Privacy Policy

FITFAB FITNESS ("we", "us", "our"), based in Worcester, Western Cape, respects your privacy and is committed to protecting your personal information in accordance with South Africa's Protection of Personal Information Act (POPIA). This policy explains what information we collect, why, and how we handle it.

1. Information We Collect

When you create an account or use our services, we may collect:

• Your name, email address, phone number, ID number, age, and gender
• A profile photo, if you choose to upload one
• Membership details — your package, tariff, membership number, join date, and account status
• Payment information — the amount paid, your reference, and proof-of-payment documents you upload
• Health and fitness information you choose to log — weight, body measurements, and achievements
• Class bookings and gym access bookings you make
• Attendance records when you check in to classes
• Messages you send us through our Contact Us form
• Your acceptance of our liability waiver, including the date and time

2. Why We Collect It

We use your information to manage your membership, process payments, run classes and bookings, track your fitness progress if you choose to log it, communicate important updates (like payment reminders or announcements), respond to enquiries, and meet our legal and safety obligations as a fitness facility.

3. Who We Share It With

We don't sell your information. We do use trusted third-party service providers to run our systems, who process data on our behalf:

• Supabase — securely stores our database, files, and login information
• Netlify — hosts our website and runs background functions (like sending reminder emails)
• Resend — sends transactional emails such as payment reminders and enquiry notifications
• Google (Gemini AI) — powers our AI Assistant and Daily Workout features. Prompts sent to Google's free-tier AI service may be used by Google to improve their models. Please avoid sharing sensitive personal information in AI Assistant conversations beyond what's needed for a useful response.

4. Photos and Gallery

Class photos may be taken and displayed publicly on our website's gallery, as described in our liability waiver. If you'd prefer not to appear in these photos, please let a staff member know and we will do our best to accommodate this and remove any existing photos of you on request.

5. How Long We Keep Your Information

We retain your information for as long as your membership is active, and for a reasonable period afterward to meet legal, tax, and administrative requirements. You can request deletion of your account at any time, subject to any records we're required to keep by law.

6. Your Rights

Under POPIA, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information, subject to legal retention requirements
• Object to certain uses of your information
• Lodge a complaint with the Information Regulator of South Africa if you believe your rights have been infringed

7. Security

We take reasonable technical and organisational measures to protect your information, including access controls that ensure only you and authorised staff can see your personal data. However, no system is completely secure, and we cannot guarantee absolute security.

8. Changes to This Policy

We may update this policy from time to time. Continued use of our services after changes are posted means you accept the updated policy.

9. Contact Us

If you have questions about this policy or wish to exercise any of your rights, please reach out via our Contact Us page.