Privacy Policy

Last updated: March 2024

Effective Date: March 2024

1. Introduction

This Privacy Notice explains our online and offline collection, use, and disclosure of information that identifies or could be used to identify you (“Personal Data”). This Privacy Notice applies to Liaqa Fitness and our controlled affiliates and subsidiaries (collectively, “Liaqa,” “we,” “our,” or “us”).

Third-party services that we integrate with are governed under their own privacy policies.

Liaqa is dedicated to connecting fitness enthusiasts and professionals across the MENA region and globally, providing a seamless, secure digital platform for fitness and wellness services. Our commitment to your privacy and data protection is paramount as we navigate the complexities of international privacy laws, including UAE and KSA PDPL regulations. We strive to ensure that your personal information is handled with the utmost care, maintaining transparency and security in every interaction within our diverse user community.

2. Scope and Consent

Our Privacy Policy governs the collection, use, and sharing of personal information across all our services. By accessing or using our platform, you consent to these practices. We recognize our user base is global, and we’re committed to complying with international privacy laws, including those in the UAE, KSA, and beyond. This policy applies to interactions within our platform and with our US-based partner, PerFIcT Inc, ensuring a unified approach to data protection and user consent across jurisdictions.

3. Information Collection

Our platform, in collaboration with PerFIcT Inc, collects a wide range of information to enhance service delivery and user experience. This data collection falls into two main categories: user-provided data and automatically collected data.

User-Provided Data includes, but is not limited to:

Personal Identification Information: Name, email address, phone number, and other contact details.
Profile Data: Information you provide to create and maintain your profile, including photographs, biography, and fitness goals.
Payment Information: Credit card numbers, billing addresses, and payment history for transactions processed on our platform.
Content Data: Any content you create or share on the platform, such as messages, comments, and workout logs.

Automatically Collected Data encompasses:

Log and Usage Data: Information on how the services are accessed and used, like IP addresses, browser types, device information, visited pages, requested URL, system activity, and timestamps.
Location Data: Geographic information derived from your IP address or device settings, used to offer location-specific advice or advertisements.
Cookies and Similar Technologies: Data collected via cookies, web beacons, and other technologies to remember user preferences, improve user experience, and track user activity across the platform.

This comprehensive data collection enables us to provide personalized fitness solutions, enhance platform security, and comply with legal obligations. Rest assured, all data collection and processing are conducted with the highest standards of privacy and data protection in mind.

4. Use of Information / How we use your data

We use your personal data to perform the functions of our products and services and provide you with the products and services you request. We also use Personal Data collected through our Products and Services for the purposes described in this Privacy Notice or as otherwise disclosed to you.

For instance, within the last twelve months, we have utilized every category of Personal Data for the following objectives:

Delivery of Products and Services, including enhancing security, troubleshooting, and improving and customizing our offerings.
Enhancement and Development of Products and Services, such as evaluating your interaction with our offerings and devising new or refined solutions.
Business Operations aimed at augmenting our internal functions, bolstering system security, and identifying fraudulent or illicit actions.
Personalization, by gaining insights into your preferences to elevate your experience and satisfaction with our services.
Customer Support, including resolving issues and addressing inquiries.
- We may record telephone conversations for instructional, quality assurance, and administrative reasons as allowed by and in compliance with relevant laws.
Payment Processing to authenticate payment details and manage transactions as required for contract fulfillment.
Reviewing Adherence to Usage Terms, ensuring you’re a verified user, and scrutinizing compliance with our contractual terms.
Communications encompassing sending confirmations, invoices, technical updates, security alerts, support, and administrative notices.
Marketing, engaging with you about novel services, offers, promotions, and other details concerning our Products, Services, and Customers. We process your Personal Data for market analysis, advertising, and offering personalized content on and off our websites based on your activities and preferences (refer to the 5. Your Choices section for adjustments to promotional communication preferences).
Compliance with Legal Requirements, cooperating with authorities, courts, or regulators in line with our legal obligations which necessitates the processing or divulging of Personal Data to safeguard our rights or is essential for our legitimate interest in preventing the misuse of our websites or Products and Services, securing property or safety, pursuing legal remedies, limiting damages, adhering to legal proceedings, orders, or requests, or for auditing.
Data Integration, we amalgamate Personal Data collected from various sources to enhance your experience, ensuring it’s seamless, consistent, and tailored.

Feedback Integration: User feedback is a cornerstone for iterative improvements, helping us refine existing features and identify areas for new development.
Innovative Features Development: Analyzing how users engage with our platform guides us in innovating and introducing features that meet evolving fitness needs and enhance the digital fitness journey.

This approach ensures our services are continually optimized, user-centric, and innovative, keeping pace with the dynamic fitness industry and technological advancements.

