Privacy Policy
Last updated: 26 July 2026
WYBE values your privacy. We have prepared this policy to explain to you what personal data we process about you and why, how we protect it, and what rights you have in relation to such data. In particular, if you are a UAE resident, this tells you what rights you have under the Personal Data Protection Law (PDPL), and if you are an EU/UK visitor, this informs you of your rights under GDPR-equivalent legislation.
1. Who WYBE serves and who we are
WYBE provides digital work out program, personal training, human-performance related nutrition advice and personal coaching consultancy services. Our operator is Mansoor Ahamad Ali Mohamed, located at Dubai, United Arab Emirates. For the purposes of data-protection legislation, WYBE considers itself a data controller in respect of any personal data relating to users of this website or other services which may be offered by WYBE.
You may contact WYBE via “contact us form” on the website for any questions or requests concerning data-protection matters.
2. What information do we collect?
Contact information
Name, email address, mobile number, city/country and message contents from messages sent to WYBE via contact form, WhatsApp or Instagram DM. You may also provide additional information when messaging or requesting a service.
Health, fitness & body composition data
Use of calculators or completing a form for a WYBE service may involve us collecting gender, age, height, weight, neck, waist, hip measurements, activity level, training history, injuries or medical conditions (if disclosed), nutrition goals and a progress photo (if uploaded). Where disclosed, such information shall be processed by us in accordance with applicable data-protection laws.
Health-related information falls under special categories of personal data under both the UAE PDPL and the GDPR. We ask that you provide only the information strictly necessary to design your program, and treat such information with the requisite confidentiality and care.
Payment data
Your card details are collected and processed by our payment-processing partner (see section 4). WYBE receives payment confirmation details and an identifier for the payment, but not your card information.
Technical and other information
Our hosting provider collects standard log data (IP address, browser type, etc.) and, if you have consented to such processing (see section 9 below), analytics data (also see section 9).
3. How do we use your information?
We process your personal data only for the purposes listed below. We process your data only to the extent strictly necessary for these purposes, and no further.
- To provide the WYBE service purchased (development of a personalized program, correspondence, nutrition and training planning, and progress tracking);
- To correspond with you about the WYBE service (notably, to schedule or remind you of sessions and other services, send invoices and follow-ups);
- To answer your queries submitted through the website or via the above-mentioned messengers;
- To generate reports or calculator results in PDF format upon your request;
- To continuously improve the safety and quality of our service on an anonymous basis;
- To comply with legal obligations (notably, tax and accounting obligations under the UAE Federal Decree-Law No. 45 of 2021).
We do not sell your data, and we do not use your health/fitness data for advertising purposes.
4. Third-party processors
To provide our service, WYBE engages a limited number of third-party processors. Each of them is a data processor in its own right, and processes data under its own privacy policy:
- Vercel Inc. provides website hosting and content-delivery services to WYBE; processes data strictly necessary for the functioning of the website (notably, your IP address and request logs).
- Google LLC provides font-rendering services (Google Fonts) and, if enabled (see section 9 below), Google Analytics 4 web analytics services.
- Web3Forms provides contact-form processing services; forwards your message to the WYBE email address.
- Stripe or another payment processor collects and processes your payment information, if you choose to make one (see section 4 of the Terms of Service).
- Meta Platforms Inc. (WhatsApp, Instagram) and Google LLC (YouTube, TikTok) are used to process your messages, if any, sent to WYBE via those platforms; your data is processed under their own privacy policies.
WYBE reserves the right to update this list at any time, as appropriate, and will notify you here if a new processor is engaged.
5. How long is personal data kept and how is it secured?
Your personal data is stored in an encrypted form on servers provided by our hosting and payment-processing partners. Access to your data on WYBE premises is restricted to Mansoor Ahamad Ali Mohamed and, if applicable, a named assistant, who are bound by confidentiality undertakings.
We keep your personal data only for as long as it takes to fulfill the purpose for which it was processed, unless a longer retention period is required by law. In particular:
- records of our services to you (your program details) are deleted upon completion of services and 3 years thereafter, to allow for potential follow-up and legal claims,
- payment data is deleted 7 years after the calendar year of processing, in accordance with UAE tax laws,
- marketing consents (use of photos, testimonials) are revoked upon your request or deletion of the relevant media,
- analytics data (Google Analytics) is retained for a rolling 14-month period.
