Last updated: placeholder
This Policy describes how Welldesk collects, uses, and shares information in connection with the Welldesk platform itself -- our marketing website, tenant and staff accounts, and the underlying Service. When you interact with a specific gym, studio, or fitness business (a "tenant") through the platform -- for example, as one of that tenant's members -- that tenant, not Welldesk, decides what member data it collects and why, and is the party responsible for its own privacy practices toward you; you should also review that tenant's own privacy notice where one is provided.
We collect account information you provide (such as name, email, and phone number), business information a tenant provides to configure the Service, and usage/technical information collected automatically (such as log data, device and browser information, and approximate location) needed to operate, secure, and improve the platform.
We use information to provide and maintain the Service, authenticate accounts, process billing (including for optional add-ons such as the AI Business Copilot), communicate with you about the Service, detect and prevent fraud or misuse, comply with legal obligations, and improve the platform. We do not sell personal information.
Where applicable law requires a legal basis, we process personal information to perform our contract with you or your organization, to comply with a legal obligation, on the basis of our legitimate interests in operating and securing the Service, or based on your consent (for example, for optional marketing cookies), which you may withdraw at any time.
We share information only with: the tenant you interact with, to the extent needed for that tenant to provide its services to you; service providers who process information on our behalf under contract (such as hosting, payment, and communications providers) and only as needed to perform their function; and others where required by law, to protect rights and safety, or in connection with a merger, acquisition, or sale of assets, subject to this Policy continuing to apply to previously collected information.
We retain personal information for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements, after which it is deleted or anonymized in accordance with our data retention practices.
Depending on your location and applicable law, you may have rights to access, correct, export, or request deletion of your personal information, or to object to or restrict certain processing. You can exercise these rights by contacting us through our Contact page. If your data was provided to a tenant as that tenant's own member or staff, the fastest way to exercise these rights is often to contact that tenant directly, since the tenant controls its own records; we will assist as appropriate for information we process on a tenant's behalf.
The Service is not directed to children under 16, and we do not knowingly collect personal information from a child under 16 without appropriate parental or guardian consent obtained by the relevant tenant. If you believe a child has provided us with personal information without such consent, please contact us so we can address it.
We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, or misuse. No method of transmission over the internet or method of electronic storage is completely secure, and we cannot guarantee absolute security; you also play a role in security by keeping your account credentials confidential.
Information we process may be stored and processed in countries other than your own, including where our hosting and service providers operate. Where required by applicable law, we use appropriate safeguards for such transfers.
We may update this Policy from time to time. If we make a material change, we will provide reasonable notice (for example, by email or an in-product notice) before the change takes effect.
This Policy is governed by the laws of the Lebanese Republic, including applicable data-protection provisions of Law No. 81/2018 on Electronic Transactions and Personal Data, without prejudice to any additional right that the mandatory law of your own country of residence or establishment provides and that cannot be displaced by this choice. Where a term of this Policy conflicts with a non-waivable right under your local law, your local right applies instead of that term.
Questions about this Policy can be sent through our Contact page.