Privacy notice
Last updated 23 September 2026
This notice explains how Fightlab Martial Arts (“Fightlab”, “we”) handles your personal data under Malaysia's Personal Data Protection Act 2010 (PDPA).
What we collect
- Account details: name, email, phone number and password (stored only as a secure hash).
- Member details you choose to give: date of birth, emergency contact, and injuries or medical conditions your coach should know about.
- Training records: memberships, class bookings, check-ins and attendance.
- Purchases: what you bought, delivery address and payment records. Card and bank details are handled by our payment providers (Billplz, Stripe) and never reach us.
- Enquiries: details you give when booking a free trial or asking about corporate programmes.
- If you agree to cookies: how you use the website, through Google Analytics, Meta and TikTok.
Why we use it
- To run your membership: bookings, check-in, receipts and reminders.
- To keep you safe in class: coaches see medical notes and emergency contacts for their classes only.
- To reply to enquiries and follow up on free trials.
- To meet legal and accounting obligations.
We don't sell your data. Marketing messages are only sent with your consent, and you can ask us to stop at any time.
Who sees it
Fightlab staff and coaches, as far as their role needs. Service providers that run parts of the website for us: hosting, database, email delivery, payments and (if you agreed) analytics. They may process data outside Malaysia under appropriate safeguards.
How long we keep it
For as long as you're a member and for up to 7 years afterwards where accounting records require it. Enquiries that don't become memberships are deleted after 2 years.
Your rights
You can see and correct most of your details in your profile. To get a copy of your data, withdraw consent or ask us to delete your account, contact us at the front desk.