1. Who is responsible
On Trend Marketing Sports (اون ترند للتسويق واداره المراكز الرياضيه), trading as CLAY, New Cargo Village, Cairo International Airport, Building CT2, Cairo, Egypt, is the controller of the data described here, under Egypt's Personal Data Protection Law (Law No. 151 of 2020).
2. What we collect from members
- Account details: name, phone number, email, gender and date of birth. Optionally, an emergency contact, your social media handles and how you heard about us.
- Health screening (PARQ): your answers, used so your instructor knows what to look out for.
- Bookings and visits: classes booked, attended, cancelled or missed, check-in times, waitlist and spot offers, packages, wallet balance and transactions, promo codes, referrals and milestones, and reviews you leave.
- Payments: Paymob processes card payments and sends us the result and a reference. If you save a card, we keep an encrypted reference to it, the last four digits, the card brand and the expiry date. We never see or store your full card number. For InstaPay we record the transfer our team confirms.
- Sign-in and devices: the IP address, device name, platform and browser or app details of each device you sign in on, so you can see and sign out of them in the app. If you allow notifications, a push notification token.
- Messages you send us: WhatsApp, Instagram and Facebook messages to the studio, website enquiries and contact forms, and your email if you join our newsletter.
- App usage: the customer app sends anonymous usage data to PostHog (which screens are opened, and when the app is opened and closed). It is not linked to your account, and there is no session recording.
Our apps do not access your location, camera, contacts or photos.
3. What we collect from staff and instructors
Profile and contact details, your class schedule, shifts and time off, earnings and payroll, door-entry records from your staff pass, arrival and attendance records, and the devices you sign in on.
4. What we use it for
Running bookings, packages and your wallet; checking you in; sending booking, waitlist, payment and account notifications; health and safety screening; processing payments and refunds; answering your messages; running referrals and milestones; paying and scheduling staff; keeping accounts secure; and improving the studio and the apps.
5. Legal basis
We process your data to perform our contract with you (booking and running classes, or employing you), to meet legal, tax and accounting obligations, with your consent where we ask for it (marketing messages, push notifications, saving a card), and for our legitimate interest in running a safe, well-run studio.
6. Who we share it with
We share only what each service needs to do its job. We do not sell your data.
| Service | What it does for us | Where |
|---|---|---|
| Paymob | Card payments, saved cards and refunds | Egypt |
| Meta (WhatsApp, Instagram, Messenger) | Sign-in codes, booking messages, and messages you send us | Outside Egypt |
| Anthropic (Claude) | Sorts incoming messages and drafts internal summaries for staff, which can include names and booking or pay details | United States |
| Expo, Google Firebase, Apple | Delivering push notifications | United States |
| Resend | Sending email | United States |
| Cloudflare | Storing files and images | Global network |
| OVHcloud | Hosting our servers and database | United Kingdom |
| PostHog | Anonymous app usage statistics | European Union |
Your PARQ health answers are never sent to any of these services. We may also disclose data where the law requires it, or to protect the safety of members, staff or the studio.
7. Transfers outside Egypt
As the table shows, most of these services store or process data outside Egypt, including in the United Kingdom, the European Union and the United States. We use them because they are needed to run the apps, and we transfer only what each one needs.
8. How long we keep it
We keep your account and history while your account is open. When it closes, we keep payment and financial records for at least 5 years, as tax and accounting law requires.
9. Deleting your account
You can delete your account in the app (Settings, then Delete account), on our website when signed in, or by following our Delete your account page. Deleting it:
- removes your name, email, phone number, social handles, address and emergency contact, your date of birth, your PARQ health answers, your saved cards, your newsletter subscription, and the IP and device details of your sign-ins;
- keeps, without your name, the records we must hold (bookings, payments and wallet history), plus your gender.
Messages you sent to our WhatsApp, Instagram or Facebook inbox stay in that inbox. Ask us and we will delete them.
10. Your rights
You can ask to see the data we hold on you, correct anything wrong, withdraw a consent you gave (such as notifications or a saved card), object to how we use it, or have it deleted, subject to section 8. Contact us below. You can also complain to Egypt's Personal Data Protection Center.
11. Children
Our apps are for adults. A parent or guardian must create the account for a member under 18, and is responsible for the details and health screening given.
12. Keeping your data secure
Data is encrypted in transit, saved-card references are encrypted at rest, and access is limited to staff who need it for their job.
13. Changes to this policy
We will post any changes here with a new date, and tell you in the app if a change is significant.
14. Contact
Questions about your data: support@claywellnessclub.com, or the Help screen in the app.