Legal
Privacy Policy
Last updated: 2026-09-23
1. Who is responsible for your data
PTLancer Sports Consultation W.L.L., registered in the State of Qatar under Commercial Registration No. 208785, is the controller of personal data processed through PTLancer. Contact us at support@ptlancer.com.
2. What we collect
Information you give us
- Account details — name, email address, password (stored only as a cryptographic hash), role and profile information.
- Client training information — the goals, measurements, progress entries and workout logs you choose to record.
- Trainer information — professional profile, specialisms, availability, and the credential documents submitted for verification.
- Messages — the content of messages you exchange with your trainer or client through the Platform.
- Support correspondence — what you send us when you contact support.
Information generated by your use
- Bookings, sessions, package entitlements and purchase records.
- Technical and security data such as log entries needed to operate and protect the service.
Payment information
Card and payment details are collected and processed by Paddle, our merchant of record, on Paddle's own systems. PTLancer never receives or stores your full card number. We receive the transaction record — what was bought, the amount, the currency, tax and status — so we can grant your entitlement and keep financial records.
3. Why we process it, and on what basis
| Purpose | Lawful basis |
|---|---|
| Creating and running your account, delivering the marketplace | Performance of a contract |
| Processing purchases and maintaining financial records | Contract, and legal obligation for accounting and tax records |
| Verifying trainer credentials | Legitimate interests — trust and safety of the marketplace |
| Service, security and transactional email | Contract, and legitimate interests in securing the service |
| Special category data (health, fitness and body measurements you enter) | Your explicit consent, given by choosing to enter it |
4. Health and fitness data
Measurements, body composition entries, progress photographs and similar information are sensitive. You choose whether to provide them. They are visible to you and to the trainer you have an active relationship with, and they are used to deliver your coaching. You can delete entries you have added.
5. Who we share it with
- Your trainer or your client — the information needed to deliver and receive the coaching you have agreed.
- Paddle — as merchant of record, to take payment, calculate tax and issue receipts.
- Infrastructure providers — Supabase (database, authentication and file storage), Cloudflare (hosting and network protection), and our transactional email provider.
- Authorities — where we are legally required to disclose.
We do not sell your personal data, and we do not share it with advertisers.
6. International transfers
Our providers may process data outside your country. Where that happens, transfers are made under the safeguards those providers offer, such as standard contractual clauses.
7. How long we keep it
Account and training data is kept while your account is open. Financial and transaction records are kept for as long as accounting and tax law requires, which is typically several years and applies even after an account closes. Trainer verification documents are kept for as long as the trainer is listed and for a reasonable period afterwards.
8. Your rights
Subject to your local law, you may request access to your data, correction, deletion, restriction, portability, or object to processing; and where we rely on consent, you may withdraw it at any time. Client accounts can be deleted from within the application. To exercise any right, contact support@ptlancer.com. You may also complain to your local data protection authority.
Deleting an account does not erase financial records we are legally required to retain.
9. Security
Access to data is controlled at the database level so that users reach only the records they are entitled to. Traffic is encrypted in transit, passwords are stored hashed, and card data never reaches our systems. No service can promise perfect security, but we treat access control as a core part of the product rather than an afterthought.
10. Cookies and local storage
This public website sets no cookies and no tracking. The PTLancer application at https://app.ptlancer.com uses strictly necessary browser storage to keep you signed in and to remember interface preferences. Paddle may set its own cookies during checkout under its own policy.
11. Children
PTLancer is not intended for children. Do not create an account if you are under the age required to enter a binding contract in your country. If we learn that we hold a child's data without a proper basis, we will delete it.
12. Changes
We may update this policy; the "last updated" date above will change.
13. Contact
PTLancer Sports Consultation W.L.L.
Commercial Registration No. 208785, State of Qatar
support@ptlancer.com