Privacy Policy.

1. Who we are

Peak360 Pte Ltd ("Peak360", "we", "us") operates the Peak360 fitness ecosystem at 6 Eu Tong Sen Street, #04-89 The Central @ Clarke Quay, Singapore 059817. We are the data controller for personal data submitted through this Founder Launch lander.

2. Scope of this policy

This policy applies to personal data you submit on the Founder Launch lander page (the "Lander") and any follow-up communications you receive from us as a result, including WhatsApp, phone, email and in-person interactions with our coaching team.

It does not cover separate Peak360 services governed by their own terms, such as our membership management system, class booking platform, or in-gym CCTV (each disclosed at point of collection).

3. What we collect

The Lander booking form collects the following personal data when you submit it:

• First name (so a coach can address you correctly)
• WhatsApp / mobile number (used to confirm your trial slot)
• Preferred trial date and time
• Stated fitness goal (so we can pair you with a relevant coach)

We also automatically capture a small amount of technical metadata from your browser, namely the submission timestamp and a campaign source tag (e.g. launch-landing). We do not collect your IP address through the Lander form, nor do we ask for your NRIC, FIN, date of birth, address, payment information, or health and medical information at this stage.

If, in subsequent communication, you voluntarily share information about an injury, medical condition, or other sensitive matter relevant to your training, we will treat that information as personal data subject to this policy and apply additional care.

4. How we collect it

We collect personal data only when you actively provide it. On the Lander, that means clicking through the booking wizard and tapping the submission button. We treat that action as your consent under PDPA section 14, given for the purposes set out in section 5 below.

5. Why we use it

We use your personal data to:

1. Confirm and schedule your Founder trial session, typically by WhatsApp;
2. Match you to an appropriate coach based on your stated fitness goal;
3. Send you transactional follow-ups (e.g. reschedule notes, post-trial summary) for up to 90 days after your last interaction;
4. Operate, maintain and improve the Lander and our marketing campaigns; and
5. Comply with our legal and regulatory obligations.

If you opt in separately, we may also use your contact details to send occasional updates about Peak360 (new classes, events, special offers). You can withdraw that opt-in at any time by replying STOP to any WhatsApp message or by emailing us (see section 14).

6. Who we share it with

We do not sell your personal data. We share it only with the following categories of recipient, each engaged under appropriate contractual safeguards:

• Make.com (Celonis SE / Make Integromat) acts as our data processor to receive form submissions from the Lander and route them into our internal CRM and coach notifications. Their privacy notice is at make.com/en/privacy-notice.
• Meta Platforms Ireland Ltd (WhatsApp Business) is the channel we use to confirm your trial slot. Messages are end-to-end encrypted between your device and our coach's device.
• Our internal coaching team, on a strict need-to-know basis, in order to confirm and run your trial.
• Vercel Inc. hosts the Lander itself but does not receive your form submissions; it only processes anonymous request logs (page views, referrer, user agent) for site availability monitoring.
• Government, regulators and law enforcement, where we are legally required to disclose.

7. International transfers

Some of our processors store data outside Singapore. Make.com is headquartered in the European Union and processes data within EU data centres. Meta processes WhatsApp metadata across its global infrastructure, including the United States. In each case we rely on the recipient's adherence to comparable data protection standards (such as the EU GDPR or Standard Contractual Clauses) as required by PDPA section 26.

8. How long we keep it

We retain Lander submission data for 12 months from your last interaction with us, after which it is deleted from our active systems. If you become a Peak360 member, your data transitions to our membership records governed by separate retention rules (typically 7 years for billing-related records, in line with Singapore tax law).

If you ask us to delete your data sooner, we will do so within 30 days, except where we are required to retain it by law.

9. Cookies and tracking

The Lander does not set first-party tracking cookies. The booking wizard uses in-memory JavaScript state only, which is cleared when you close the tab.

The Lander may load advertising tags from Google Ads and Meta Pixel in order to measure the performance of the campaign that brought you here. These tags use cookies and similar technologies governed by the respective providers' policies (Google, Meta). You can opt out of personalised advertising at youronlinechoices.eu or via your browser settings.

10. Security

We protect your personal data using industry-standard safeguards: HTTPS for all data in transit, access controls on our CRM, and least-privilege access for our coaching team. We do not store payment card data on our systems; any future card payments would be processed by a PCI-DSS-compliant provider.

11. Your rights under PDPA

Under the Personal Data Protection Act 2012, you have the right to:

• Access the personal data we hold about you, and request information about how it has been used or disclosed in the past 12 months;
• Correct any data that is inaccurate or incomplete;
• Withdraw your consent for us to continue collecting, using or disclosing your data, with reasonable notice; and
• Lodge a complaint with the Personal Data Protection Commission of Singapore (PDPC) at pdpc.gov.sg if you believe we have breached the PDPA.

To exercise these rights, contact our Data Protection Officer (see section 14). We will respond within 30 days. A reasonable fee may apply to access requests, in line with PDPA guidelines.

12. Children

The Lander is intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has submitted data to us, please contact our DPO and we will delete it promptly.

13. Changes to this policy

We may update this policy from time to time. The effective date at the top of this page reflects the latest version. Where changes are material, we will post a notice on the Lander or notify you directly through the contact channel you have provided. Continued interaction with us after a change constitutes acceptance of the updated policy.

14. Contact our DPO

For all privacy queries, access requests, correction requests and consent withdrawals, please write to the DPO at the email address above. We will acknowledge your request within 5 working days and respond substantively within 30 days.