PRIVACY POLICY

1. Who We Are

Ability Academy (PTY) LTD operates a martial arts gym in Heidelberg, Gauteng, South Africa. We offer BJJ, MMA, Kickboxing, Boxing Fitness, and Kids classes. This privacy policy explains how we collect, use, and protect your personal information in accordance with the Protection of Personal Information Act (POPIA).

2. Information We Collect

We collect the following personal information when you register as a member:

• Full name, email address, and phone number
• Date of birth and emergency contact details
• Medical information including blood type, allergies, and chronic conditions
• Medical aid details
• Payment information (processed securely via PayFast)
• Attendance and class participation records
• Guardian information for minor members

3. How We Use Your Information

We use your personal information to:

• Manage your gym membership and track attendance
• Process payments and send payment reminders
• Send important notifications via email and WhatsApp
• Ensure your safety during training sessions
• Track belt grades and training progress
• Comply with legal obligations

4. How We Protect Your Information

Your data is stored securely using Supabase (PostgreSQL) with row-level security enabled. Passwords are hashed and never stored in plain text. Payment information is handled entirely by PayFast and we do not store your card details.

5. Sharing Your Information

We do not sell or share your personal information with third parties except where necessary to provide our services, including:

• PayFast — for payment processing
• Resend — for email notifications
• Meta (WhatsApp) — for WhatsApp notifications

6. Your Rights Under POPIA

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Object to the processing of your information
• Lodge a complaint with the Information Regulator of South Africa

7. Retention of Information

We retain your personal information for as long as your membership is active and for a period of 5 years thereafter, unless you request earlier deletion and there is no legal obligation to retain it.

8. Cookies

Our web application uses session cookies solely for authentication purposes. We do not use tracking or advertising cookies.

9. Contact Us

For any privacy-related queries or to exercise your rights, please contact us: