PRIVACY POLICY / PERSONAL DATA PROTECTION NOTICE
Last Updated: 24/9/2026
1. INTRODUCTION
DEEPFIT ENTERPRISE ("DEEPFIT", "we", "us", or "our") respects your privacy and is committed to protecting your personal data.
This Privacy Policy / Personal Data Protection Notice explains how we collect, use, disclose, store, and protect personal data when you visit our website, use our application, purchase our services, communicate with us, or otherwise interact with DEEPFIT.
By using our website, application, or services, you acknowledge that you have read and understood this Privacy Policy.
2. WHO WE ARE
DEEPFIT ENTERPRISE
Business Address:
194, Jalan SS 9A/6,
47300 Petaling Jaya, Selangor, Malaysia
Email:
admin@deepfitcoaching.com
3. PERSONAL DATA WE MAY COLLECT
Depending on how you interact with DEEPFIT, we may collect the following types of personal data.
3.1 Identity and Contact Information
This may include:
• Full name
• Email address
• Telephone or mobile number
• Address
• Date of birth or age
• Account information
3.2 Fitness and Lifestyle Information
This may include:
• Height
• Weight
• Body measurements
• Fitness goals
• Training history
• Exercise information
• Training performance
• Progress records
• Lifestyle information
• Nutrition-related information
3.3 Health-Related Information
Where provided by you, we may collect information relating to:
• Medical conditions
• Injuries
• Medications
• Pregnancy status
• Exercise limitations
• Relevant health history
• Other information relevant to providing fitness guidance
You should only provide information that is relevant to your participation in DEEPFIT services.
Where required by applicable law, DEEPFIT will obtain the appropriate consent before processing sensitive personal data.
3.4 Images and Videos
You may voluntarily provide:
• Progress photographs
• Food photographs
• Exercise videos
• Other images or videos relevant to your coaching
3.5 Payment Information
Payments may be processed through third-party payment providers.
DEEPFIT may receive transaction-related information such as:
• Payment status
• Transaction reference
• Package purchased
• Amount paid
• Payment date
DEEPFIT does not intend to store complete credit or debit card details where those details are processed directly by the applicable payment provider.
3.6 Technical and Usage Information
When you use our website or application, we may collect information such as:
• IP address
• Device information
• Browser information
• Operating system
• Application usage
• Website interactions
• Cookies
• Log information
• General analytics information
4. HOW WE COLLECT PERSONAL DATA
We may collect personal data when you:
• Create an account
• Purchase a DEEPFIT service
• Complete an onboarding questionnaire
• Provide information during your fitness assessment
• Communicate with a coach
• Communicate with DEEPFIT through WhatsApp
• Book a consultation
• Attend a video call
• Use our application
• Upload photographs or videos
• Submit a testimonial or review
• Contact customer support
• Interact with our website
• Communicate with us through social media
• Subscribe to our marketing communications
• Otherwise voluntarily provide information to us
5. WHY WE USE YOUR PERSONAL DATA
We may collect and use your personal data for the following purposes:
• To provide DEEPFIT services
• To create and manage your account
• To develop training and nutrition recommendations
• To personalize your coaching experience
• To monitor your progress
• To provide coach feedback
• To process payments
• To manage subscriptions
• To communicate with you
• To provide customer support
• To administer refunds and billing
• To improve our products and services
• To troubleshoot technical problems
• To maintain security
• To prevent fraud or misuse
• To comply with legal obligations
• To conduct internal business operations
• To analyse aggregated or de-identified trends
• To send marketing communications where permitted
• To operate and improve our website and application
• To understand how customers use our services
• To measure the effectiveness of our marketing and advertising
6. HEALTH AND FITNESS INFORMATION
DEEPFIT may ask for health-related information before or during your participation in our services.
This information may be used to:
• Understand relevant health or exercise limitations
• Provide more appropriate fitness guidance
• Identify situations where professional medical advice may be appropriate
• Personalize recommendations
• Support safer participation in exercise and fitness activities
You are responsible for providing accurate and complete information that is relevant to your participation.
