1. Controller and contact
Real Training Santa Teresa, a trade name operating in Santa Teresa, Puntarenas, Costa Rica, is responsible for the processing described here. For privacy questions or requests, email info@realtrainingcr.com.
2. Data we process
- Identity and contact data: name, email, phone number and profile details.
- Account data: encrypted credentials, sessions, password recovery and preferences.
- Service data: memberships, bookings, attendance, requests, operational notes and communications.
- Transaction data: plan, amount, currency, status, identifiers and receipts. Full card details are processed by ONVO and are not stored by Real Training.
- Files you choose to provide, such as proof required to validate a membership.
- Technical and security data, such as IP address, browser, date, time and logs needed to prevent abuse and operate the service.
3. How we use data
- Create and secure your account, authenticate you and restore access.
- Manage classes, bookings, memberships, renewals and support.
- Process and reconcile payments, issue receipts and resolve claims.
- Respond to Real Training and Personal Training inquiries.
- Meet legal, accounting, tax and fraud-prevention obligations.
- Remember preferences you authorized, such as language.
We process data when needed to provide the service you requested, comply with law, protect the platform, or based on consent that you may withdraw.
4. Providers and transfers
Our service providers process information to perform their roles: Supabase for authentication, database and storage; Vercel for hosting and application delivery; and ONVO for checkout, payments and subscriptions. Some systems may process information outside Costa Rica under their contractual and security safeguards.
Review the policies of Supabase, Vercel and ONVO. We may also disclose information when required by a competent authority or reasonably necessary to prevent fraud or protect rights.
5. Retention and security
We retain information during the active relationship and as needed for support, accounting, legal duties, fraud prevention and dispute resolution. We then delete or anonymize it when reasonably possible. We use access controls, encryption in transit, role separation and activity logs; no system can guarantee absolute security.
6. Your rights
Under Costa Rica Law No. 8968, you may request access, correction, updating or deletion of your data, and review or withdraw consent where applicable. Send the request from your account email and explain what you need. We may verify your identity and will respond within the applicable legal period.
7. Minors and changes
Accounts and purchases must be made by people with legal capacity or their representative. If a minor's data is received without valid authorization, deletion may be requested. Material changes will be published here with a new update date.