Please note that no system is completely safe. Should your personal data be compromised in a way that adversely affects your rights, we will notify you and, where appropriate, the relevant data-protection authority.
6. What rights do you have in relation to your data?
Regardless of your location, you have the following rights in relation to your personal data:
- Request access to the data we hold about you;
- Request correction of inaccurate or incomplete data;
- Request deletion of data no longer necessary for the purpose for which it was processed;
- Object to or restrict processing of your data (e.g. to marketing use of your media);
- Withdraw consent to processing at any time, to the extent such processing was based on your consent, without affecting the lawfulness of processing up to that point;
- Request portability of your data to another data controller, in a structured, commonly-used and machine-readable format.
To exercise your rights, please contact mansoor@wybe.fit and we will respond within 30 days, having verified your request. In case of complicated requests, we may ask you to further clarify your message or provide additional documentation.
7. Your rights under the UAE Personal Data Protection Law (PDPL) (UAE residents only)
This policy applies to all UAE residents who use the WYBE service. In addition to the rights listed in section 6 above, UAE residents have the following rights under the UAE Federal Decree-Law No. 45 of 2021:
- Right to be informed about the categories of personal data processed, and the purpose of processing;
- Right to complain to the UAE Data Office if you believe your rights have been infringed;
- Right to human intervention in the event of automated processing having a legal or similarly significant effect on you;
- Right to additional safeguards, where your data is processed in a country outside of the UAE not recognised by the UAE Data Office as providing an adequate level of protection.
In accordance with the PDPL, WYBE processes personal data on the following grounds:
- performance of a contract with the data subject (you),
- consent (health/nutrition data and marketing),
- and legitimate interests (operating the website and defending or enforcing legal rights), to the extent such interests are not overridden by your rights or freedoms.
Where personal data is transferred outside of the UAE (e.g. to Vercel or Google LLC), such transfers are either restricted to data centres located within the UAE or they are made pursuant to the additional safeguards set by the UAE Data Office and, where necessary, your explicit consent.
8. Your rights under the GDPR (EU residents only)
If you are a resident of an EU Member State, the UK or Switzerland, you have the following rights in addition to those listed in section 6 above:
- Right to complain to your local Data Protection Authority (e.g. DPC in Ireland, CNIL in France, ICO in the UK).
- Right to object to processing based on legitimate interests, at any time, and to profiling.
- Right to additional safeguards for transfers of personal data to countries outside the EEA/UK, where such transfers are restricted by the GDPR. In particular, WYBE has Standard Contractual Clauses with all our third-party processors, and such transfers are made pursuant to the additional safeguards set by the GDPR.
WYBE does not have an EU/UK establishment and, due to the limited number of EU/UK clients, is not obliged to appoint an EU representative. If we reach a volume of activity in the EU/UK requiring such designation under Article 27 of the GDPR, this policy will be updated accordingly.
9. Cookies and similar technologies
WYBE does not use cookies or similar technologies to track your browsing habits or behavioural patterns, nor do we use any advertising cookies, retargeting pixels or other advertising technologies. We do not share your browsing data with third parties. Our website uses strictly necessary cookies such as session or preference cookies to ensure the website works correctly and remembers your choices (e.g. mobile menu being open). You do not need to give consent for these cookies.
If Analytics is enabled on the website, Google Analytics 4 sets a first-party cookie necessary to differentiate users in an aggregated manner. You can opt out of Analytics cookies by disabling cookies in your browser or using an opt-out browser add-on, if available.
10. Children
WYBE services are intended for adults only. We do not knowingly collect personal data from children. If you are aware that a child has provided us with personal data, please notify us so we can delete such data. If you are a parent or guardian and you wish to consent to a child accessing our service, you may contact us via the form on the website or DM us on any of the social media platforms.
11. Changes to this policy
This policy may be updated from time to time. The date of the last update is listed at the beginning of this policy. If we make any changes that affect your rights or obligations, we will notify all affected clients by email and, where possible, display a message on this page for at least 30 days.
12. Contact information
If you have any questions or concerns about this policy, you may contact WYBE via “contact us form” on the website, including to assert your rights under this policy. Please describe your request clearly and, where applicable, confirm your identity.