Privacy
policy.
This policy explains what personal information No Limit Fitness collects, why we collect it, who we share it with, and the rights you have under the Protection of Personal Information Act, 2013 (POPIA).
Last updated 21 July 2026
Awaiting client sign-off
This policy is drafted from what the website actually does, but it has not been reviewed by the business or by a legal advisor. The items marked needs confirmation require details only No Limit Fitness can supply. Remove this notice once the policy has been checked and those blanks are filled.
Who we are
No Limit Fitness operates this website and the training services described on it, from 79 Boeing Road East, Bedfordview, Johannesburg, South Africa.
Needs confirmation: registered company name, company registration number, VAT number if registered, and the name and contact address of the Information Officer registered with the Information Regulator. POPIA requires a designated Information Officer.
What we collect
We collect only what a given action needs:
- Enquiries. Your name, email address, phone number, the package you are asking about, and your message. If you enquire about personal training we also ask your training frequency and any injuries, so a coach can answer you properly.
- Memberships and day-passes. Your name, email address, phone number, and the package you chose.
- Class bookings. Your name, contact details, and which sessions you have booked or cancelled.
- Payments.Card details are entered on Paystack's secure checkout and are never seen by, sent to, or stored on this website. We receive only the payment result and reference.
We do not run advertising trackers, analytics profiling, or social media pixels on this site. The only cookies set are the ones needed to keep you signed in to the admin area and to keep your booking session working.
Why we use it
To reply to your enquiry, to take and manage your booking, to process your payment and membership, to send you the confirmation and reminder emails that relate to your booking, and to keep our own financial and attendance records.
We do not sell your information. We do not send marketing email unless you have asked us to.
Who we share it with
Only the service providers that make the site work, and only with what they need:
- Supabase hosts our database of members, classes, and bookings.
- Paystack processes payments and subscriptions.
- Resend delivers our transactional email.
- Vercel hosts the website itself.
Some of these providers process or store data outside South Africa. POPIA permits this where the receiving country or the provider offers comparable protection. We rely on the standard data processing terms each provider publishes.
Needs confirmation: whether any other third party (accountant, bookkeeping software, CRM, WhatsApp Business) receives member data, so it can be listed here.
How long we keep it
Enquiries are kept while we are dealing with them and for a reasonable period afterwards. Membership, booking, and payment records are kept for as long as you are a member and afterwards for the period South African tax and company law requires, which is generally five years.
Needs confirmation: the retention period the business wants to apply to enquiries from people who never became members.
Your rights
Under POPIA you may ask us to:
- tell you what personal information we hold about you;
- correct anything that is wrong or out of date;
- delete information we no longer have a lawful reason to keep;
- stop using your information for a particular purpose;
- withdraw a consent you gave us, at any time, without affecting anything we did before you withdrew it.
To exercise any of these, email info@nolimitfitness.fit or call +27 72 231 4640. We will respond within a reasonable time.
If you are not satisfied with how we handled your request you may complain to the Information Regulator of South Africa at inforegulator.org.za.
Security
The site is served over HTTPS. Access to member records is restricted to No Limit Fitness staff accounts. Card data never touches our systems. No system is perfectly secure, but if a breach affects your personal information we will notify you and the Information Regulator as POPIA requires.
Changes to this policy
If this policy changes we will update the date at the top of this page. Material changes affecting how we use your information will be communicated directly where we can.