Privacy Policy
1. Introduction
Rehabza ("Company," "we," "us," or "our") is committed to protecting your privacy and ensuring you have a positive experience on our website (rehabza.com). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Website.
Please read this Privacy Policy carefully. If you do not agree with our practices, please discontinue using our Service.
2. Information We Collect
2.1 Information You Provide Directly
Account Registration: Name, email address, and password; phone number (optional); age, gender, and location; fitness level and health goals; any health conditions or limitations (voluntary).
Communication and Support: Messages sent through contact forms; email inquiries and customer service requests; feedback, comments, and survey responses.
Payment Information: Billing name, address, and email; payment method details (processed securely by third-party providers); transaction history and purchase records.
2.2 Information Collected Automatically
Device Information: Device type, operating system, and browser type; IP address and device identifiers; screen resolution and device capabilities.
Usage Information: Pages visited and content accessed; time spent on pages and sections; links clicked and navigation patterns; search queries and filter selections.
Cookies and Similar Technologies: Cookie identifiers and values; web beacons and pixel tags; local storage data and session identifiers; analytics tracking identifiers.
3. How We Use Your Information
3.1 Service Provision and Improvement
- Delivering educational content and tutorials
- Personalizing your experience and recommendations
- Remembering your preferences and settings
- Improving Website functionality and user interface
- Troubleshooting technical issues
3.2 Communication
- Sending service-related announcements
- Responding to your inquiries and support requests
- Sending newsletter updates (with your consent)
- Notifying you of changes to our policies
3.3 Legal and Compliance
- Complying with applicable laws and regulations
- Enforcing our Terms of Service
- Protecting against fraud and illegal activity
- Meeting healthcare compliance requirements (HIPAA, etc.)
4. Legal Basis for Processing (GDPR Compliance)
If you are in the European Union, we process your personal data based on: Consent; Contract; Legal Obligation; Legitimate Interests; Vital Interests; and Public Task.
5. Information Sharing and Disclosure
5.1 Third-Party Service Providers
We may share information with vendors who provide essential services: hosting and infrastructure; payment processing; email services; customer support. We require service providers to maintain appropriate security and confidentiality of your information.
5.2 Business Transfers
If Rehabza is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.
5.3 Legal Requirements
We may disclose information if required by court orders or legal process, government requests or subpoenas, law enforcement investigations, or national security matters.
6. Data Retention
- Account Information: Duration of your account plus 90 days after termination
- Usage Analytics: Up to 12 months
- Email Communications: Until you unsubscribe or delete your account
- Payment Records: As required by law (typically 7 years)
- Support Tickets: Up to 3 years
7. Your Privacy Rights
You have the right to: request access to your personal data; correct inaccurate information; request deletion of your data (Right to be Forgotten); withdraw consent at any time; opt out of marketing emails, non-essential cookies, and analytics tracking.
You can exercise your privacy rights by submitting a request through our Website. We will respond within 30 days.
8. Children's Privacy
Rehabza is not intended for children under 13 years old. We do not knowingly collect information from children under 13. If we learn we have collected information from a child under 13, we will promptly delete it.
9. Security Measures
We implement comprehensive security measures including SSL/TLS encryption, industry-standard encryption for sensitive data, secure authentication mechanisms, regular security audits, employee confidentiality agreements, access controls, intrusion detection systems, and regular data backups.
While we strive to protect your information, no method of transmission or storage is 100% secure. You use our Service at your own risk.
10. International Data Transfers
If you are located outside the United States, your information may be transferred to, stored in, and processed in the United States. We implement appropriate safeguards for cross-border data transfers including Standard Contractual Clauses.
11. Healthcare Information Handling
Rehabza provides educational content and is not a HIPAA-covered entity. However, we handle any health information responsibly. If you voluntarily share health conditions, we use this only to personalize educational content and protect it with appropriate security measures.
Users should not post Protected Health Information (PHI) in public comments, forums, or reviews.
12. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information is collected, access and delete that information, and be free from discrimination for exercising privacy rights.
13. European Privacy Rights (GDPR)
If you are in the European Union, the UK, or EEA, you have rights under GDPR including: right to access, correction, and deletion; right to restrict processing; right to object to processing; right to data portability; right to withdraw consent; right to lodge complaints with your data protection authority.
14. Updates to This Privacy Policy
We may update this Privacy Policy periodically. Updates become effective upon posting to our Website. We will notify you of material changes by posting a prominent notice on our Website or sending an email notification.