5. Information Sharing and International Transfer

Our platform shares user data under specific conditions to ensure the smooth operation of our services and compliance with legal requirements. This involves handling and transferring data in a way that respects user privacy and aligns with international data protection standards. Our approach to data sharing is designed to enhance the functionality of our platform while safeguarding user information against unauthorized access or misuse.

Liaqa may have shared, or possibly shared in the last year, your Personal Data—with your agreement or as required—to fulfill your transactions or deliver the Products and Services you’ve asked for or agreed to.

Furthermore, in the past year, we’ve disclosed each type of Personal Data mentioned earlier to the categories of third parties listed below for these business reasons:

Public Disclosure: You can use options in our Products and Services to make public and share your name and/or username, along with other details like your profile, content, files, or location data.
Service Providers: We pass on Personal Data to companies or agents acting for us, based on the purposes outlined in this Privacy Notice, such as entities we’ve engaged for help with safeguarding and securing our systems and services, which might need Personal Data access to perform those roles.
Financial Transactions and Payment Processing: For payment actions, like purchases, we share necessary payment and transaction information with banks and other entities for processing payments, preventing fraud, minimizing credit risks, and other financial services.
Affiliates: We allow Personal Data access across our subsidiaries, affiliates, and connected companies, for instances where we share common data systems or need the access to deliver our Products and Services and conduct our business.
Corporate Changes: In events like mergers, financing, acquisitions, bankruptcy, dissolution, or asset sales or transfers, we may share Personal Data as part of the corporate action.
Customers: If you’re using our Products and Services as an authorized user, we may share your Personal Data with the affiliated Customer responsible for your access, as necessary for account verification, activity checks, suspicious activity investigations, or enforcing our terms and policies.
Marketing Partnerships: We may share your Personal Data for digital marketing purposes, detailed further in our Cookie Notice.
Contest and Promotion Sponsors: For contests or promotions you sign up for, we may share Personal Data with the sponsors to fulfill the event.
Professional Advisors: Occasionally, we share Personal Data with professional advisors acting as service providers, processors, or joint controllers – this includes lawyers, bankers, auditors, accountants, and insurers offering consultancy, banking, legal, insurance, auditing, and accounting services.
Legal and Enforcement: We may access, share, and preserve Personal Data when necessary to adhere to law or respond to legal processes, including requests from law enforcement or government bodies.
Security, Safety, and Rights Protection: Personal Data might be disclosed if necessary to:
- Protect customers and others, like to prevent spam or fraud, or in emergencies to save lives or prevent serious injuries;
- Keep our Products, Services, and systems secure, including preventing cyber-attacks or system breaches; or
- Defend our rights or property, or those of others, by enforcing agreements, terms, and policies.
Other Disclosures with Consent: We might also share your Personal Data with other third parties when you consent to it or as law allows.
Analytics: Third-party analytics entities also gather Personal Data via our website and apps, including identifiers and device information, location data, usage data, and related inferences, as explained in our Cookie Notice.

Be aware that some of our Products and Services might include links or integrations with third-party services, with privacy practices different from ours. Your Personal Data provided to or shared with these third parties falls under their privacy notices.

Lastly, we might share anonymized information as per legal standards. Typically, anonymized information isn’t regarded as Personal Data.

We share your personal data with these third-party vendors. For instance, we utilize the following:

PerFIcT Inc.: Provides backend operational support, facilitating platform stability and feature enhancements.
MyFatoorah & Stripe: Enable secure payment processing, allowing users to conduct transactions confidently.
Wise.com: Manages international payouts to service providers, ensuring timely and accurate compensation.
Fluent Support: Supports customer service interactions, offering users assistance and support inquiries.
Plausible & GA4 (Google Analytics 4): These analytics tools help us understand user behavior on our platform, enabling us to make data-driven decisions to improve user experience.
Plerdy.com: Assists in website optimization by analyzing user interactions, helping to increase conversion rates and enhance user engagement.
Partnero.com: Manages our affiliate program, facilitating partnerships that expand our reach and provide users with valuable recommendations.
SureTriggers.com: Enhances operational efficiency by automating workflows and integrating various applications used across our platform.
Zapier.com: Integrates various online tools to streamline workflows.
Fluent CRM: Email Marketing Platform & CRM suite

These partnerships are crucial for delivering comprehensive services, maintaining platform integrity, and ensuring user satisfaction.

6. Your Choices

A. Preferences for Communication

Liaqa may send promotional messages to existing and potential customers about our latest services, offers, promotions, and other details related to our Products and Services. You can decide if you wish to receive these promotional communications via email, phone, postal mail, push notifications, or social media. Should you choose to stop receiving promotional messages from us, you can easily opt-out by following the instructions in the message you receive. You can always opt back in at any time.

It’s important to note that this option does not extend to essential service-related communications integral to some of our Products and Services, nor to responses or surveys that may have specific opt-out methods. Therefore, even after opting out of marketing communications, you might still receive certain types of messages from us.

