Privacy Policy

Account details: your name, surname, email address, mobile number, date of birth and gender, and the studio you select as your home studio.

Health and body information: the measurements recorded at your sessions (circumference readings, weight, body composition) and any condition you disclose on the indemnity. This is special personal information under POPIA and is treated accordingly.

Activity: your bookings, session history, credit balances, memberships and invoices.

Technical data: standard server logs and, where you consent, analytics about how the website is used.

To deliver your sessions: taking bookings, tracking credits and memberships, and letting your consultant plan and adjust your programme.

To measure your progress: recording and comparing your measurements so change over a block is visible rather than estimated.

To communicate: booking confirmations, reminders and cancellation notices by email or SMS, and responses to enquiries you send us.

To run the business: invoicing, payment reconciliation, and aggregate reporting on bookings and sales. Reporting uses totals, not individual records.

Google Firebase, which hosts our database and authentication.

Paystack, which processes payments. They receive your email address and the amount, and handle your card details directly. We never see them.

Our SMS provider, which receives the phone number and message content needed to send a booking notification.

Studio staff at the branch you attend, who need your details to deliver your sessions.

We do not sell your personal information, and we do not share it for third-party advertising.

Account and session records are kept while your account is active and for five years afterwards, which is the period we are required to retain financial records.

Measurement history is kept while your account is active. You may ask us to delete it at any time without closing your account.

You may access the personal information we hold about you, correct it, ask us to delete it, or object to a particular use. Much of it you can view and edit yourself in your dashboard.

You can opt out of marketing messages at any time. Transactional messages about a booking you have made are not marketing and will continue while the booking stands.

To exercise any of these rights, contact us at roll@bodyactiv.co.za. If you are not satisfied with our response you may complain to the Information Regulator of South Africa.

Access to member records is restricted by role, and privileged operations (credit adjustments, payment confirmation, membership activation) go through authenticated server routes.

No system is perfectly secure. If a breach affects your personal information we will notify you and the Information Regulator as POPIA requires.