INTRODUCTION

PWRHAUS EMS LAB (“we”, “our”, “us”, and “PWRHAUS”) is a luxury boutique EMS (Electrical Muscle Stimulation) fitness studio based in Singapore. We are committed to protecting the privacy and personal data of our clients, visitors, and all individuals who interact with our business.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data in accordance with the Personal Data Protection Act 2012 of Singapore (“PDPA”) and all applicable data protection laws and regulations.

By using our website, booking our services, or otherwise engaging with PWRHAUS, you acknowledge and consent to the practices described in this Privacy Policy.

WHAT IS PERSONAL DATA?

“Personal data” refers to any data, whether true or not, about an individual who can be identified from that data, or from that data and other information to which we have or are likely to have access. This includes but is not limited to your name, contact details, identification number, and health-related information.

WHAT PERSONAL DATA DO WE COLLECT?

We may collect the following categories of personal data:

Identity & Contact Information

• Full name

• Date of birth / age

• Residential or mailing address

• Email address

• Mobile and telephone numbers

• Emergency contact details

Account & Membership Information

• Username, password, and account preferences

• Membership type, session bookings, attendance records, and service history

Payment Information

• Credit or debit card details

• Bank account details (where applicable)

• Payment transaction history

Health & Fitness Information (Sensitive Data)

• Physical health status, medical history, and pre-existing conditions

• Injuries, illnesses, pregnancy status, or other health disclosures

• EMS-specific fitness assessments, body composition data, and training progress

• Information provided during pre-training health screening questionnaires

Technical & Usage Data

• Internet Protocol (IP) address

• Browser type and version

• Pages visited on our website and duration of visit

• Device identifiers and location data (where enabled)

• Cookie and tracking data

Visual Data

• Photographs and video footage taken in connection with your use of our services

• CCTV footage captured on our premises

Other Information

• Information you provide during in-studio consultations, telephone calls, or email correspondence

• Survey responses or feedback submitted to us

• Job application information (for prospective employees or contractors)

HOW DO WE COLLECT YOUR PERSONAL DATA?

We collect personal data directly from you wherever reasonably practicable, through the following channels:

• When you register for membership, book sessions, or enquire about our services via our website, app, or in person

• When you complete health screening, intake, or waiver forms prior to EMS training

• When you make payments for services

• Through your use of our website and digital platforms, including data collected via cookies and similar technologies

• Through telephone calls, in-studio visits, or email communications with our team

• When you subscribe to our mailing list or follow our social media channels

• When you participate in promotions, events, or client satisfaction surveys

• When you apply for employment or a partnership with PWRHAUS

• From third-party service providers or platforms we use in operating our business (e.g. booking systems, payment gateways)

WHAT HAPPENS IF YOU DO NOT PROVIDE YOUR PERSONAL DATA?

If you choose not to provide certain personal data, we may be unable to:

• Provide our EMS fitness services safely or at all, as health screening data is essential to the safe delivery of EMS training

• Process your membership registration, session bookings, or payments

• Personalise your training experience and track your fitness progress

• Send you service updates, promotional offers, or relevant communications

• Respond to your enquiries in a timely and effective manner

HOW DO WE USE YOUR PERSONAL DATA?

We collect, use, and disclose your personal data for the following purposes:

Service Delivery

• To provide, manage, and personalise our EMS fitness services

• To conduct pre-training health and safety assessments

• To track attendance, training history, and fitness progress

Operations & Administration

• To process payments and manage membership accounts

• To respond to enquiries, feedback, and customer service requests

• To update and maintain accurate records

• To process and investigate any complaints or incidents

Marketing & Communications

• To send you service updates, promotions, and information about new offerings (subject to your marketing preferences)

• To conduct marketing, advertising, and business development activities

• To manage our social media presence and digital content

Safety & Security

• To ensure the safety and wellbeing of all clients and staff on our premises

• To operate and manage CCTV systems for security purposes

• To respond to medical emergencies or safety incidents

Legal & Compliance

• To comply with applicable laws, regulations, court orders, or directions from regulatory authorities

• To enforce our terms and conditions

• To protect our legal rights and interests

Business Improvement

• To assess and improve the performance of our website, app, and digital platforms

• To conduct research, data analysis, and business planning

We will only use your personal data for the purposes for which it was collected, or for directly related purposes, unless we have obtained your consent for other uses or are required to do so by law.

OUR WEBSITE AND DIGITAL PLATFORMS

Cookies

When you access our website, we may place “cookies” (small data files containing a unique identifier) on your device. Cookies help us recognise returning visitors, remember your preferences, and understand how our website is being used. We may also use third-party cookies (such as Google Analytics) to measure website traffic and improve our online services.

Cookies we use do not, by themselves, collect personally identifiable information. You may configure your browser to refuse cookies, though doing so may affect your experience on our website.

Security

While we take all reasonable steps to protect your personal data transmitted through our website, no internet transmission can be guaranteed to be completely secure. Any personal data you transmit to us online is done at your own risk, and we encourage you to take appropriate precautions when sharing information over the internet.