Furthermore, we may convey marketing messages to Consumers on behalf of our Customers as part of our service offerings. Our customers also have the capability to market directly to their current and prospective consumers. If you’re receiving marketing communications from any of our Customers and wish to inquire further, please contact the respective Customer directly.

B. Analytics and Advertising Preferences

Our partners in third-party analytics and advertising generally offer the option to opt out of specific data gathering or usage. For further information, please refer to the Cookie Notice.

7. User Rights

Under UAE and KSA PDPL laws, users have the right to access, correct, and delete their personal data. This ensures users can control their information, request a copy of all data a platform holds, correct inaccuracies, and request data deletion. Globally, we respect these rights and provide mechanisms for users to exercise them regardless of location. This commitment to user rights is a cornerstone of our data protection and privacy practices, emphasizing our dedication to user autonomy and compliance with international privacy standards.

User rights under UAE and KSA PDPL laws

Access Rights

Users have the right to request access to the personal data that the platform holds about them. This ensures transparency and allows users to understand what information is being processed, providing a basis for exercising other rights.

Correction Rights

Should any personal data be inaccurate or incomplete, users have the right to have it corrected. This empowers users to ensure their information remains up-to-date and reflects their current situation.

Deletion Rights

Users can request the deletion of their personal data under certain conditions, such as when the data is no longer necessary for the original purpose it was collected for or if the user withdraws consent. This right supports user autonomy over their personal information.

Exercising Your Rights in a Global Context

Our platform provides mechanisms to exercise these rights seamlessly regardless of where users are located. We have established procedures for users to submit requests concerning their data, which are handled promptly and in accordance with both local laws and international privacy standards.

These sections outline the foundation of our commitment to upholding user rights, ensuring our practices are aligned with the PDPL laws of the UAE and KSA, and respecting the principles of privacy and data protection on a global scale.

8. Your Privacy Rights

Depending on where you live, you might have certain rights concerning your Personal Data:

Access Right: You can request a copy of the Personal Data we keep about you.
Knowledge Right: You have the right to be informed about the Personal Data collected, processed, sold, or shared (as defined by relevant laws, including the use of cookies for behavioral advertising).
Correction Right: If your Personal Data is incorrect, you have the right to have it corrected.
Opt-out Right for Automated Decisions: You can opt out of decisions made solely by automated means, like profiling, though we don’t foresee making such automated decisions that are restricted by law.
Consent Withdrawal: If you’ve given consent, you can withdraw it anytime.
Direct Marketing Opt-out: You can request not to use your Personal Data for direct marketing.
Objection and Restriction Right: You can object to or request a restriction on how we use your Personal Data.
Portability Right: You can ask for a portable copy of your Personal Data.
Erasure Right: You can ask us to delete your Personal Data.
Prohibit Selling/Sharing Right: You can forbid the sale or sharing of your Personal Data, as legally defined.
Sensitive Data Limitation Right: You can limit the use and sharing of your sensitive Personal Data, though we don’t use your sensitive Personal Data in ways that are restricted by law.

To exercise these rights, reach out to us at privacy@liaqafitness.com.

However, we may refuse unreasonable, excessive, illegal requests and risk infringing on others’ privacy, if we can’t confirm your identity, or as otherwise allowed by law. Depending on your location, you may also have the right to file a complaint with a regulatory body, though we encourage contacting us first with any issues.

In some places, an authorized individual can make requests regarding your Personal Data on your behalf. We’ll need proof of your permission for this person to act for you.

Your request must: (i) provide enough details (e.g., name, address, phone number, and/or email address) for us to verify you’re the person in question or an authorized agent; and (ii) clearly describe your request so we can address it effectively. We’ll only use the information in your request to confirm your identity or authority.

Before we fulfill your request, we must verify your identity. Our verification process may vary based on whether you have an account, the data’s sensitivity, and the potential harm of unauthorized disclosure or deletion. If you’re a Consumer and we’re processing your data for a Customer, direct your request to them or to privacy@liaqafitness.com. You may have the right to lodge a complaint with a supervisory authority, but we invite you to contact us first with any concerns.

We process your Personal Data based on various legal grounds, such as with your consent, to deliver the Products and Services you use, for our business operations, to meet our legal and contractual duties, to ensure our systems’ security, or for other legitimate reasons.

9. Location Of Personal Data

The Personal Data we gather may be kept and processed within your country or region, or in any other location where our affiliates, subsidiaries, or third-party service providers operate. At present, our main data centers are located in the European Union and the United States. These locations are selected to enhance efficiency, improve service performance, and ensure data protection through redundancy in case of outages or other issues.

We commit to measures designed to ensure that the data collected under this Privacy Notice is managed in alignment with the terms of this notice and the applicable laws of the data’s location.

