Privacy Policy

This Privacy Policy explains how BNW (“we”, “us”), operated by Barbells & Weights Fitness Gym at Magsaysay St., Barangay Poblacion, Cortes, Bohol, collects, uses, and protects your personal information when you use our membership and gym-entry app. We process personal data in accordance with the Philippine Data Privacy Act of 2012 (RA 10173) and its implementing rules. By creating an account and ticking the consent box, you agree to this Policy.

1. Information we collect

• Profile: name, birthday, gender, address, occupation, email, and a photo used to verify your identity at the door.
• Membership & payments: your plan, start and expiry dates, and a record of each transaction (amount, method, date, and a payment reference). Online card details are handled by our payment provider — we do not see or store your card number.
• Entry & visit data: the time-limited QR codes you generate, and a log of your gym entries and visit times.
• Information entered by staff: membership, payment, and entry records created on your behalf at the counter.
• Technical data: basic information needed to run the app securely (e.g. your login session).

2. How we use your information

• Create and manage your account and membership.
• Grant and verify gym entry through your QR code and, where used, your photo.
• Process payments, renewals, and send you receipts and expiry reminders.
• Keep the facility and accounts secure and prevent fraud or misuse.
• Produce internal, aggregated reports (e.g. revenue and peak hours) to run the business.
• Comply with tax, accounting, and other legal obligations.

3. Legal basis

We rely on your consent, the performance of our contract with you (providing your membership), our legitimate interests in running and securing the gym, and compliance with legal obligations.

4. Sharing your information

We do not sell your personal data. We share it only with service providers who help us run the app, under confidentiality obligations:

• Hosting & database — Supabase (stores your account and records).
• Payments — Maya (processes online payments).
• Email — Resend (sends receipts and reminders).

We may also disclose information when required by law, court order, or a lawful request from a government authority.

5. Data retention

We keep your personal data for as long as you have an account and while it is needed for the purposes above. Financial and transaction records are retained for the period required by Philippine tax and accounting laws, even after you leave. When we delete an account, we remove or anonymise identifying details but may keep de-identified transaction records for legal and accounting purposes.

6. Your rights

Under the Data Privacy Act, you have the right to:

• be informed about how your data is processed;
• access the personal data we hold about you;
• correct inaccurate or outdated information;
• object to processing, or withdraw consent;
• have your data erased or blocked, subject to legal retention requirements;
• data portability; and
• lodge a complaint with the National Privacy Commission (privacy.gov.ph).

To exercise any of these, contact us at nicole.respecia123@gmail.com. We may need to verify your identity first.

7. Security

We protect your data with access controls, row-level security on our database, and encryption of data in transit. No system is perfectly secure, but we take reasonable steps to safeguard your information and will notify you and the authorities of a serious breach as required by law.

8. Age

The app is intended for members aged 18 and above, or minors with the consent and supervision of a parent or guardian.

9. Changes to this Policy

We may update this Policy from time to time. Material changes will be posted here with a new “last updated” date, and where appropriate we will ask for your consent again.

10. Contact us

For privacy questions or requests, contact our Data Protection Officer at Nicole Respecia — nicole.respecia123@gmail.com, Magsaysay St., Barangay Poblacion, Cortes, Bohol.