You should notify DEEPFIT if relevant health circumstances change during your participation.
DEEPFIT does not provide medical diagnosis, treatment, or medical advice.
7. AI FOOD SCANNER
DEEPFIT uses third-party artificial intelligence technology to analyse food photographs submitted through the AI Food Scanner.
The AI Food Scanner is currently intended to process food photographs and provide food-related estimates or guidance.
DEEPFIT currently uses third-party AI technology provided by Anthropic for this purpose.
The AI system may analyse visual information contained in submitted food photographs.
Customers should avoid including unnecessary personal information, identification documents, medical records, or other unrelated personal information in food photographs.
AI-generated information may occasionally be inaccurate, incomplete, or unsuitable.
AI-generated information should not be treated as medical advice or as a substitute for professional healthcare or professional medical or nutritional assessment.
8. THIRD-PARTY SERVICE PROVIDERS
DEEPFIT works with third-party service providers to operate our business and provide our services.
These providers may include:
• Supabase — application and database infrastructure
• Stripe — payment processing
• EzBeli or other approved installment/payment providers
• Anthropic — AI-assisted food image analysis
• Wix — website infrastructure
• WhatsApp — customer communication
• Google Meet — video meetings
• Calendly — appointment scheduling
• Apple App Store — application distribution
• Google Play — application distribution
• Meta — advertising and marketing services
Depending on the service involved, these third-party providers may process personal data on our behalf or process information under their own applicable privacy policies.
DEEPFIT does not sell your personal data.
9. THIRD-PARTY PRIVACY POLICIES
Third-party service providers may have their own privacy policies and terms governing how they process information.
Where appropriate, you should review the relevant third party's privacy policy for more information about its handling of personal data.
DEEPFIT is not responsible for the independent privacy practices of third-party providers outside DEEPFIT's reasonable control.
10. CROSS-BORDER DATA PROCESSING
Some third-party technology and service providers used by DEEPFIT may process or store personal data outside Malaysia.
Where personal data is transferred outside Malaysia, DEEPFIT will take reasonable steps to comply with applicable Malaysian data protection laws and regulatory requirements.
The countries or locations where data may be processed may vary depending on the infrastructure and service providers used by DEEPFIT.
11. MARKETING COMMUNICATIONS
Where permitted by applicable law and where appropriate consent has been obtained, DEEPFIT may contact you for marketing purposes through:
• Email
• WhatsApp
• Instagram or other social media channels
We do not currently use SMS marketing.
Marketing communications may include:
• DEEPFIT updates
• Educational content
• Fitness and nutrition information
• Promotions
• Special offers
• New services or features
• Events or other DEEPFIT-related information
You may request that DEEPFIT stop sending marketing communications by contacting us or using the unsubscribe mechanism provided in the relevant communication.
12. COOKIES AND WEBSITE TECHNOLOGIES
DEEPFIT may use cookies, pixels, analytics tools, and similar technologies on our website.
These technologies may be used to:
• Operate the website
• Remember preferences
• Understand website usage
• Measure marketing performance
• Improve user experience
• Maintain website security
• Understand the effectiveness of advertising
• Analyse website traffic and usage
Third-party advertising or analytics providers may place or access cookies or similar technologies in accordance with their own policies.
You may be able to control or disable certain cookies through your browser or device settings.
Disabling certain cookies may affect the functionality of parts of our website.
13. ADVERTISING AND META
DEEPFIT may use Meta advertising and related technologies to advertise our services and measure advertising performance.
These technologies may collect information about interactions with our website or advertisements.
Where applicable, Meta may process information in accordance with its own privacy policy and terms.
DEEPFIT does not sell customer personal data to advertisers.
14. TESTIMONIALS AND MARKETING CONTENT
Customers may voluntarily submit testimonials, reviews, photographs, videos, or other content to DEEPFIT.
DEEPFIT will not use an identifiable customer's progress photograph, transformation photograph, or exercise video for marketing purposes without obtaining separate permission from the customer.
