How we look after your personal information

Last updated: 28 October 2026

This notice explains what personal information Wellness Empire Gym Limited (RC 9647466), "we", collects when you use this website, join or renew a membership, or train at our gym, and how we use and protect it. We follow the Nigeria Data Protection Act 2023 (NDPA) and the rules of the Nigeria Data Protection Commission.

Who is responsible

Wellness Empire Gym Limited, No. 25 Iboko Street, Uyo, Akwa Ibom State, is the data controller. For anything about your data, write to support@wellnessempire.ng with "Data protection" in the subject line, or speak to the gym manager.

What we collect and why

When you contact us or make a booking on this website

Your name, phone number, email address if you give it, what you are asking about, any preferred date, and your message. We use these only to reply to you and arrange what you asked for. Our lawful basis is your consent, which you give with the tick box on the form, and taking steps at your request before a membership or service contract.

When you become a member

Identity and contact details: name, phone number, email, date of birth, gender, address and an emergency contact.
Membership records: plan, start and end dates, freezes, visits (check-in times) and your member number.
Payment records: amount, date, method and reference. We do not receive or store card numbers. Online payments are made on the secure page of our payment provider (Paystack or Flutterwave), who are licensed by the Central Bank of Nigeria and process card details under their own security standards.

We need these to provide your membership, which is a contract with you, and to keep proper financial records, which the law requires.

Your health questionnaire

Before you train we ask a short set of health questions. Health information is sensitive personal data under the NDPA, so we only collect it with your explicit consent, use it only to keep you safe while training, and protect it more strongly than other data: the answers are encrypted in our system and only the manager can read them. Trainers are only told what they need to adjust your programme.

When you browse this website

This website does not set cookies for its own operation. Our web server keeps standard security logs (IP address, pages requested, time) for up to 30 days to protect the site against attacks. If we use Google Analytics, it only runs after you click "Accept" on the analytics banner; see Cookies and analytics below.

Who we share it with

We do not sell your personal information or share it for marketing. We share it only with:

Payment providers (Paystack, Flutterwave) and our bank (Moniepoint), to take and confirm your payments.
Our web hosting provider, which stores our website and membership system on secure servers. Some of these servers may be outside Nigeria; where that is the case we rely on the safeguards the NDPA requires for cross-border transfers.
Our email provider, to deliver messages between us.
Emergency services or medical staff, if you are taken ill or injured at the gym.
Authorities, where the law requires us to.

How long we keep it

Website enquiries: deleted one year after the enquiry is closed, unless you become a member.
Online sign-ups that were never paid for: the details you typed, including health answers, are erased after 7 days.
Member records and health answers: for as long as you are a member and up to 2 years after your membership ends, so we can welcome you back without starting again. Ask us and we will delete them sooner, except for what we must keep.
Payment and accounting records: 6 years, as required for tax and company records.

How we protect it

Our membership system uses encrypted connections throughout, encrypts sensitive fields such as health answers, requires staff to sign in with a second factor, gives each staff role access only to what it needs, and keeps a tamper-evident record of who did what. Payments are confirmed directly between our payment provider and our system, never on the strength of a screenshot or a browser message alone.

Your rights

Under the NDPA you can ask us to:

tell you what personal information we hold about you and give you a copy;
correct anything that is wrong or incomplete;
delete your information, where we no longer need to keep it;
restrict or stop using it for a particular purpose, or object to how we use it;
give you your information in a common electronic format, or send it to someone else;
withdraw your consent at any time (this does not affect what we did before).

Email support@wellnessempire.ng or ask at reception. We may need to confirm who you are first. We will respond within 30 days. If you are not happy with our response, you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng.

Cookies and analytics

This website works without cookies. Our forms are protected with a signed code inside the page instead of a cookie. If analytics is switched on, a banner asks whether you allow it. Only if you click "Accept" do we load Google Analytics, which sets cookies (such as _ga) to count visits and see which pages are useful, with IP addresses shortened. Your choice is remembered in your browser's local storage, and you can change it by clearing this site's data in your browser. The members' area at app.wellnessempire.ng sets one essential cookie to keep you signed in or to protect a form, and no tracking cookies.

Changes to this notice

If we change how we use your information, we will update this page and the date above. For significant changes affecting members we will also tell you directly.