Privacy Policy for Hypa
Last Updated: 16 May, 2025Hypa (“we,” “us,” or “our”) respects your privacy and is committed to protecting the personal data of all users, including gym owners, staff, and members.
This Privacy Policy explains how we collect, use, disclose, and protect your information in accordance with the Data Protection Act, 2012 (Act 843) of the Republic of Ghana.
By using our service, you consent to the terms of this Privacy Policy.
1. Information We Collect
We collect the following categories of personal data:
- Gym Owners and Staff
- Full name
- Email address
- Business details (e.g., gym name, address)
- Payment details (via third-party processors like Paystack)
- Members (Gym Clients)
- Full name
- Contact Information
- Membership plan details
- Attendance and class bookings
- Payment history
- Automatically Collected Data
- Device information
- Browser type
- IP address
- Cookies and usage data for analytics
2. Legal Basis for Processing
We collect and process data in compliance with Section 20 of Ghana's Data Protection Act under the following lawful bases:
- Performance of a contract
- Consent (especially for marketing or analytics)
- Legal obligation
- Legitimate interest (e.g., fraud prevention)
3. How We Use Your Data
Your personal data may be used to:
- Provide and improve our services
- Manage subscriptions and class bookings
- Process payments via secure third-party platforms
- Communicate with users for support or updates
- Send notifications or alerts related to gym activities
- Comply with applicable laws and regulations
4. Data Sharing and Disclosure
We may share your data:
- With third-party service providers (e.g., Paystack for payments) under strict data protection agreements
- If legally required by courts or regulatory authorities
- In the event of a business acquisition or merger (with prior notice)
We do not sell or rent personal data to third parties.
5. Cross-Border Data Transfers
If your data is transferred outside Ghana (e.g., to servers hosted in the EU or USA), we ensure appropriate safeguards, such as standard contractual clauses or equivalent protections, in compliance with Sections 42-44 of the Act.
6. Your Rights Under Ghanaian Law
You have the following rights:
- Right to access your personal data
- Right to request correction or deletion
- Right to object to processing
- Right to withdraw consent at any time
- Right to complain to the Data Protection Commission of Ghana
To exercise these rights, please contact us at support@hypagh.com
7. Data Retention
We retain personal data only as long as necessary for the purposes stated above or as required by law.
Inactive data may be anonymized or securely deleted after a reasonable retention period.
8. Security
We implement appropriate technical and organizational measures to safeguard personal data against unauthorized access, loss, or misuse.
These include encryption, secure storage, and access controls.
9. Children's Privacy
Our services are not intended for children under the age of 16. We do not knowingly collect personal data from minors without verified parental or guardian consent.
10. Updates to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “last updated” date and notify users as required.
11. Contact Us
If you have questions or concerns about this policy or your data, please contact:
Hypa Data Protection Officer
Email: kwabena@hypagh.com