Privacy Policy

1. Who we are

Cloaq (“Cloaq”, “we”, “us”, “our”) is a UK-based online platform that connects fitness and wellness providers with clients. Our website is cloaq.fit.

For the purposes of UK GDPR and the Data Protection Act 2018, Cloaq is the data controller for personal data collected through our platform. Contact us at help@cloaq.fit.

2. What data we collect

We collect and process the following categories of personal data:

• Account information: name, email address, profile photo (via Clerk authentication)
• Booking information: name, email, mobile number, optional message, payment confirmation
• Provider information: business name, bio, location, social media handles, identity verification documents
• Payment data: transaction amounts and references (we never store card numbers — all payment processing is handled by Stripe)
• Usage data: pages visited, device type, browser, IP address, approximate location (via analytics)
• Communications: emails you send us or feedback you provide

3. How we use your data

We use your personal data for the following purposes and legal bases:

4. Who we share your data with

• Fitness and wellness providers: when you make a booking, the provider receives your name, email, and mobile number to manage your session.
• Stripe: processes all payments. Subject to Stripe's Privacy Policy.
• Clerk: manages authentication. Subject to Clerk's privacy policy.
• Resend: sends transactional emails on our behalf.
• Vercel: hosts our platform and processes data on EU/UK infrastructure.

We do not sell personal data to third parties. We do not share data for advertising purposes.

5. Data retention

• Account data: retained while your account is active, deleted within 30 days of account deletion request
• Booking records: retained for 7 years for accounting and legal compliance
• Payment records: retained by Stripe per their policies; references retained by us for 7 years
• Provider application data: retained for 12 months after application, or indefinitely for approved providers

6. Your rights

Under UK GDPR you have the following rights:

• Access: request a copy of data we hold about you
• Rectification: correct inaccurate data
• Erasure: request deletion of your data (subject to legal retention obligations)
• Portability: receive your data in a machine-readable format
• Objection: object to processing based on legitimate interests
• Restriction: request we restrict processing in certain circumstances

To exercise any of these rights, email us at help@cloaq.fit. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

7. Cookies

We use essential cookies to keep you signed in and remember your preferences. We use analytics cookies to understand how users navigate our platform so we can improve it. You can control cookies through your browser settings or via our cookie consent banner.

8. Changes to this policy

We may update this policy from time to time. We will notify you of material changes by email or by displaying a notice on the platform. Your continued use of Cloaq after changes are posted constitutes acceptance.

9. Contact

For any privacy-related questions, email help@cloaq.fit.