google’s partner services and to learn how to opt out of tracking of analytics by Google click here.

Many of the third party advertisers that place tracking tools on our Applications are members of programs that offer you additional choices regarding the collection and use of your information.  You can learn more about the options available to limit these third parties’ collection and use of your information by visiting the websites for the Network Advertising Initiative and the Digital Advertising Alliance, as well as the webpages for Facebook’s ad preferences tool and privacy policy.

Similarly, you can learn about your options to opt-out of mobile app tracking by certain advertising networks through your device settings. For more information about how to change these settings for Apple, Android or Windows devices, see:

Please note that opting-out of advertising networks services does not mean that you will not receive advertising while using League Applications, nor will it prevent the receipt of interest-based advertising from third parties that do not participate in these programs. It will, however, exclude you from interest-based advertising conducted through participating networks, as provided by their policies and choice mechanisms.

However, while we and others give you choices as described in this Privacy Policy, there are many ways in which web browser signals and similar mechanisms can indicate your choice to disable tracking, and our League Applications may not be aware of or be able to honor every mechanism. Note that if you choose to remove cookies, you may remove opt-out cookies that affect your advertising preferences.

Do Not Track Signals

Some Internet browsers include the ability to transmit “Do Not Track” (“DNT”) signals. At this time, however, the definitions and meanings of DNT signals and responses, and the correct behavior regarding DNT signals, are not defined. Until such time as the standard is finalized, our Applications do not process or respond to DNT signals. To learn more about DNT, please visit donottrack.us.

  1. How do we use this information?

We use your information to provide the Application and Services and to help improve the Applications and Services, to develop new features and Services, and to advertise (for example, to display League ads on other websites). Such use may include but is not limited to:

  • Provide you with the products, Services and information you request;
  • Facilitate the creation of, administer and secure your account;
  • Facilitate payment, using third party payment processing services;
  • Identify you as a user in our system;
  • Providing, maintaining, administering or expanding the Services, performing business analyses, or for other internal purposes to support, improve or enhance our business, the Services, and other products and services we offer;
  • Responding to correspondence that we receive from you;
  • Develop new products and services;
  • Customize any advertising you view and recommend content;
  • Fulfill your requests and respond to your inquiries;
  • If you subscribe to email updates, to send newsletters, surveys, offers and promotional materials related to the League Applications and for other marketing purposes of League using your contact information;
  • Send administrative communications about the League Applications and Services;
  • Conduct research and measurement activities;
  • Fulfilling our legally required obligations, such as preventing, detecting and investigating security incidents and potentially illegal or prohibited activities;
  • Protect our rights and the rights of other users; and
  • As otherwise described in this Privacy Policy or in notices we provide to you.
  • We may also use your information to verify your geographic location. We may use your geographic location data to personalize our Services, to recommend content, and/or to determine whether the information you have requested is available in your location.

We may use the information from one portion of the Applications on other portions of the Applications, and we may combine information gathered from multiple portions of the Applications into a single record.  We also may use or combine information that we collect offline or we collect or receive from third-party sources for many reasons, including to enhance, expand, and check the accuracy of our records. Additionally, information collected from a particular browser or device may be used with another computer or device that is linked to the browser or device on which such information was collected.

  1. How is this information shared?

Except as otherwise stated in this Privacy Policy, we do not use or share your information with third parties, unless you ask or authorize us to do so. We will not sell or rent any of your information to third parties for their marketing purposes. We only share your information with third parties as follows:

  • We may share your information with Service Providers whom you choose through the League Applications. When you use League Application to book an appointment, the application automatically sends your name to the Service Provider so that the Service Provider can communicate with you through the League Application. You chose how and when you communicate with the Service Provider.
  • We may share your information with the insurance provider identified to us to determine eligibility and cost-sharing obligations, and otherwise obtain benefit plan information on your behalf.
  • We may share your information with others who perform services on our behalf (including, but not limited to: advisors, IT providers, contractors and consultants).
  • We may transfer your information to another company in connection with a merger, sale, acquisition or other change of ownership or control by or of League (whether in whole or in part). Should one of these events occur, we will make reasonable efforts to notify you before your information becomes subject to different privacy and security policies and practices.
  • In the event of insolvency, bankruptcy, or receivership, information may be transferred or disclosed as a business asset.
  • We may also share data with our partners, advertisers, and other third parties which has gone through an anonymization process and been aggregated.
  • Where you have agreed to become affiliated with a League partner (for example, by taking advantage of a partner specific promotion), we may disclose your information with that partner.

