Privacy Notice

Last updated: 6 October 2026

Privacy Notice Last updated: 17 September 2026 AfroPulse, Ground Floor, City Plaza, Lusail, Qatar, is the controller of your personal data under Qatar's Personal Data Privacy Protection Law (Law No. 13 of 2016). This notice explains what we collect, why, where it is kept and your rights. Our registered company details are available at the front desk on request. What we collect. Identity and contact details (name, phone number, email, date of birth, gender where classes are gender-specific, emergency contact); your guardian's name, relationship and phone number if you are under 18; your membership, bookings, attendance (check-ins) and payment records (we never store card numbers; payments are processed by a licensed payment provider); the documents you sign with us and the details of how you signed them (date, time, device and network address, for evidence); your health declaration and any information you or your coach record about your fitness, goals and progress, only with your explicit consent; your communication preferences; and messages you send us. Why we use it. To register and manage your membership and bookings; to keep you safe during exercise and plan your training; to process payments and issue invoices; to send you booking, safety and account messages; to send marketing messages only if you opt in; to handle complaints, disputes and legal obligations; and to improve our services using anonymised statistics. Where your data is kept and how it is protected. Our systems are hosted by Neon and Render in Frankfurt, Germany (European Union), with Google Firebase for secure sign-in and app notifications. This means your personal data is transferred outside the State of Qatar. Safeguards: encryption in transit and at rest, access limited to staff who need it for their role, a log of every access to health information, contracts with our providers that bind them to protect your data, regular backups, and a breach-response process that notifies you and the regulator within 72 hours where a breach could cause you serious harm. Who else sees it. Our hosting and notification providers above; our payment provider, for transactions; our e-mail provider, when we send you copies or receipts by e-mail; and public authorities where the law requires. We do not sell your data. How long we keep it. Signed agreements and invoices: 10 years after your membership ends (commercial and tax law). Health information: 24 months after your membership ends, unless needed for a claim. Other membership data: 36 months after your last visit, then deleted or anonymised. Marketing consent: until you withdraw it, plus a record of the withdrawal. Your rights. You may withdraw consent at any time, object to processing, ask for access to and a copy of your data, ask for correction, and ask for erasure (subject to our legal retention duties). You may also ask us to stop using your data for marketing at any time. We respond within 30 days. To exercise a right, use the Privacy section of the app, delete your account from the app's Profile screen or at afropulseqatar.com/delete-account, e-mail hello@afropulseqatar.com, or ask at the front desk. You may complain to the National Data Privacy Office of the National Cyber Security Agency (NCSA), Qatar. Under-18s. We collect a child's data only with the explicit consent of a parent or guardian, who may at any time ask what we hold, obtain a copy, and ask us to delete it. This notice may be updated. The current version is always available in the app, at afropulseqatar.com/portal/privacy and at the front desk; we will ask you to acknowledge material changes.