Privacy Policy

🏢1. Who we are

1.1MOVIIN is a business registered in Singapore (UEN 53524854K). It is owned and operated by ALL IN WELLNESS PTE. LTD. (UEN 202442198E). In this policy, "Moviin", "we", "us" and "our" mean both.

1.2Our registered address is 1 North Bridge Road, #11-06, High Street Centre, Singapore 179094. Our studio is at 6 Eu Tong Sen St, #04-89, The Central @ Clarke Quay, Singapore 059817.

1.3We handle personal data under Singapore's Personal Data Protection Act 2012 (the "PDPA"). We have appointed a Data Protection Officer, who can be reached at hello@moviin.sg, and we keep internal policies and staff practices for handling personal data under the PDPA.

📄2. What this policy covers

2.1This policy covers personal data we collect through www.moviin.sg, our WhatsApp number (+65 8175 5318), email, our social media pages, and in person at the studio.

2.2Class bookings and package purchases are currently made on Vibefam, a third-party booking platform. Vibefam's own privacy policy covers what you enter on its pages. Vibefam shares your booking details with us so we can run your classes, and this policy covers what we do with them.

2.3When you join as a member, you also accept our Personal Data Protection Policy as part of your sign-up documents. This policy is consistent with it and describes how our website and enquiry channels handle your data. If we give you a separate privacy notice for a specific service (for example, a member booking account), that notice applies alongside this policy.

🗂️3. What we collect

Information you give us

• 3.1Contact details: your name, mobile number and email address.
• 3.2Messages: what you write to us on WhatsApp, by email, or through Instagram and Facebook, including any questions about your goals or training history.
• 3.3Membership details: the classes you book and attend, the packages you buy, cancellations, and payment records we receive from our booking and payment providers.
• 3.4Health and fitness information: answers in your pre-exercise health questionnaire and waiver, and anything you tell your coach about injuries, conditions or pregnancy. See section 8.
• 3.5Sign-up details: your age or date of birth, and the name and phone number of an emergency contact. Please tell your emergency contact that you have given us their details.
• 3.6Feedback: reviews and comments you choose to give us.

Information collected automatically on this website

• 3.7Device and browser data: IP address, browser type, device type, screen size, language and approximate location (city level) derived from your IP address.
• 3.8Usage data: pages and sections you view, how you arrived (for example from a Google search or a Facebook ad), and when you tap our "Book" or "WhatsApp" buttons.

3.9We do not collect NRIC, FIN or passport numbers. We do not ask for card details on this website: payments are taken by our booking and payment providers on their own secure pages.

3.10If you choose not to give us personal data we ask for, we may not be able to answer your enquiry, take your booking or coach you safely.

🍪4. Cookies and tracking

4.1Cookies are small files a website stores in your browser. This website uses the tools below to measure visits and the performance of our ads, only if you accept them (clause 4.4). None of them is needed for the site to work. We also store your cookie choice in your browser (moviin_consent) so we do not ask again.

4.2The site also loads fonts from Google Fonts and a map from OpenStreetMap. These services receive your IP address and browser details when the page loads. They do not set cookies for us.

4.3Your choices. You can block or delete cookies in your browser settings at any time. You can also:

• install the Google Analytics opt-out browser add-on;
• change how Meta uses your data for ads in your Facebook ad preferences;
• turn off personalised Google ads in My Ad Center.

4.4We ask first. On your first visit, a banner asks whether you accept these cookies. Google Analytics and the Meta Pixel set no cookies until you tap Accept. If you tap Decline, Google may still receive basic visit counts without cookies or identifiers, and Meta receives nothing.

4.5You can change your choice at any time with "Cookie settings" at the bottom of our homepage. Declining does not stop any part of the site from working.

🎯5. How we use your data

5.1We use your personal data to:

• reply to your enquiries and help you choose a class or programme;
• run your bookings, attendance, packages and payments;
• coach you safely, including adapting exercises to your health information;
• send you class updates, schedule changes and reminders about your bookings;
• send you news about classes and workshops, only if you agreed to receive it (section 13);
• measure how this website and our ads perform, and improve them;
• keep accounting records and meet our legal obligations.

5.2We collect and use your data with your consent, including consent given when you contact us or sign up, or where the PDPA otherwise allows it. We will not use your data for a new purpose without telling you and, where needed, asking for your consent first.

5.3The PDPA also allows us to use personal data without consent in limited cases, such as responding to an emergency that threatens someone's life, health or safety, or for our legitimate interests (for example, preventing fraud or misuse of our services) after we have assessed that those interests outweigh any adverse effect on you.