A. Processing of European Personal Data

We may transfer Personal Data from the European Economic Area, the United Kingdom, and Switzerland to other countries, including the USA, which may not have been deemed by the European Commission to provide an adequate level of data protection. In such cases, we employ various legal frameworks, including contracts where necessary, to secure your rights and data protections.

For further details on the European Commission’s assessments regarding the adequacy of Personal Data protection in other countries, please visit the European Commission’s Adequacy Decisions (https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en).

10. Data Security

We employ a multi-layered security approach to safeguarding our platform and user data. Utilizing a Virtual Private Server (VPS) with advanced protection against cyber threats, and integrating services like Cloudflare and Microsoft Azure, we ensure robust defense mechanisms against brute force attacks, spam, and DDoS attacks. This comprehensive security infrastructure underpins our commitment to maintaining a secure, reliable digital environment for our users. Features include but are not limited to:

VPS Hosting Security

Our VPS hosting is fortified against common cyber threats. It includes specific defenses against:

Brute Force Attacks: We prevent unauthorized access attempts by limiting login attempts and monitoring suspicious activity.
XML-RPC Spam: We mitigate spam by filtering and blocking malicious XML-RPC requests, protecting our site’s integrity.
DDoS Attacks: Our infrastructure is designed to identify and neutralize DDoS threats, ensuring service availability.

Cloudflare Integration

Cloudflare enhances our platform’s security and performance through:

DDoS Protection: Cloudflare distributes site content globally, mitigating DDoS attacks by absorbing traffic in a distributed manner.
Web Application Firewall (WAF): Protects against common threats like SQL injection and cross-site scripting, alongside DDoS attacks.
Rate Limiting: Guards against abusive traffic by limiting request numbers within a specified timeframe.
SSL/TLS Encryption: Offers SSL certificates for secure data transmission.
DNS Security with DNSSEC: Adds verification for DNS responses to prevent spoofing and cache poisoning.

Microsoft Azure

Our app and web app leverage Microsoft Azure for:

Advanced Security: Azure’s built-in security features protect against a wide range of threats, ensuring data is securely stored and processed.
Scalability and Compliance: Azure’s infrastructure supports scaling resources according to demand while adhering to compliance standards, making it an ideal choice for hosting our applications.

These components and more work together to provide a secure, efficient, and resilient platform, safeguarding user data and ensuring optimal performance.

11. Children’s Privacy

Our platform adheres to strict age restrictions, not knowingly collecting data from children under 13. We are committed to protecting minors’ privacy, aligning with legal standards to ensure any data relating to children is handled with the utmost care. Procedures are in place for identifying and addressing instances where data from minors may have been inadvertently collected, emphasizing our dedication to maintaining a secure and respectful online environment for all users.

12. Policy Updates

To ensure our users are always informed and empowered regarding their privacy on our platform, our Policy Updates section outlines a transparent and user-centric approach to communicating changes in our privacy practices:

Introduction to Policy Updates

We are committed to maintaining the highest level of transparency and trust with our users. As our services evolve and regulatory environments change, it may become necessary to update our Privacy Policy.

Notification Process

Method of Communication: We will notify users of any significant changes to our Privacy Policy through email or in-app notifications. This ensures that all our users are informed regardless of how frequently they access our platform.
Content of Notification: Notifications will include a summary of the changes, the reasons behind them, and how they might affect you. We aim to provide enough information to understand the essence of the changes without overburdening you with legal jargon.
Effective Date: Each notification will clearly state when the updated policy will take effect, giving users ample time to review the changes.

User Empowerment

Feedback and Questions: After receiving notification of policy updates, users are encouraged to provide feedback or ask questions. This engagement is crucial for us to address concerns and clarify any misunderstandings.
Review and Consent: We encourage users to review the updated policy in full before its effective date. Continued platform use after this date will be regarded as acceptance of the new policy.

Through this process, we ensure that policy updates are communicated effectively, keeping users informed and engaged with changes that might affect their privacy rights and how their data is handled.

13. Contact Information

At Liaqa, clear and prompt communication is at the heart of what we do, especially when it comes to addressing payout-related inquiries. We provide multiple avenues for our clients and coaches to reach our customer service team for any assistance they might need:

For Payment-Related Inquiries

FAQ Section: We recommend visiting our FAQ section for immediate answers to common payment-related queries. This resource is designed to provide you with the information you need quickly.
Support Form: You can also use the dedicated contact form available on the Liaqa website here for any payout queries. Fill out this form, and one of our customer service representatives will contact you as soon as possible. We commit to responding to all inquiries within 72 hours to provide detailed answers and effective solutions.

Customer Service Hours

Our customer service team can assist you from Saturday to Thursday, 9 AM to 5 PM UAE time, with Fridays off, excluding public holidays. We are devoted to ensuring that your inquiries are handled with the utmost care and efficiency.