Data Privacy Clause

ECOFITNESS HUB NIGERIA
Suite 6, Divib Plaza, 4th Avenue, Gwarinpa, Abuja, FCT

1. Data Collection and Processing

The personal information that you provide in this form, through our website, mobile application, membership registration, or other channels will be collected and processed in accordance with Ecofitness Hub Nigeria’s Data Privacy Policy and in full compliance with the Nigerian Data Protection Act (NDPA), the Nigeria Data Protection Regulation (NDPR), and all other applicable laws and regulations governing data protection in Nigeria.

2. Types of Personal Information We Collect

We collect the following categories of personal information:

• Identity Information: Full name, date of birth, national identification number, and passport details
• Contact Information: Email address, phone number, residential address, and emergency contact details
• Membership Information: Membership type, start date, payment method, billing address, and membership status
• Health and Fitness Information: Health questionnaires, fitness goals, medical history, allergies, injuries, weight, height, and fitness assessment results
• Payment Information: Bank details, card information (processed securely through our payment processor), and transaction history
• Biometric Data: Photographs for membership identification purposes (where applicable)
• Usage Information: Access logs, facility usage patterns, class attendance, and equipment usage data
• Communication Records: Emails, messages, and customer service interactions

3. Purpose of Data Collection

Your personal information is collected and processed for the following purposes:

• Establishing and managing your membership account with Ecofitness Hub Nigeria
• Processing membership fees, payments, and billing inquiries
• Providing fitness services, personalized training recommendations, and facility access
• Ensuring member safety through health screening and medical history review
• Delivering customer support and responding to inquiries and complaints
• Sending promotional materials, newsletters, class schedules, and membership updates (with your consent)
• Conducting market research and improving our services and facility offerings
• Complying with legal obligations and regulatory requirements in Nigeria
• Preventing fraud, unauthorized access, and ensuring facility security
• Maintaining facility records, scheduling, and administrative operations

4. Lawful Basis for Processing

We process your personal information on the following lawful bases:

• Contractual Necessity: Processing is necessary to establish and perform our membership agreement with you
• Consent: You have explicitly consented to the collection and processing of your personal information
• Legal Compliance: We are obligated to process personal information to comply with applicable Nigerian laws and regulations
• Legitimate Interests: Processing is necessary for our legitimate interests in operating our fitness facility, improving services, and ensuring member safety and security
• Health and Safety: Processing health information is necessary to protect your health and safety during fitness activities

5. Data Security and Protection

Ecofitness Hub Nigeria implements appropriate technical, administrative, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These safeguards include:

• Encryption of sensitive information both in transit and at rest
• Secure password protection for all systems containing personal data
• Regular security audits and updates to our information systems
• Restricted access to personal information based on job necessity
• Secure disposal of personal information when no longer required
• Staff training on data privacy and confidentiality obligations

Note: While we take comprehensive security measures, no system is completely impenetrable. We cannot guarantee absolute security of your information.

6. Data Retention

We retain your personal information for the following periods:

• Active Members: For the duration of your membership plus three (3) years thereafter
• Membership Applicants (Rejected): For six (6) months from the date of application rejection
• Former Members: For three (3) years after membership termination for financial and legal compliance purposes
• Health Records: In accordance with applicable healthcare regulations in Nigeria
• Transaction Records: For five (5) years to comply with financial reporting and anti-money laundering regulations

After the applicable retention period, we securely delete or anonymize your personal information unless we are required by law to retain it for longer.

7. Your Data Protection Rights

Under the Nigerian Data Protection Act, you have the following rights regarding your personal information:

• Right of Access: You have the right to request access to the personal information we hold about you
• Right to Correction: You may request that we correct inaccurate, incomplete, or outdated personal information
• Right to Erasure: You have the right to request deletion of your personal information, subject to legal and contractual obligations
• Right to Data Portability: You may request a copy of your personal information in a structured, commonly used, and machine-readable format
• Right to Object: You have the right to object to our processing of your personal information for marketing or other purposes
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw such consent at any time
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Data Protection Bureau (NDPB) if you believe your data rights have been violated

To exercise any of these rights, please contact us using the details provided in the “Contact Us” section below. We will respond to your request within thirty (30) days.

8. Sharing of Personal Information

We do not sell, rent, or commercially trade your personal information. However, we may share your information with the following categories of recipients:

• Service Providers: Third-party service providers who assist us in managing our facility, processing payments, sending communications, and providing member services (under strict confidentiality obligations)
• Payment Processors: Financial institutions and payment gateways necessary for processing membership fees and transactions
• Healthcare Professionals: Medical practitioners or emergency services, only when necessary for your health and safety
• Legal and Compliance: Law enforcement, regulatory authorities, and legal counsel when required by law or to protect our legal interests
• Business Partners: Selected partners offering complementary fitness, wellness, or nutritional services (only with your explicit consent)

Any third parties receiving your information are contractually bound to maintain the confidentiality and security of your personal data in accordance with applicable data protection laws.

9. Cookies and Tracking Technologies

Our website and mobile application may use cookies, web beacons, and similar tracking technologies to enhance user experience, remember preferences, and analyze website usage patterns. You have the right to accept or reject non-essential cookies through your browser settings or our website cookie management tool. For more information on how we use cookies, please refer to our separate Cookie Policy.

10. International Data Transfers

Your personal information is primarily stored and processed within Nigeria in compliance with the NDPA. If any information is transferred outside Nigeria (which is rare and only for essential service delivery), we ensure appropriate safeguards are in place, including adequacy decisions and standard contractual clauses compliant with Nigerian data protection standards.

11. Children’s Privacy

Our services are not intentionally directed at children under eighteen (18) years old without parental or guardian consent. If we become aware that a child has provided personal information without proper consent, we will take steps to delete such information and notify the parent or guardian.

12. Changes to This Privacy Clause

Ecofitness Hub Nigeria may periodically update this Data Privacy Clause to reflect changes in our practices, technology, legal requirements, or other factors. We will notify members of significant changes through email, website notice, or other appropriate means at least thirty (30) days before the changes become effective. Your continued use of our services following notification constitutes your acceptance of the updated clause.

13. Contact Us

Data Protection Officer
Ecofitness Hub Nigeria
Suite 6, Divib Plaza, 4th Avenue
Gwarinpa, Abuja, FCT

Email: [email protected]
Phone: +234 (0) 1 xxx xxxx [Insert actual number]
Business Hours: Monday to Friday, 9:00 AM – 6:00 PM WAT

If you have concerns about our data handling practices that we have not resolved to your satisfaction, you may lodge a complaint with the National Data Protection Bureau (NDPB), the primary regulatory body overseeing data protection in Nigeria.

14. Compliance Statement

By providing your personal information to Ecofitness Hub Nigeria, you acknowledge that you have read this Data Privacy Clause, understood your rights and our obligations, and consent to the collection, processing, and storage of your personal information in accordance with this clause and applicable Nigerian data protection laws. Your privacy and data security are our highest priorities.

Effective Date: August 2026
Last Updated: August 13, 2026
Next Review Date: August 2027