🤝6. Who we share it with

6.1We do not sell your personal data. We share it only with service providers who help us run Moviin, and only for the purposes in section 5:

6.2Our coaches see the details of members booked into their classes, including relevant health information, so they can coach safely.

6.3We may also disclose personal data where the law requires it, to protect someone's safety in an emergency, or to our professional advisers (such as accountants or lawyers) under a duty of confidentiality.

6.4If the Moviin business is sold or restructured, personal data may pass to the new owner, who must keep protecting it under this policy.

🌏7. Transfers outside Singapore

7.1Our member records and waivers are stored with Supabase. They are currently hosted in Australia, and we are moving them to servers in Singapore. We will update this policy when the move is complete.

7.2Some of our other providers in section 6, such as Google, Meta, Vercel and respond.io, store or process data outside Singapore, for example in the United States or the European Union.

7.3When data leaves Singapore, we take steps required by the PDPA to make sure it is protected to a standard comparable to the PDPA, such as using providers bound by contracts with data protection terms.

🩺8. Health information

8.1This website does not ask for health information. We collect it only through our pre-exercise health questionnaire and waiver, and in conversation with your coach.

8.2We use it only to decide whether an activity suits you, adapt exercises, and respond in an emergency. Only Moviin staff who need it to coach you can see it.

8.3We never use health information for marketing or advertising, and we never share it with advertising platforms.

🗓️9. How long we keep it

9.1We keep personal data only as long as we need it for the purposes in section 5, or as long as the law requires.

• Signed sign-up documents and the health and intake records that form part of them: 6 years after you stop training with us, matching the limitation period for contract claims in Singapore. We then delete them.
• Payment and accounting records: for at least 5 years, as Singapore law requires for business records.
• Enquiries that do not lead to membership: until they are no longer needed to answer you.
• Website analytics: under the retention settings of Google and Meta, and cookies expire as listed in section 4.

9.2When we no longer need personal data, we delete it or make it anonymous.

✅10. Keeping your data accurate

10.1We rely on the details you give us. Please tell us at hello@moviin.sg or on WhatsApp when your contact details, emergency contact or health information change.

10.2We take reasonable steps to make sure the personal data we use to make decisions about you, such as your health information, is accurate and complete.

🔒11. How we protect it

11.1We use reasonable security arrangements to protect your data from unauthorised access, use, change or loss. These include encrypted connections (HTTPS), access limited to staff who need it, and providers with their own security certifications.

11.2No method of storing or sending data is completely secure. If you think your data with us has been put at risk, tell us straight away at hello@moviin.sg.

✋12. Your rights

12.1Under the PDPA you can ask us to:

• give you access to the personal data we hold about you, and tell you how it has been used or disclosed in the past year;
• correct personal data that is wrong or incomplete. When we correct it, we also send the corrected data to any organisation we disclosed it to in the year before, where the PDPA requires;
• stop using your data by withdrawing your consent.

12.2Email hello@moviin.sg with your request. We may need to confirm who you are before acting on it.

12.3We will reply within 30 days. If we need longer, we will tell you within that time when you can expect a reply. We may charge a reasonable fee for an access request, and we will tell you the amount before we start.

12.4If you withdraw consent, we may no longer be able to take your bookings or coach you safely, and we will explain what that means before we act. Withdrawing consent does not affect what we did before.

12.5If you are not satisfied with our response, you can contact the Personal Data Protection Commission at pdpc.gov.sg.

📣13. Marketing messages

13.1We send news about classes, workshops and offers by WhatsApp or email only if you have clearly agreed to receive it. We comply with the Do Not Call provisions of the PDPA, and do not send marketing messages to a Singapore number listed on the Do Not Call Registry unless you have given us clear and unambiguous consent.

13.2You can stop these at any time by replying "STOP" on WhatsApp, using the unsubscribe link in an email, or telling us at hello@moviin.sg. Service messages about your own bookings will continue.

🚨14. Data breaches

14.1If a data breach is likely to cause you significant harm, or affects 500 or more people, we will notify the Personal Data Protection Commission within 3 calendar days of confirming that, as the PDPA requires.

14.2Where the breach is likely to cause you significant harm, we will also tell you directly, with steps you can take to protect yourself.

👤15. Under 18s

15.1Our classes are designed for adults. We do not knowingly collect personal data from anyone under 18 without the consent of a parent or guardian. If you believe we have, contact us and we will delete it.

🔄16. Changes to this policy

16.1We may update this policy when our services, providers or the law change. The effective date and version at the top of this page show when it last changed.

16.2If a change materially affects how we use your data, we will tell members by WhatsApp or email before it takes effect.