EllenElleFit (“we”, “us”, “our”) is committed to protecting the privacy and personal data of every person who visits or uses our website and digital services at www.ellenellefit.com. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, how long we keep it, and the rights you have over your information.

This Policy is prepared in compliance with the Nigeria Data Protection Act (NDPA) 2023, the Nigeria Data Protection Regulation (NDPR) 2019, and other applicable Nigerian law. By using our platform, you acknowledge that you have read and understood this Policy.

 

Quick Reference: Key Facts

Data Controller:  EllenElleFit (ellenellefit.com), Ibadan, Nigeria

Contact:  info@ellenellefit.com

Data We Collect:  Name, email, phone, payment details, usage data

Why We Collect It:  To deliver services, process payments, improve the platform

Legal Basis:  Contract performance, legitimate interest, consent

Who We Share With:  Payment processors, video platform, analytics tools

Retention:  Active account + 3 years after last transaction

Your Rights:  Access, correction, deletion, portability, objection

Governing Law:  NDPA 2023, NDPR 2019 – Nigeria

 

1.  Who We Are

EllenElleFit is an online Zumba dance fitness platform operated from Ibadan, Nigeria. We offer livestreamed classes, on-demand workout videos, digital instructor certification courses, and downloadable fitness plans to individuals and fitness professionals across Nigeria and beyond.

As the operator of this platform, EllenElleFit is the Data Controller responsible for the personal data collected through www.ellenellefit.com and any associated application or service.

Data Protection Contact: info@ellenellefit.com

 

2.  Data We Collect

2.1  Information You Give Us Directly

When you register, subscribe, book a class, purchase a product, or contact us, we may collect:

  • Full name
  • Email address
  • WhatsApp or phone number
  • State and country of residence
  • Date of birth (where age verification is required)
  • Payment information (card details or bank transfer references – processed by Paystack; we do not store raw card numbers)
  • Health disclosures voluntarily provided when signing up to specialist programmes (e.g., postnatal plans)
  • Instructor application information (qualifications, experience, identification) where applicable

2.2  Information Collected Automatically

When you use our website or stream our content, we may automatically collect:

  • IP address and approximate location
  • Browser type, version, and operating system
  • Pages visited, time spent, and links clicked
  • Device identifiers and screen resolution
  • Class attendance records and video watch history
  • Cookies and similar tracking technologies (see Section 9)

2.3  Information from Third Parties

We may receive limited personal data from:

  • Payment processors (Payonus) – transaction status and references
  • Video conferencing providers (Zoom) – session attendance confirmation
  • Social media platforms – if you choose to log in or connect via social sign-on

 

3.  How We Use Your Data

We use your personal data for the following purposes:

3.1  To Deliver Our Services (Contract Performance)

  • Create and manage your account
  • Process payments and send receipts
  • Grant access to purchased classes, videos, plans, and courses
  • Send class booking confirmations, access links, and download links
  • Issue digital certificates upon course completion

3.2  To Communicate With You (Contract Performance / Legitimate Interest)

  • Respond to your enquiries and support requests
  • Send service-related notifications (e.g., subscription renewal reminders, class schedule changes)
  • Notify you of material changes to our Terms or this Policy

3.3  To Improve Our Platform (Legitimate Interest)

  • Analyse usage patterns to improve content and user experience
  • Monitor platform performance and fix technical issues
  • Conduct internal research and develop new products

3.4  Marketing (Consent)

  • Send promotional emails, class announcements, and new product updates – only where you have opted in
  • Personalise content and recommendations based on your activity

You may withdraw marketing consent at any time by clicking “Unsubscribe” in any marketing email or by contacting us at info@ellenellefit.com.

3.5  Legal Compliance

  • Comply with applicable Nigerian law and regulatory obligations
  • Detect, investigate, and prevent fraud or misuse of our platform

 

4.  Legal Basis for Processing

Under the NDPA 2023 and NDPR, we must have a lawful basis to process your personal data. The bases we rely on are:

  • Performance of a contract – processing necessary to deliver the services you have purchased or signed up for.
  • Legitimate interests – processing necessary for our business operations, platform improvement, and fraud prevention, where those interests are not overridden by your rights.
  • Consent – marketing communications and optional health disclosures. You may withdraw consent at any time.
  • Legal obligation – processing required to comply with Nigerian law, tax regulations, or court orders.

 

5.  Sharing Your Data

We do not sell your personal data. We may share it only in the following circumstances:

5.1  Service Providers (Data Processors)

We engage trusted third-party providers who process data on our behalf under written data processing agreements:

  • Payonus – payment processing (subject to Payonusown privacy policy)
  • Zoom Video Communications – delivery of live classes
  • Google Analytics or similar – website usage analytics
  • Email service providers – transactional and marketing emails
  • Cloud storage providers – hosting of video content and platform data

5.2  Instructors

Class instructors employed or contracted by EllenElleFit may access your first name and attendance status for the purpose of facilitating your class experience. They do not have access to your payment details.

5.3  Legal Disclosure

We may disclose your personal data to law enforcement agencies, regulatory authorities, or courts where required to do so by applicable Nigerian law, a valid court order, or to protect the rights, property, or safety of EllenElleFit, our users, or the public.

