Privacy Policy

Last updated: July 31, 2026

This Privacy Policy explains how FITZ HERO (“we”, “us”) collects, uses, and protects personal data in connection with the fitzhero.com website and the FITZ HERO fitness-business management platform (the “Service”). It applies to visitors of this website, the businesses that subscribe to the Service (“Customers”), the staff Customers add to their account, and the members Customers manage through the Service.

1. Information we collect

Depending on how you interact with us, we collect:

• Account & business data — business name, branch details, staff names, usernames, email addresses, and phone numbers, provided when a Customer signs up or adds staff.
• Member data — name, phone number, email, address, date of birth, and package/booking history, entered by a Customer to manage their own members. This data belongs to the Customer; we process it on their behalf.
• Transaction data — package sales, product sales, and payment channel records needed to run the Customer’s business and produce reports.
• Usage data — login activity, check-in/check-out logs, and general activity logs used for security and support.
• Website analytics — when you visit fitzhero.com, Google Analytics may collect anonymized usage data (pages viewed, general location, device type) via cookies to help us understand how the site is used.

2. How we use this information

• To operate, maintain, and secure the Service for each Customer.
• To send transactional emails — account creation, password resets, and booking confirmations.
• To provide customer support and respond to inquiries.
• To process billing for paid subscriptions.
• To understand and improve the fitzhero.com website through aggregated analytics.
• To comply with legal obligations and enforce our Terms of Service.

3. Who can access your data

Each Customer’s business data is logically isolated from every other Customer on the platform. Within a business, access to member data is limited to the staff accounts that business has created and the permissions its administrator has granted them. Our own team accesses Customer data only when necessary to provide support, investigate an issue, or as required by law.

4. Third parties we work with

We share limited data with the following categories of service providers, solely to operate the Service:

• Cloud infrastructure providers, who host our servers and databases.
• Email delivery providers, used to send account and password-reset emails.
• TRCloud, an accounting/invoicing service some Customers connect for tax-compliant document issuance.
• Google Analytics, for anonymized website traffic analysis.

We do not sell personal data to third parties.

5. Cookies

We use a small number of essential cookies to keep you signed in and remember your language/theme preference. Google Analytics also sets cookies on fitzhero.com to measure site usage. You can control or delete cookies through your browser settings at any time.

6. Data retention & security

Data is transmitted over encrypted connections (HTTPS) and stored with access controls limiting who can reach it. We retain Customer and member data for as long as the Customer’s account remains active, plus a reasonable period afterward for backup and legal purposes, unless a shorter period is required by law or requested by the Customer.

7. International data transfer

Our cloud infrastructure may process and store data outside Thailand. Where this occurs, we take reasonable steps to ensure the data continues to receive an appropriate level of protection.

8. Your rights

Under Thailand’s Personal Data Protection Act B.E. 2562 (2019), individuals whose data we process have the right to access, correct, or request deletion of their personal data, to withdraw consent where consent is the basis for processing, and to request data portability, subject to applicable exceptions. If your data is managed by one of our business Customers (for example, as a gym member), please contact that business directly first, as they control the data; we support them in fulfilling such requests.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date at the top of this page.

10. Contact us

For any privacy questions or requests, contact us at [email protected] or 080-913-9134.

This document is a general-purpose template and is provided for convenience. It is not a substitute for advice from a qualified lawyer, and you should have it reviewed before relying on it as your business’s binding policy.