Privacy Policy for Tornado Movement
Last Updated: 01/03/2025

1. Introduction  
Welcome to Tornado Movement (“we,” “us,” or “our”). We are committed to protecting your privacy and complying with applicable data protection laws in Dubai and the UAE, including the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL). This policy explains how we collect, use, share, and safeguard your information when you engage with our online coaching services, website, or platforms.  

2. Information We Collect  
We may collect the following types of data:  
- Personal Data: Name, email, phone number, payment details (processed securely via third-party gateways like stripe), and account credentials.  
- Coaching-Specific Data: Fitness/health goals, session feedback, or progress reports (if applicable).  
- Technical Data: IP address, browser type, device information, and cookies (see Section 9).  
- Usage Data: Pages visited, session duration, and interactions with our platform.  

3. How We Use Your Information  
- Deliver coaching services and personalize your experience.  
- Process payments and communicate updates.  
- Improve our services and develop new offerings.  
- Send marketing communications (with your consent).  
- Comply with legal obligations under UAE law.  

4. Legal Basis for Processing  
We process your data based on:  
- Contractual Necessity: To fulfill coaching services you request.  
- Consent: For marketing or sensitive data (e.g., health information).  
- Legal Obligations: As required by UAE authorities.  
- Legitimate Interests: To enhance user experience and security.  

5. Data Sharing  
We may share your data with:  
- Third-Party Service Providers: Payment processors, cloud storage, or analytics tools (e.g., Zoom and Google Meet for sessions, Stripe for payments).  
- Legal Authorities: If required by UAE law.  
- Business Partners: Only with your explicit consent.  

6. International Data Transfers
Your data may be transferred outside the UAE to countries with adequate data protection standards. We ensure safeguards (e.g., contractual clauses) are in place for such transfers as per PDPL requirements.  

7. Data Security 
We implement technical measures (encryption, access controls) and organizational protocols to protect your data. However, no system is 100% secure, and we cannot guarantee absolute security.  

8. Data Retention  
We retain your data only as long as necessary to fulfill the purposes outlined in this policy or as required by UAE law.  

9. Cookies and Tracking Technologies 
We use cookies to enhance site functionality. You can manage preferences via your browser settings.  

10. Your Rights Under UAE PDPL  
You have the right to:  
- Access, correct, or delete your personal data.  
- Withdraw consent (e.g., opt out of marketing).  
- Object to processing and request data portability.  
- Lodge complaints with the UAE Data Office.  

To exercise these rights, contact us attornadomovement@yahoo.com.  

11. Children’s Privacy  
Our services are not intended for users under 18. We do not knowingly collect data from minors without parental consent.  

12. Updates to This Policy
We may update this policy periodically. Changes will be posted on our website, with the “Last Updated” date revised.  

13. Contact Us 
For questions, requests, or concerns, contact our Data Protection Officer:  
- Email: tornadomovement@yahoo.com  
- Address: online