Legal
Privacy Policy
This Privacy Policy explains how REAL Wellness Consulting FZCO-LLC ("R.E.A.L. Wellness", "we", "us", "our") collects, uses, shares and protects personal data when you visit our website, create an account, purchase a membership or otherwise use our services (together, the "Services"). Please read it together with our Terms of Service.
1. Who we are
The Services are operated by REAL Wellness Consulting FZCO-LLC, a company registered in the United Arab Emirates. We are responsible for (the "controller" of) the personal data described in this policy. You can reach us at any time through our contact page.
2. Personal data we collect
2.1 Information you give us
- Account data: your name, email address and password (stored only in encrypted, hashed form).
- Profile data: profile photo, height, weight, fitness goals, fitness level and preferred language — only what you choose to add.
- Health and wellness data: information you share with us about your body, habits, injuries, pregnancy or post-partum status, or medical conditions, for example during a discovery call or 1:1 coaching.
- Communications: messages you send through our contact form, by email, or during group and 1:1 calls.
- Payment data: when paid memberships launch, payments will be handled by our payment provider. We will receive your billing name, plan, payment status and the last digits of your card — never your full card number.
2.2 Information collected automatically
- Sign-in data: technical records needed to keep you signed in securely, such as a session token stored in your browser.
- Usage and device data: pages visited, referring site, country, browser, operating system and device type, time on page, page speed, clicks and errors (see section 7).
2.3 Information from third parties
We may offer Google sign-in in the future. If you choose it, Google shares your name, email address and profile picture with us. We never receive your Google password.
3. How we use your personal data
- To create and manage your account and give you access to the programs, plans and content included in your membership.
- To personalise workout programs and nutrition plans, especially in the Premium membership.
- To run group calls, 1:1 calls, form checks and weekly support.
- To process payments, manage subscriptions, renewals and refunds.
- To answer your enquiries and send service messages (for example password resets or changes to these terms).
- To keep the Services secure, prevent fraud and abuse, and fix problems.
- To understand how the website is used and improve it.
- To comply with legal, tax and accounting obligations.
We do not sell your personal data and we do not use it for third-party advertising.
4. Legal bases
We process personal data only where we have a lawful reason to do so, including:
- Contract: to provide the membership and Services you signed up for.
- Consent: for health data you choose to share and for optional features. You may withdraw consent at any time.
- Legitimate interests: to secure, maintain and improve the Services, where those interests are not overridden by your rights.
- Legal obligation: to keep records required by law.
5. Health data
Health-related information is sensitive. We collect it only when you choose to provide it, use it only to tailor your coaching, limit access to the coaches working with you, and never share it for marketing. You may ask us to delete it at any time.
6. Who we share data with
We share personal data only with trusted service providers who help us run the Services, under contracts that require them to protect it:
- Hosting, database and file storage providers, which store your account, profile and photos.
- Email delivery providers, which send account and service emails.
- Google: our website loads fonts from Google Fonts, which means your browser connects to Google's servers and shares your IP address with Google. Google would also receive data if you used Google sign-in (currently not offered).
- Payment providers (once paid memberships launch), which process payments under their own privacy policies.
- Video call providers used for group and 1:1 sessions.
- Lovable, which provides our website analytics (section 7).
- Professional advisers and authorities, where required by law or to protect our rights.
If our business is sold or reorganised, personal data may transfer to the new owner under this policy.
7. Cookies, local storage and analytics
We store a sign-in session in your browser's local storage so you stay signed in. This is strictly necessary for the member area to work and is removed when you sign out.
We use Lovable's visitor analytics to understand how our website is used. It uses no cookies, stores nothing on your device, doesn't keep IP addresses and doesn't identify visitors. Lovable collects this data for us. Lovable's privacy policy explains how it handles it.
It records the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, the buttons and links clicked, and errors. Detailed data is kept for 90 days and daily summaries for a year. All of this is recorded for every visitor, without cookies and without identifying anyone.
8. International transfers
Our service providers may store or process data outside the United Arab Emirates. Where this happens we take steps to make sure your data stays protected, such as contractual safeguards and choosing providers with strong security standards.
9. How long we keep data
- Account and profile data: while your account is active, and deleted within 90 days after you close it.
- Health data: until you ask us to delete it or close your account.
- Contact messages: up to 2 years.
- Payment and invoice records: as long as required by UAE tax and accounting law.
10. Security
We use encryption in transit, hashed passwords, access controls that keep each member's data private, and private file storage for photos. No system is perfectly secure, so please use a strong, unique password and tell us immediately if you suspect unauthorised access to your account.
11. Your rights
Depending on where you live, including under UAE Federal Decree-Law No. 45 of 2021 and the EU/UK GDPR, you may have the right to:
- access the personal data we hold about you;
- correct inaccurate data (you can edit most of it yourself in your profile);
- delete your data or close your account;
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent at any time;
- complain to a data protection authority.
To exercise these rights, contact us through our contact page. We will respond within 30 days and may need to verify your identity.
12. Children
The Services are intended for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us data, please contact us and we will delete it.
13. Changes to this policy
We may update this policy from time to time. We will post the new version here with an updated date and, for significant changes, notify members by email.
14. Contact
REAL Wellness Consulting FZCO-LLC, United Arab Emirates. Questions about this policy can be sent through our contact page.