Third-Party Links

Our website may contain links to external websites operated by third parties. PWRHAUS is not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit before providing personal data.

DISCLOSURE OF YOUR PERSONAL DATA

We may disclose your personal data to the following categories of recipients, strictly for the purposes outlined in this Privacy Policy:

• Our employees, trainers, and authorised staff involved in delivering our services

• Third-party service providers supporting our business operations, including IT and software providers, booking and scheduling platforms, payment processors, data storage providers, and marketing agencies

• Professional advisors such as lawyers, accountants, and business consultants

• Relevant government authorities, regulatory bodies, or law enforcement agencies where required by law or in connection with a legal investigation

• Emergency contacts or responsible persons (e.g. a guardian or next of kin) in the event of a medical emergency on our premises

• Any other party with your prior written consent

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

INTERNATIONAL TRANSFERS OF PERSONAL DATA

Some of our third-party service providers (such as cloud hosting or software platforms) may be located outside Singapore. Where personal data is transferred overseas, we take reasonable steps to ensure that the recipient provides a standard of protection at least comparable to the protections under the PDPA, including through contractual arrangements or other appropriate safeguards.

HEALTH AND SENSITIVE DATA

Due to the nature of EMS training, we are required to collect sensitive health information from our clients to ensure training is conducted safely and responsibly. This information is treated with the highest level of confidentiality and is used solely for the purpose of assessing fitness for EMS training, personalising your sessions, and managing your safety.

Health data is accessible only to authorised PWRHAUS personnel and is not disclosed to any third party except where required by law or in a medical emergency.

CCTV AND SECURITY MONITORING

CCTV cameras operate on our premises for the safety and security of our clients, staff, and property. CCTV footage is accessible only to authorised personnel. Recordings may be disclosed to relevant law enforcement bodies only where required by law, pursuant to a valid court order, warrant, or other legal process, or where necessary to respond to a safety or security incident.

DIRECT MARKETING

We may send you marketing communications about our services, promotions, events, and offers that we believe may interest you. These communications may be sent by email, SMS, or other digital channels in accordance with the PDPA and Singapore’s Spam Control Act 2007.

You may opt out of receiving marketing communications at any time by:

• Clicking the “unsubscribe” link in any marketing email

• Contacting us directly using the details provided below

We will process your opt-out request promptly. Please note that even after opting out of marketing communications, we may still send you essential service-related messages (e.g. booking confirmations, safety notices, or account updates).

DATA RETENTION

We retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. When personal data is no longer required, we will securely delete, destroy, or anonymise it in accordance with our data retention procedures.

SECURITY OF YOUR PERSONAL DATA

We implement reasonable and appropriate technical and organisational measures to protect your personal data from unauthorised access, use, disclosure, modification, or loss. These measures include:

• Restricted access to personal data on a need-to-know basis

• Secure storage of electronic and physical records

• Staff training on data protection obligations

• Confidentiality obligations for employees and contractors

Despite our best efforts, no security measure is infallible. In the event of a data breach that is likely to result in significant harm, we will notify affected individuals and the Personal Data Protection Commission (“PDPC”) in accordance with the PDPA’s Mandatory Data Breach Notification obligations.

YOUR RIGHTS

Under the PDPA, you have the right to:

Access

Request access to personal data we hold about you, subject to certain exceptions.

Correction

Request that we correct any personal data that is inaccurate, incomplete, or misleading.

Withdrawal of Consent

Withdraw your consent to our collection, use, or disclosure of your personal data at any time, subject to legal or contractual restrictions and reasonable notice. Note that withdrawal of consent may affect our ability to provide certain services to you.

Data Portability (where applicable)

Request that we transmit your personal data to another organisation in a structured, commonly used format, subject to the PDPA’s data portability provisions.

To exercise any of the above rights, please contact our Data Protection Officer using the contact details provided below. We will endeavour to respond to your request within 30 days. A reasonable administrative fee may be charged for access requests.

COMPLAINTS AND CONCERNS

If you believe that PWRHAUS has not complied with its obligations under the PDPA or this Privacy Policy, we encourage you to contact us first so that we can address your concerns.

If your concern is not resolved to your satisfaction, you may lodge a complaint with the Personal Data Protection Commission (PDPC) of Singapore:

Personal Data Protection Commission Singapore

Website: www.pdpc.gov.sg

Helpline: 1800-CALL-PDPC (1800-2255-7372)

CONTACTING US — DATA PROTECTION OFFICER

For all privacy-related enquiries, access or correction requests, or complaints, please contact our Data Protection Officer:

PWRHAUS EMS LAB

Data Protection Officer

Singapore

Email: hello@pwrhaus-ems.com

Website: www.pwrhaus-ems.com

We treat all requests and complaints confidentially and will respond within a reasonable time upon receipt.

CHANGES TO THIS PRIVACY POLICY

We reserve the right to update or amend this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or technology. Any updated version will be published on our website and will take effect from the date of posting. We encourage you to review this Privacy Policy periodically to stay informed of how we are protecting your personal data.

This Privacy Policy was last updated on 30 July 2026.