Legal
Privacy policy
1. Who is responsible for your data
Oolala Next FZ-LLC
Licence 47017963, RAK (U.A.E.)
PO Box 644762, The Sustainable City, Dubai (U.A.E.)
Email: letsgo@coachgari28.com
Coach Gari, who delivers the coaching, accesses the data needed to coach you. Both act under this policy.
2. What we collect and why
- Enquiries: your name, email or phone, city and country, what you are interested in and your message. Used to answer you. Attachments you add are kept with your enquiry.
- Bookings: your name, email or phone, the session, its time and any note you add. Used to run the session, confirm it, and contact you about changes.
- Payments: the amount, currency, method, date and a reference. Card details never reach us: they are entered on Stripe's secure form and processed by Stripe. For a bank transfer, Aani or cash payment we keep the reference Coach Gari records.
- Support Coach Gari: the amount, a reference, the email you give Stripe, and the optional message you write.
- Coaching data (measurements, progress, session notes): only with your consent, given on the consent page we send you, and only for your coaching. You can withdraw that consent at any time.
- Technical data: a salted hash of your IP address for a short time, to limit abuse of the forms. Our analytics (Plausible) are cookie-free and aggregate; they never identify you.
We do not sell your data, and we do not use it for advertising.
3. Legal basis
We process your data to perform the service you ask for (enquiry, booking, payment), to meet legal and accounting obligations (payment records), on your consent (coaching data, optional messages), and for our legitimate interest in keeping the site secure and running.
4. Who handles data for us
- Supabase — database and secure functions (hosting in the EU).
- Stripe — card payments. Stripe's own privacy policy applies to the card transaction.
- Resend — sending transactional emails (confirmations, receipts, replies).
- Vercel — hosting of the website.
- Plausible — cookie-free analytics.
- Migadu — our email mailbox.
Each of them processes data on our instructions and under a contract. Some are outside the U.A.E.; where data leaves the country it is protected by contractual safeguards.
5. How long we keep it
- Enquiries: up to 24 months after the last exchange.
- Bookings and coaching data: for as long as you are a client and up to 24 months after, unless you ask for deletion earlier.
- Payment records: 5 years, as required for accounting.
- Technical logs: a few days.
6. Your rights
You can ask to see the data we hold about you, receive a copy, correct it, delete it, or withdraw a consent. Write to letsgo@coachgari28.com from the email address you used with us; we answer within 30 days. Payment records we must keep by law are kept even after a deletion request, with everything else removed.
7. Security
Data is stored in access-controlled systems with encryption in transit. Coaching data is separated from booking and payment data, and only the people who need it to coach you can read it. Links we email you for payments, reports or consent are unique and expire.
9. Changes
We may update this policy; the date at the top tells you when. Questions about your data: letsgo@coachgari28.com.