We also may need to disclose information we collect about you if we determine in good faith that such disclosure is needed to: (1) comply with or fulfill our obligations under applicable law, regulation, court order or other legal process; (2) protect the rights, property or safety of you, League or another party; (3) enforce the Agreement or other agreements with you; or (4) respond to claims that any posting or other content violates third-party rights.

We may disclose information that has been de-identified and/or aggregated at our discretion. We will not disclose Service Provider calendar information (including names, or other information), or use Service Provider external calendar information other than using appointment times to avoid double-booking, and to make the display of a combined calendar convenient for Service Providers.

The League Applications may allow you to connect and share your actions, comments, content, profile, and information publicly or with other people. You may control the information shared via controls built into the League Applications. Please be mindful of your own privacy needs as you choose who to connect with and what to share and make public. We cannot control the privacy or security of information you choose to make public or share with others and we disclaim any warranty, representation or covenant as to any other party’s treatment of your information.

The League Applications may also provide you with the option to share certain information with social networking services like Facebook, Google, or Twitter. We are not responsible for the use or re-sharing by others of any of your information once it is made public. If you do not want your information to be made public, you should not use the League Applications in this manner and/or you should adjust your privacy settings on the applicable social networking service accordingly. We are not responsible for and we do not control these social networking services’ privacy practices. Please review the applicable privacy policy for information about how they use your information. If you mistakenly post information in our community areas and would like it removed, you can send us an email to request that we remove it by following the process described below in the section titled, “Access to and Corrections of Your Information”. In some cases, we may not be able to remove your information.

  1. Security of Information

The security of your information is important to us. We endeavor to follow generally accepted industry standards to safeguard and secure your information during data collection, transmission and storage, by using various methods of protection, appropriate to the sensitivity of the information. The methods of protection include but are not limited to:

  • Physical measures (such as restricted access to systems and offices);
  • Technological measures (such as passwords, two factor authorization, encryptions, firewalls, and audits);
  • Organizational controls (such as security clearances, security questions, limiting access on a “need-to-know” basis, staff training, confidentiality agreements, policies and procedures); and
  • Contractual confidentiality covenants.

League will also employ care in the disposal or destruction of information to protect against unauthorized parties from gaining access to the information.

Communication with League should be done through the League Application where the information is encrypted both in transit and at rest.   While League makes every effort to secure all communications within our control and on our premises, please be advised that no method of delivery is absolutely secure and any communication of personal information may be accidentally or deliberately intercepted by third parties.  

No company, including League, can fully eliminate security risks associated with your information. While we strive to protect your information, we cannot guarantee its security. To help protect yourself and your information, choose a unique password for our League Applications and do not use a password on our League Applications that you would use on any other website or online service. You can help protect the privacy of your own information by using encryption and other techniques to prevent unauthorized interception of your information.  You are responsible for the security of your information that you transmit to us or view, download, or otherwise access when using unencrypted, public or otherwise unsecured networks. If you use a mobile device to accept your authorization code, you should have the ability to remotely wipe the phone in the event that your device is lost or stolen.