Where you voluntarily submit a testimonial or review, DEEPFIT may use that testimonial or review for legitimate business and marketing purposes, subject to applicable law.
If DEEPFIT wishes to use your identifiable photograph or video for marketing purposes, we will request separate permission before doing so.
15. DATA SECURITY
DEEPFIT takes reasonable practical measures to protect personal data against:
• Unauthorized access
• Misuse
• Accidental disclosure
• Loss
• Alteration
• Destruction
• Unauthorized processing
We use appropriate administrative, technical, and organizational measures based on the nature of the information and the services we provide.
However, no electronic transmission, application, website, or storage system can be guaranteed to be completely secure.
You are responsible for keeping your account credentials confidential and should notify DEEPFIT if you believe your account has been accessed without authorization.
16. DATA RETENTION
DEEPFIT retains personal data only for as long as reasonably necessary for the purposes for which it was collected, or where retention is required or permitted by applicable law.
When personal data is no longer required, DEEPFIT will take reasonable steps to delete, destroy, or anonymize it where appropriate.
Certain information may need to be retained after a customer leaves DEEPFIT for purposes including:
• Legal compliance
• Accounting and financial records
• Tax requirements
• Dispute resolution
• Fraud prevention
• Security
• Enforcement of contractual rights
• Other legitimate business or legal purposes
17. CUSTOMER-UPLOADED CONTENT
Customers may upload photographs, videos, food images, exercise videos, and other content while using DEEPFIT services.
You may request deletion of uploaded content associated with your account.
DEEPFIT will take reasonable steps to delete such content where appropriate, subject to information that DEEPFIT is legally required or otherwise permitted to retain.
18. YOUR PERSONAL DATA RIGHTS
Subject to applicable Malaysian law, you may have rights relating to your personal data, including the right to:
• Request access to personal data held by DEEPFIT
• Request correction of inaccurate or incomplete personal data
• Withdraw consent where applicable
• Request deletion where legally available
• Ask about how your personal data is being processed
• Object to certain processing where applicable
• Exercise other rights available under applicable Malaysian data protection laws
Requests should be sent to:
DEEPFIT may need to verify your identity before processing a request.
Certain information may need to be retained where required or permitted by law.
19. ACCOUNT DELETION
If you request deletion of your DEEPFIT account, DEEPFIT will take reasonable steps to delete or anonymize personal data that no longer needs to be retained.
However, DEEPFIT may retain information where necessary for:
• Legal compliance
• Accounting or financial records
• Tax requirements
• Fraud prevention
• Dispute resolution
• Enforcing agreements
• Security
• Other legitimate purposes permitted by law
Deleting an account does not necessarily mean that all records relating to previous transactions can be immediately deleted.
20. CHILDREN AND MINORS
DEEPFIT services may be available to persons under 18 only where a parent or legal guardian registers the customer.
The parent or legal guardian must:
• Register the account
• Provide the required consent
• Make or authorize payment
• Be responsible for the minor's participation in the service
Parents or legal guardians may contact DEEPFIT regarding the personal data of a minor.
21. DATA BREACHES
DEEPFIT maintains reasonable procedures for responding to suspected personal data breaches.
If DEEPFIT becomes aware of a personal data breach, we will take reasonable steps to investigate, contain, and address the incident.
Where notification is required under applicable Malaysian law, DEEPFIT will make the appropriate notifications within the required timeframe.
22. CHANGES TO THIS PRIVACY POLICY
DEEPFIT may update this Privacy Policy from time to time to reflect changes to:
• Our services
• Technology
• Third-party providers
• Applicable laws
• Regulatory requirements
• Our data processing practices
The updated version will be published on our website with a revised "Last Updated" date.
Where required, DEEPFIT may provide additional notice regarding material changes.
23. CONTACT US
For questions, requests, or concerns relating to privacy or personal data, please contact:
DEEPFIT ENTERPRISE
194, Jalan SS 9A/6
47300 Petaling Jaya
Selangor
Malaysia
Email: admin@deepfitcoaching.com