1. Who handles your data

The data user is HOLIAO FITNESS WORLD (JM0956915-U), Penang, Malaysia, trading as HO-LIAO FITNESS. Privacy enquiries may be sent to info@holiaofitness.com or WhatsApp +60 19-442 5679.

2. Information we collect

We may collect your name, telephone number, email address, preferred language, broad goals, training area, messages, scheduling information and other information you provide during conversations, onboarding or participation. If you purchase, WooCommerce records the order, product, amount, payment status and necessary billing details. Customer accounts hold information only where account features are used.

3. Health information

Health information may be sensitive personal data. Do not send medical records or laboratory reports through general enquiry channels. If health-related information is needed for safer coaching, we will request only relevant information through an appropriate process.

4. Why we use information

We use information to answer enquiries, assess suitability, provide and support services, manage scheduling, orders, payment, onboarding and programme access, maintain operational records, prevent misuse, secure the site, comply with legal obligations and improve the customer experience.

5. Payments through DOKU

Online payments are processed by DOKU. DOKU receives transaction and customer information required to process and verify payment. HO-LIAO FITNESS does not store your full card number, bank password or online-banking credentials. DOKU’s handling of data is governed by its applicable notices and terms.

6. Communications

If you contact us through WhatsApp, telephone or email, those channel providers process information under their own terms. We use your contact details to respond and send service communications. Marketing will be sent only where permitted, and you may ask us to stop it.

7. Technical data, cookies and analytics

This site and its hosting provider may record IP address, request time, pages, browser type, errors and security information. WordPress and WooCommerce use necessary cookies and session data for navigation, security, language preference, cart and payment functions. No third-party analytics or advertising pixel is deployed as of this notice’s update date. We will update this notice if that changes.

8. Sharing and service providers

We share data only as necessary with assigned coaches and providers supporting our operations, including hosting, WordPress/WooCommerce, DOKU, email and WhatsApp. We may also disclose data where required by law, to protect security or to handle a dispute. We do not sell personal data.

9. Retention and security

We retain data only for as long as reasonably necessary for its purpose, to meet accounting, tax, contractual or legal obligations, and to resolve disputes. The period depends on the record type. We use reasonable access, technical and organisational safeguards, but no online system can be guaranteed completely secure.

10. Your rights and choices

Subject to Malaysian law and applicable exceptions, you may ask about processing, request access or correction, withdraw consent, object to direct marketing, or request deletion where the information no longer needs to be retained. We may verify your identity before acting. See also User Data Deletion.

11. Changes

We may update this notice when practices, services or legal requirements change. The update date will be shown below.

Last updated: 11 September 2026.