Privacy notice
Last updated 26 October 2026 · version privacy-draft-2026-10
Draft wording for the pilot. It will be reviewed and may change; we’ll tell you if it does.
Who we are
The Building Bloc is the coaching app of The Bloc, a personal training gym in Central, Hong Kong, run by Luke Connell. The Bloc decides how your personal data is used and is responsible for it. Questions or requests: lukeanconnell@gmail.com.
What we collect
- Your account: name, email address and WhatsApp number.
- About you: birthday, height, weight, goals, training experience, and any injuries you tell us about.
- Health check: your answers to 7 standard pre-exercise questions, and when you agreed to the training waiver and this notice.
- Emergency contact: a name and phone number. Please make sure that person is happy for you to give us their details.
- Your training: programs, workouts and sets you log, effort ratings, habits, calories and macros, notes, check-ins, body measurements and progress photos.
- Sessions and payments: bookings, sessions attended, packages, and payments (amount, method, date and any receipt you upload).
The health check, emergency contact and the details above are needed to train you safely. Without them we can’t coach you through the app. Tips and news from The Bloc are optional.
Why we use it
- To plan, coach and review your training, and keep you safe while you exercise.
- To book sessions, keep a record of sessions and payments, and work out coaches’ pay.
- To contact you about your training, sessions and payments (by WhatsApp or email), and to send login codes.
- To contact your emergency contact if something happens to you while training.
- To send you tips and news, only if you ticked that box. You can say stop at any time.
We don’t sell your data, and we don’t use it for anything unrelated to your coaching.
Who can see it
- Your coach (and any coach covering for them) sees your training, habits, check-ins, photos and health answers.
- The owners and front desk of The Bloc see your name, contact details, bookings, sessions and payments. Front desk can’t see your health answers, training or photos.
- Service providers that run the app for us: Supabase (database, login and file storage) and Vercel (hosting), both in Singapore, and Resend (sending login emails). They only process data on our instructions. This means your data is stored outside Hong Kong.
- Anyone the law requires us to share it with.
How long we keep it
While you train with us. If you delete your account (Me → Account & privacy), everything is erased after 30 days, including photos. You can change your mind during those 30 days. Payment records are kept for at least 7 years, because Hong Kong tax law requires businesses to keep them.
Your rights
- See your data: Me → Account & privacy → Download my data, or ask us at lukeanconnell@gmail.com.
- Correct it: Me → My details, or ask your coach.
- Stop news: tell your coach or email us, and we’ll stop straight away.
- Delete it: Me → Account & privacy → Delete account.
We’ll answer requests within 40 days, as the Personal Data (Privacy) Ordinance requires. If you’re unhappy with how we handle your data, you can contact the Office of the Privacy Commissioner for Personal Data (pcpd.org.hk).
Keeping it safe
Your data travels encrypted. Only the people listed above can open it: the database checks who you are on every request. Progress photos and receipts are stored privately, and links to them expire. The app uses one cookie to keep you logged in, and saves an unfinished workout on your phone so it isn’t lost if you close the app.