  1. Dispute Resolution for Canadian Members

If you believe that League has not adhered to this Privacy Policy, please contact League by e-mail at privacy@league.com. We will do our best to address your concerns. If you feel that your complaint has been addressed incompletely, we invite you to let us know for further investigation. Following the conclusion of our investigation, dispute, controversy or claim arising out of or relating to this Privacy Policy, or the breach, termination or invalidity thereof shall be finally resolved by confidential arbitration pursuant to the Ontario Arbitration Act and the arbitration procedures set out therein as modified by this section. Each party shall bear its own legal and other fees relating to the arbitration. The arbitration tribunal’s fees and expenses and shall be borne in equal shares between the parties. The arbitration award will be final and binding, and will not be subject to any appeal. The seat of the arbitration shall be Toronto, Ontario, Canada. In-person hearings and meetings may take place wherever the parties agree to hold them. Failing agreement, they will take place in Toronto. Except as required by applicable law, the parties agree to maintain the confidentiality of the arbitration proceedings and the terms of any award granted pursuant thereto.

  1. Information Choices

If you have consented to receiving promotional and other commercial electronic messages from League, you also consent to League’s use of your information to send you such messages. You may opt out of receiving such messages from League by following the instructions in those messages. If you opt out, we may still send you non-commercial electronic messages, such as messages about your accounts or our ongoing business relations.

To make changes to your contact preferences or information, to request deletion of content you post, or to opt-out of sharing your information with third parties, you can either use our Applications directly or send a request by email to privacy@league.com. League makes reasonable efforts to completely remove your information or content but cannot ensure complete or comprehensive removal of the content or information posted on the Services. We will retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

In terms of geolocation information, most mobile devices allow you to control or disable the use of precise location services by any application on your mobile device through the device’s settings’ menu.

  1. Access to and Corrections of Your Information

You have the right to know what information League has about you and to correct any inaccuracies. If you are a registered user of the League Applications, you can modify certain information by logging in and accessing your account. If you want to contact us directly or if you are no longer a registered user, direct any such requests by email to privacy@league.com, or by one of the other means listed below under the heading “League Contact Information”.

Please note that we may not be able to delete your information without also deleting your user account.  You will not be permitted to examine the information of any other person or entity.  In order to verify your identity, you may be required to provide us with information prior to accessing any records containing information about you.  We may not accommodate a request to change or delete information if we believe doing so would violate any law or legal requirement, or cause the information to be incorrect.

  1. Information Provided on Behalf of Children

The League Application and Services are not intended for use by children. We will not knowingly collect information from users under the age of 18. If we discover that we have collected information from a user under the age of 18, we will delete such information. By accessing, using and/or submitting information to or through the Services, you represent that you are not younger than age eighteen (18).

  1. Link to other Web Sites

The Applications may contain links to other web sites that are not owned or controlled by League. The provision of such links is for your convenience and does not signify our endorsement of such web sites or location or its contents. We have no control over, do not review and are not responsible for the privacy policies of or content displayed on such other web sites. Please be aware that the terms of our Privacy Policy do not apply to any outside web sites.

  1. Your California Privacy Rights

If you are a California resident, California law permits you to request certain information regarding the disclosure of your information by us to third parties for the third parties’ direct marketing purposes.  To make such a request, please send your request, by mail or email, to:

ATTENTION: Privacy Officer
League, Inc.
225 King St W, Suite 800, Toronto, Ontario M5V 3C6

  1. Changes and Updates to this Privacy Policy

The effective date of this Privacy Policy is set forth at the top of this webpage. We will notify you of any material change by posting notice in the League Applications. Your continued use of the Applications after the effective date constitutes your acceptance of the amended Privacy Policy. We encourage you to periodically review this page for the latest information on our privacy practices. Any amended Privacy Policy supersedes all previous versions. IF YOU DO NOT AGREE TO FUTURE CHANGES TO THIS PRIVACY POLICY, YOU MUST STOP USING THE SERVICES AFTER THE EFFECTIVE DATE OF SUCH CHANGES.

  1. League Contact Information

Please contact League with any questions or comments about this Privacy Policy, your information, our third-party disclosure practices, or your consent choices privacy@league.com.

You may also contact us at:

ATTENTION: Privacy Officer
League, Inc.
225 King St W, Suite 800, Toronto, Ontario M5V 3C6