PRIVACY POLICY

Bali Alpha Coaching ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website, services, or coaching programs.

By using our services, you consent to the collection and use of information in accordance with this Privacy Policy.

2.1 Personal Information

We collect personal information that you voluntarily provide to us, including:

• Contact Information: Name, email address, phone number, WhatsApp number
• Identification: Age, gender (male-only service), location
• Payment Information: Billing address, payment method details (processed securely by third-party providers)
• Account Information: Username, password, profile preferences

2.2 Health and Fitness Data

To provide effective coaching services, we collect:

• Physical Measurements: Height, weight, body fat percentage, muscle mass
• Health Information: Medical conditions, injuries, medications, allergies
• Fitness Goals: Objectives, preferences, workout history
• Progress Data: Workout logs, meal tracking, progress photos
• Lifestyle Information: Activity level, schedule, dietary preferences

2.3 Communication Data

• WhatsApp messages and voice notes
• Email correspondence
• Session notes and coaching feedback
• Community forum posts and interactions

2.4 Technical Information

We automatically collect certain technical information:

• Device Information: IP address, browser type, operating system
• Usage Data: Pages visited, time spent, clicks, navigation patterns
• Cookies: Session cookies, preference cookies, analytics cookies
• Location Data: General geographic location (for local service delivery)

3.1 Service Delivery

• Create and customize your fitness and nutrition programs
• Provide personal coaching and support
• Track your progress and adjust programs accordingly
• Schedule and conduct training sessions
• Facilitate community interactions and support

3.2 Communication

• Send program updates and educational content
• Provide customer support and respond to inquiries
• Send appointment reminders and schedule changes
• Share motivational content and progress celebrations

3.3 Business Operations

• Process payments and manage billing
• Maintain customer records and service history
• Analyze service effectiveness and improve programs
• Comply with legal and regulatory requirements

3.4 Marketing (With Consent)

• Send newsletters and fitness tips (opt-in only)
• Share success stories and testimonials (with explicit permission)
• Improve our marketing and website experience
• Personalize content and recommendations

4.1 Service Providers

We may share information with trusted service providers who help us operate our business:

• Payment Processors: To process payments securely
• Cloud Storage: To store and backup your data securely
• Email Services: To send communications and newsletters
• Analytics Providers: To understand website usage (anonymized data)
• Communication Platforms: WhatsApp, Telegram for direct coaching support

4.2 Legal Requirements

We may disclose your information if required by law or to:

• Comply with legal process or government requests
• Protect our rights, property, or safety
• Protect the rights, property, or safety of our clients
• Investigate fraud or security issues

4.3 Business Transfers

In the event of a merger, acquisition, or sale of our business, your information may be transferred to the new owner, subject to the same privacy protections.

4.4 Community Sharing

Within our private Telegram community:

• Only first names and general progress updates are shared
• Specific health data remains private
• You control what you choose to share with the community
• Progress photos require explicit consent before sharing

5.1 Security Measures

We implement industry-standard security measures to protect your information:

• Encryption: All data is encrypted in transit and at rest
• Access Controls: Limited access on a need-to-know basis
• Secure Storage: Data stored in secure, certified cloud facilities
• Regular Audits: Security practices reviewed and updated regularly
• Staff Training: Team members trained on data protection practices

5.2 Data Breach Response

In the unlikely event of a data breach:

• We will notify affected users within 72 hours
• We will report to relevant authorities as required
• We will take immediate steps to secure the breach
• We will provide support and guidance to affected users

5.3 Your Security Responsibilities

• Keep your login credentials secure and confidential
• Use strong, unique passwords
• Log out of shared devices
• Report suspected security issues immediately

6.1 Access and Control

You have the right to:

• Access: Request a copy of all personal data we hold about you
• Correct: Update or correct inaccurate information
• Delete: Request deletion of your personal data (subject to legal requirements)
• Restrict: Limit how we process your data
• Portability: Receive your data in a portable format

6.2 Communication Preferences

• Opt out of marketing communications at any time
• Choose your preferred communication channels
• Set frequency preferences for updates
• Unsubscribe from newsletters with one click

6.3 Cookie Management

• Manage cookie preferences through your browser
• Opt out of analytics cookies
• Clear stored cookies at any time
• Note: Essential cookies are required for service functionality

7.1 Retention Periods

• Active Clients: Data retained for the duration of service plus 1 year
• Former Clients: Essential data retained for 7 years (legal/tax requirements)
• Marketing Data: Retained until consent is withdrawn
• Health Data: Retained for 10 years (medical record standards)
• Payment Data: Retained for 7 years (financial regulations)

7.2 Secure Deletion

When data is no longer needed, we securely delete it using industry-standard methods to ensure it cannot be recovered or reconstructed.

Our services operate primarily in Indonesia, but we may transfer data internationally for:

• Cloud storage and backup services
• Payment processing
• Communication platforms (WhatsApp, email)
• Analytics and website optimization

8.1 Safeguards

When transferring data internationally, we ensure:

• Adequate protection through contractual agreements
• Compliance with applicable data protection laws
• Use of certified and compliant service providers
• Encryption during transfer and storage

9.1 Types of Cookies We Use

• Essential Cookies: Required for website functionality and security
• Analytics Cookies: Help us understand website usage and improve experience
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Used for targeted advertising (with consent)

9.2 Third-Party Services

We may use third-party services that set their own cookies:

• Google Analytics (website analytics)
• Facebook Pixel (advertising)
• Stripe (payment processing)
• Mailchimp (email marketing)

9.3 Managing Cookies

You can control cookies through your browser settings or by contacting us. Note that disabling essential cookies may affect website functionality.

If we become aware that we have collected information from someone under 18, we will delete that information immediately. If you believe we have collected information from a minor, please contact us immediately.

11.1 Notification of Changes

• We will notify you of material changes via email
• Updated policy will be posted on our website
• Date of last update is shown at the top of this policy
• Continued use of services indicates acceptance of changes

11.2 Version History

We maintain a record of significant changes to this Privacy Policy. Contact us if you need information about previous versions.

13.1 European Union Residents

If you are located in the EU, you have additional rights under GDPR:

• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time
• Right to lodge a complaint with supervisory authorities

13.2 California Residents

California residents have rights under CCPA:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (we don't sell data)
• Right to non-discrimination for exercising privacy rights

13.3 Other Jurisdictions

We respect the privacy laws of all jurisdictions where our clients are located and will comply with applicable local privacy regulations.