Effective Date: April 19, 2025 · Last Updated: July 19, 2026
Privacy Policy
Who We Are
Gooart Space (“we”, “us”, or “our”) operates an online platform offering functional combat fitness training services (200+ FCS), class bookings, digital membership, and personalized merchandise. We are committed to protecting your privacy and handling your personal information fairly, in accordance with the Personal Data Protection Act 2010 (PDPA) of Malaysia.
What Personal Data We Collect
We collect various types of personal information to provide and improve our services:
- Contact Information: Such as your name, postal address, email address, and telephone number.
- Account Information: Username, password, and preferences when you create an account on our site.
- Booking Information: Your name, email address, and class booking records when you reserve a training session through our booking system.
- Health & Training Data: Training logs, exercise performance results, hydration and nutrition records that you choose to track after opening a member account. This is treated as sensitive personal data — see “Health & Training Data” below.
- Google Sign-In Data: If you sign in with Google, we receive only your email address and basic profile information to match your existing account. We never receive your Google password.
- Transaction Information: Details of products you purchase, order status, and payment-related information.
- Payment Information: Payment details necessary to complete your transactions, such as credit or debit card numbers (processed securely through our payment partners).
- Communication Data: Information you provide when contacting customer support or responding to surveys.
- Technical Information: Your IP address, browser type, device information, and other analytics data are automatically collected to enhance site security and performance.
How We Use Your Information
We use your personal information to:
- Process and fulfill orders placed on our website.
- Provide your class bookings and your personal training dashboard.
- Communicate with you regarding your purchases, bookings, support requests, or promotions.
- Improve our website, products, and services through analytics and user feedback.
- Ensure the security and integrity of our platform.
- Comply with legal obligations and resolve disputes.
Health & Training Data
If you open a member account, we store your personal training profile — including workout logs, strength & conditioning records, hydration and nutrition entries. Under the PDPA, this is sensitive personal data. We collect it only with your explicit consent (given when you activate your account), use it solely to provide your personal training dashboard, and never use it for advertising or share it with third parties. Your training data is visible only to you when logged in.
AI Vision — On-Device Camera Processing
Our AI Vision feature analyzes your exercise form using your device camera. All processing happens locally in your browser, on your device. No video or camera footage is ever uploaded, transmitted, or stored on our servers. For member accounts, only the resulting performance metrics (such as pace and repetition counts) are saved to your training profile — never images or video.
How We Protect Your Information
We implement appropriate administrative, technical, and physical safeguards designed to protect your information against unauthorized access, loss, misuse, or alteration.
While we take reasonable steps to protect your data, no system or network can be guaranteed 100% secure.
Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your browsing experience, such as remembering your preferences, analyzing website usage, and delivering personalized content.
You can set your browser to refuse cookies or alert you when cookies are being sent. However, some parts of the site may not function properly without cookies.
Sharing Your Information with Third Parties
We may share your information with trusted third-party partners only when necessary to operate our services, including:
- Payment processors: Stripe. Your card or banking credentials are processed securely by our payment provider and are never stored on our servers.
- Fulfillment partners: Printing and logistics providers, for delivering physical merchandise orders.
- Sign-in provider: Google, if you choose to sign in with your Google account.
- Infrastructure providers: Content delivery and caching services that help our site load quickly and securely.
We do not sell or rent your personal information to third parties.
Your Rights and Choices
Under the Personal Data Protection Act 2010 (Malaysia) and other applicable laws, you have the right to:
- Access, update, or correct your data.
- Request deletion of your data (subject to legal requirements).
- Object to or restrict certain types of data processing.
- Withdraw consent at any time where processing is based on consent.
To exercise these rights, please contact us at service@gooart.space.
How Long Do We Retain Your Data
We retain your data only as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.
Our retention schedule:
- Unpaid (pending) orders: deleted after 7 days.
- Failed or cancelled orders: deleted after 30 days.
- Completed and refunded orders: personal details anonymized after 84 months (7 years), in line with Malaysian business record-keeping requirements.
- Member accounts & training profiles: retained for as long as your account exists — your training profile is designed as a lifetime record. You may request deletion at any time.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically to stay informed.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at:
Gooart Space
Email: service@gooart.space
Phone: +60 18-203 1776