5.4  Business Transfer

In the event of a merger, acquisition, or sale of all or part of our business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you via email prior to any such transfer and inform you of any change in data controller.

 

6.  International Data Transfers

Our primary operations and data storage are based in Nigeria. Some of our third-party service providers (such as Zoom and Google) may store or process data on servers outside Nigeria. Where such transfers occur, we take steps to ensure that appropriate safeguards are in place, including contractual clauses consistent with NDPR requirements, to maintain an equivalent level of protection for your data.

 

7.  Data Retention

We retain your personal data only for as long as is necessary for the purposes outlined in this Policy:

  • Active account data – retained for the duration of your account plus 3 years after your last transaction, to comply with tax and contractual record-keeping obligations.
  • Payment transaction records – retained for 6 years in accordance with Nigerian tax law.
  • Class attendance and usage logs – retained for 2 years from the date of the activity.
  • Marketing consent records – retained until you withdraw consent, plus 1 year thereafter as evidence of compliance.
  • Support correspondence – retained for 2 years from the date of resolution.

Upon the expiry of the applicable retention period, data is securely deleted or anonymised so that it can no longer be linked to you.

 

8.  Your Rights

Under the NDPA 2023 and NDPR, you have the following rights in relation to your personal data:

  • Right of Access – to request a copy of the personal data we hold about you.
  • Right to Rectification – to request correction of inaccurate or incomplete data.
  • Right to Erasure – to request deletion of your data in certain circumstances (e.g., where it is no longer necessary for the purpose for which it was collected).
  • Right to Restriction of Processing – to request that we pause the processing of your data in certain circumstances.
  • Right to Data Portability – to receive your data in a structured, commonly used, machine-readable format and to transmit it to another controller.
  • Right to Object – to object to processing based on legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent – where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please submit a written request to info@ellenellefit.com with the subject line “Data Rights Request”. We will respond within 30 days of receiving your request. We may need to verify your identity before processing your request.

If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at www.ndpc.gov.ng.

 

9.  Cookies and Tracking Technologies

9.1  What We Use

Our website uses cookies and similar technologies to enhance your experience, remember your preferences, and analyse how our platform is used. The types of cookies we use are:

  • Essential cookies – necessary for the website to function (e.g., maintaining your login session). These cannot be disabled.
  • Analytics cookies – help us understand how visitors interact with our platform (e.g., Google Analytics). Data collected is aggregated and anonymised where possible.
  • Marketing cookies – used to deliver relevant promotional content, only placed with your consent.

9.2  Managing Cookies

When you first visit our website, you will be presented with a cookie consent banner. You can update your cookie preferences at any time through the “Cookie Settings” link in our website footer. You may also control cookies through your browser settings; however, disabling essential cookies may affect the functionality of our platform.

 

10.  Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

  • Encrypted data transmission using HTTPS/TLS protocols
  • Secure payment processing via PCI-DSS compliant providers (Paysonus)
  • Access controls limiting staff access to personal data on a need-to-know basis
  • Regular security reviews of our platform and third-party integrations

No method of transmission over the internet or method of electronic storage is 100% secure. While we take every reasonable precaution, we cannot guarantee absolute security. In the event of a data breach that is likely to cause harm to you, we will notify you and the NDPC in accordance with our legal obligations.

 

11.  Children’s Privacy

Our services are not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you are between 13 and 17, you must have the consent of a parent or guardian to use our platform. If we become aware that we have collected personal data from a child under 13 without verifiable parental consent, we will take steps to delete that data promptly. If you believe we hold data about a minor inappropriately, please contact us at info@ellenellefit.com.

 

12.  Health Data

Certain specialist programmes (such as our Postnatal Zumba Recovery Plan) invite you to voluntarily disclose health-related information. Health data is a special category of personal data under the NDPA 2023 and is treated with the highest level of care. We process such data only:

  • With your explicit consent, which you may withdraw at any time; and
  • For the sole purpose of tailoring our fitness recommendations to your personal circumstances.

We do not share health data with any third party other than as strictly required for service delivery, and we will never use it for marketing purposes.

 

13.  Links to Third-Party Websites

Our platform may contain links to third-party websites, social media pages, and external resources. This Privacy Policy applies only to EllenElleFit’s own platform. We are not responsible for the privacy practices of any third-party website. We encourage you to read the privacy policy of every website you visit.

 

14.  Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will notify you by email and post the updated Policy on our website with a revised effective date. The version date at the top of this document always reflects the most recent update. Your continued use of our platform after the effective date of any change constitutes acceptance of the updated Policy.

 

15.  Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way we handle your personal data, please contact us:

  • Email: info@ellenellefit.com (subject: “Privacy Enquiry”)
  • Website: ellenellefit.com
  • Address: Ibadan, Nigeria

We aim to respond to all privacy-related enquiries within 10 business days.

If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC):

  • Website: www.ndpc.gov.ng
  • Email: info@ndpc.gov.ng

 

EllenElleFit  ·  www.ellenellefit.com  ·  Privacy Policy  ·  Effective 12 June 2026