Privacy Policy

At DW Fitness ("we", "us", "our"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines our practices concerning the collection, use, and handling of your personal data in compliance with the Personal Data (Privacy) Ordinance (Cap. 486) of the laws of Hong Kong.

1. Information We Collect

We collect personal data that is necessary for us to provide our services to you. The types of information we collect include:

• Account Information: When you create an account, we collect your name, email address, and profile information, managed through our authentication provider, Clerk.
• Payment and Transaction Information: When you purchase a course, bundle, or book a session, we collect transaction details. Payments are processed by our third-party payment processor, Stripe. We do not store your full credit card details.
• Booking and Enrollment Information: We collect details of the courses you enroll in, your progress, and the fitness sessions you book, including date, time, and any messages you provide.
• Communication Information: If you contact us via our contact form or subscribe to our newsletter, we collect your name, email, and the content of your message.
• Technical Information: We automatically collect information such as your IP address, browser type, and device information for analytics and security purposes.

2. How We Use Your Information

Your personal data is used for the following purposes:

• To provide, operate, and maintain our services.
• To process your payments and manage your bookings, enrollments, and credit bundles.
• To communicate with you, including sending booking confirmations, updates, and responding to your inquiries.
• To send you marketing communications, such as our newsletter, where you have provided your explicit consent.
• To improve our website and services through analysis of usage data.
• To maintain the security and integrity of our platform.

3. Data Sharing and Disclosure

We do not sell or rent your personal information. We may share your data with trusted third-party service providers who assist us in our operations, including:
- Authentication: Clerk
- Payment Processing: Stripe
- Email Delivery: Resend
- Content Management & Hosting: Sanity, Vercel
These providers are contractually obligated to protect your data. We may also disclose information if required by law or to protect the rights and safety of our users.

4. International Data Transfer

Our service providers may be located outside of Hong Kong. When we transfer your data internationally, we ensure that it is protected to a standard comparable to that required under the PDPO.

5. Your Rights and Choices

Under the PDPO, you have the right to:
- Access the personal data we hold about you.
- Request correction of any inaccurate data.
- Request deletion of your data, subject to legal and contractual restrictions.
- Opt-out of direct marketing communications at any time.
To exercise these rights, please contact us.

6. Data Security and Retention

We implement robust security measures to protect your personal data from unauthorized access, use, or disclosure. We retain your data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by law.

7. Contact Information

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: privacy@dwfitness.com