legal

Privacy Policy

LAST UPDATED: 5 SEP 2026

How GymSpace Pte Ltd collects, uses and protects personal data, in line with Singapore's Personal Data Protection Act (PDPA).

01

Data we collect

Account data:name, email, phone.
Coach data:legal name, ACRA or UEN, licence or credential numbers and documents, profile photo, years of experience.
Member data:booking history, packages, session and payment status.
Payment data:processed by Stripe; we do not store full card numbers.
Usage and technical data:device, log and cookie data.
PLACEHOLDER · FLAG FOR LEGAL REVIEW

Coach licence documents and any identity or NRIC adjacent data are sensitive. Confirm exactly what identity data is collected, and that consent and retention wording matches.

02

How we use data

To provide the service, verify coaches, process payments and payouts through our payment provider, send transactional and reminder messages, prevent fraud, and comply with law.

03

Our two roles under the PDPA

For your Intervia account, coach or member sign up, verification, billing and platform use, Intervia is the organisation responsible for your personal data. For the client records a coach keeps on the platform (bookings, sessions, packages, notes), the coach is the organisation responsible for that data, and Intervia acts as the coach's data intermediary, processing it only to provide the platform. This matches the coach and client agreements issued on the platform.

04

Consent and its withdrawal

You give consent when you create an account, book a session or submit your details. You may withdraw consent at any time by contacting us. If you withdraw consent we may be unable to provide the service to you.

05

Disclosure to third parties

We share data only as needed to run the service, with named processors: Stripe (payments), Supabase (hosting and database), and our email and messaging provider. Intervia facilitates payments through Stripe but does not itself hold funds; payment data is handled by Stripe under its own terms.

PLACEHOLDER

Confirm the final list of sub processors before go live.

06

A note on messaging channels

If coach to client communication runs over a third party channel such as WhatsApp, that channel's own privacy terms also apply to those messages.

07

Data retention

We keep personal data while your account is active and for as long as required by law, then delete or anonymise it.

PLACEHOLDER · FLAG FOR LEGAL REVIEW

Retention periods, especially financial and transaction records that Singapore law requires be kept (commonly 5 years).

08

Security

We take reasonable technical and organisational measures to protect personal data. No system is absolutely secure and we cannot guarantee absolute security.

09

Overseas transfer

Data may be processed outside Singapore by our providers. Where it is, we require protection comparable to what the PDPA requires.

10

Your rights

You may request access to, or correction of, your personal data. To make a request, write to us at the contact address below. We will respond within a reasonable time.

11

Data Protection Officer

Our Data Protection Officer is Jessica Chan. For any request about your personal data, including access, correction or withdrawal of consent, write to heyintervia@gmail.com with "Data protection" in the subject line. We respond within 30 days.

12

Cookies

We use cookies to keep you signed in, remember preferences and understand how the platform is used. You can control cookies through your browser settings; some features may not work without them.

13

Changes and contact

We may update this policy from time to time and will notify you of material changes. Contact: GymSpace Pte Ltd · heyintervia@gmail.com

This page is a general summary and does not constitute legal advice.