GeinzHub Fitness Centre (“we”, “us”, or “our”) is committed to protecting the privacy and personal data of our members, visitors, and users of our website and services.
This Privacy Policy explains how we collect, use, store, and protect your personal information in accordance with the Personal Data Protection Act 2010 (PDPA) and other applicable Malaysian data protection laws.
By using our website, services, or becoming a member of GeinzHub Fitness Centre, you consent to the collection and use of your personal data as described here.
Information We Collect
We may collect the following personal information from you:
- Identity Data — full name, date of birth, NRIC or passport number, gender.
- Contact Data — email address, phone number, residential address.
- Membership Data — membership type, plan, start and expiry dates, membership ID.
- Health Data — health declarations and medical conditions disclosed for fitness purposes.
- Payment Data — billing information, payment method details, and transaction records. We do not store full card numbers — payment processing is handled by our third-party payment gateway.
- Usage Data — gym check-in records, booking history, and session attendance.
- Communications Data — enquiries, feedback, and correspondence with us.
- Technical Data — IP address, browser type, device information, and website usage data collected via cookies or similar technologies.
How We Use Your Information
We use your personal data for the following purposes:
- Processing and managing your membership registration and renewals.
- Processing payments and managing billing and invoicing.
- Managing gym access, bookings, and attendance records.
- Communicating with you regarding your membership, bookings, and promotions.
- Providing personal training and fitness services.
- Sending service updates, newsletters, and promotional materials — you may opt out at any time.
- Ensuring the safety and security of our premises and members.
- Complying with legal and regulatory obligations.
- Improving our services, website, and member experience.
- Resolving disputes, enforcing agreements, and handling complaints.
Legal Basis for Processing
We process your personal data on the following legal grounds:
- Contractual necessity — to fulfil our membership agreement and provide our services.
- Consent — where you have given us explicit consent to process your data.
- Legitimate interests — to operate and improve our business, provided this does not override your rights.
- Legal obligation — where we are required to comply with applicable law.
Data Retention
We retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by law.
Membership records are generally retained for a minimum of seven (7) years following termination of membership for accounting and legal compliance purposes. After this period, your data will be securely deleted or anonymised.
Security of Your Data
We take the security of your personal data seriously and implement reasonable technical and organisational measures to protect it from unauthorised access, disclosure, alteration, or destruction.
No method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. In the event of a data breach likely to result in a risk to your rights and freedoms, we will notify you and the relevant authorities as required by applicable law.
Cookies & Tracking
Our website may use cookies and similar tracking technologies to improve your browsing experience, analyse site traffic, and provide personalised content. You may control cookie settings through your browser. Disabling certain cookies may affect the functionality of our website.
Your Rights
Under the Personal Data Protection Act 2010 (PDPA) and applicable law, you have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — request correction of inaccurate or incomplete data.
- Withdrawal of consent — withdraw consent where consent is the legal basis, subject to contractual obligations.
- Limitation — request restriction of processing in certain circumstances.
- Complaint — lodge a complaint with the relevant data protection authority.
To exercise any of these rights, please contact us at hello@geinzhub.com. We will respond within a reasonable timeframe.
Third-Party Links
Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites and encourage you to review their privacy policies before providing any personal information.
Minors
Our services are not directed at individuals under the age of 18 without parental or guardian consent. We do not knowingly collect personal data from minors without appropriate authorisation. If you believe we have inadvertently collected information from a minor, please contact us immediately.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on this page with a revised date. We encourage you to review it periodically. Continued use of our services after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data: