Policies

2.1 Data we collect

We only collect the data we need to run the studio and your membership:

• Identity and contact details: first and last name, Saudi mobile number and, if you choose to add it, an email address.
• Membership and booking data: sessions booked, attended, cancelled or missed, waitlist requests, packages and memberships purchased, credit balance and expiry dates, and tax invoices.
• Enquiry data: anything you enter in our contact form, such as your area of interest, fitness goal, preferred time and message.
• Health and safety information you choose to share with us or your coach, such as pregnancy, injuries or medical conditions that affect how you train.
• Technical data: a secure sign-in cookie, your language and theme preference, and basic device and browser information used to keep the service working and secure.
• Usage data: the pages you open, the steps you complete when booking, and errors the site runs into, collected through our analytics provider so we can see where the site is confusing or broken. This is linked to your account by an internal reference number, never by your name, mobile number or email.

2.2 How we use your data

We use your personal data to:

• Create and manage your account, and send sign-in codes to your mobile number by WhatsApp.
• Take, confirm, remind you about and manage your bookings, credits and memberships.
• Issue tax invoices and keep the accounting records required by law.
• Respond to your enquiries and call you back when you ask us to.
• Keep you safe during training, by allowing your coach to adapt sessions to any condition you have disclosed.
• Send you news and offers from LeoDiva, only where you have agreed to receive them.
• Improve our schedule, services and website, and protect the service against misuse.

2.3 Legal basis for processing

We process your data because it is necessary to provide the services you have asked for under our Terms and Conditions, to comply with our legal obligations, including tax and commercial record-keeping, or because you have given us your consent, for example when you submit an enquiry or agree to receive marketing messages. Health information is processed only with your explicit consent and only for your safety.

2.4 Who we share your data with

We do not sell personal data. We share it only with service providers who help us run the studio and who are bound to protect it: the provider that hosts our booking and membership system, the messaging provider that delivers WhatsApp codes and booking notifications, payment providers where you pay electronically, and our analytics provider, which receives usage data only. We may also disclose data where required by law or by a competent authority.

Our website embeds a Google Map of the studio location. Loading the map is subject to Google's privacy policy.

2.5 WhatsApp and messages

We send verification codes, booking confirmations, reminders and service notices to the mobile number registered on your account. These are service messages and are part of running your membership. Promotional messages are sent only with your consent, and you can opt out at any time by replying to the message or contacting the studio.

2.6 Cookies and analytics

Our website uses essential cookies: a secure session cookie that keeps you signed in and a preference cookie that remembers your language and theme. You can delete cookies in your browser settings, but you will need to sign in again.

We also use an analytics provider to understand how the website is used and to find faults. It sets its own cookie to recognise the same browser between visits. We use it to count visits and page views, to see how far members get through booking, and to be told when a page fails. We do not use advertising cookies, and we do not sell or share this data with advertisers.

Our analytics provider also records anonymised replays of website sessions, so we can see what went wrong when a booking fails. Everything you type is masked before it leaves your device, and recording is switched off entirely on the sign-in, checkout, invoice, credit and profile screens. Your name, mobile number, email, payment details and any health information you have given us are never sent to our analytics provider.

2.7 How long we keep your data

We keep your account data for as long as your account is active and for a reasonable period afterwards so that you can return without losing your history. Tax invoices and accounting records are kept for the period required by Saudi commercial and tax regulations. Enquiry data is deleted once your enquiry has been handled and you have not become a member.

2.8 How we protect your data

All connections to our website and portal are encrypted. Access keys and credentials are held on our servers and are never sent to your browser. Card details are never stored by LeoDiva. Access to member data is limited to team members who need it to serve you, and health information is visible only to your coaching team.

2.9 Your rights

Under the Personal Data Protection Law you have the right to know what data we hold about you, to receive a copy of it, to correct it, to ask us to delete it where we no longer need it, to withdraw consent you have given, and to object to marketing. You can update your name and email in the portal at any time. To exercise any other right, contact us at cr@leodiva.com and we will respond within 30 days.

2.10 Teen members

For members aged 12 to 18, the account is opened by a parent or legal guardian, who provides the personal data and gives the consents described in this policy on the teen's behalf.

2.11 Changes to this policy

We may update this policy from time to time. The date at the top of this page shows when it was last changed, and significant changes will be announced in the member portal.

Questions about this policy?

Email cr@leodiva.com, message us on WhatsApp or call 0573676619 during opening hours.