fitzone.et is committed to transparent, minimal data practices. This policy outlines what data we process, why we need it, and how your privacy is protected.
Last updated: September 28, 2026•Proclamation No. 1321/2024 Aligned
Ethiopian Data Protection Alignment: This policy is formulated in accordance with the principles of the Personal Data Protection Proclamation (No. 1321/2024) of the Federal Democratic Republic of Ethiopia. fitzone.et acts as the Data Controller for personal information processed in connection with the Service.
Section 01
1. Overview & Scope
fitzone.et (“fitzone.et,” “we,” “us,” or “our”) operates the fitness discovery directory at fitzone.et. We believe privacy begins with not collecting unnecessary data. Our platform is intentionally architected so that anyone can search, compare, and locate gyms without registering or revealing their identity.
This Privacy Policy describes how we collect, store, protect, and process information from two groups of users:
Visitors: Individuals who browse public gym listings, explore maps, or send inquiries;
Gym Owners / Operators: Individuals who register an account to create, manage, and verify gym listings.
Section 02
2. Information We Collect
2.1 Information Collected from Visitors
You do not need to sign up, sign in, or provide personal details to search gyms on fitzone.et. When you visit our website, we collect only limited technical information:
Server Logs & Technical Metadata: Like most web applications, our servers automatically record standard log entries, including your IP address, browser type, operating system, referring URLs, and timestamps. These logs are used exclusively for security diagnostics, rate limiting, and protecting against denial-of-service attacks.
Real-Time Geolocation (Optional): If you choose to use our “Gyms near me” search feature, your browser prompts you for permission to access your device's location. If granted, your coordinates are processed in real time solely to calculate distances to nearby facilities. We do not save your GPS coordinates into a persistent user profile or tracking database.
Direct Inquiries & Support Messages: If you voluntarily reach out via our Contact form or email us directly, we receive your name, email address, chosen topic, and message text solely to respond to your inquiry.
2.2 Information Collected from Gym Owners
When you register to list a fitness facility, we collect information required to operate your account and showcase your facility:
Account Credentials: Gym business name, owner/manager email address, and a securely salted and hashed password.
Public Listing Data: Branch names, physical addresses, geographic coordinates, weekly operating schedules, monthly/daily membership rates, amenities (showers, sauna, trainers, parking, lockers), and branch photos.Please note that all information submitted in a gym listing is published openly on the web for prospective gym members.
Operational Communications: Records of administrative emails, phone support, onboarding verifications, or password resets.
Section 03
3. Legal Bases for Processing (Proclamation No. 1321/2024)
Under Ethiopian personal data protection law, fitzone.et processes your data under the following lawful grounds:
Contractual Performance
Processing Owner account information and listing content is necessary to fulfill our agreement to host and display your gym profile.
Express Consent
Device location is accessed only after you explicitly grant permission through your browser dialog. You can revoke it anytime.
Legitimate Interests
Operating server security, detecting fraudulent gym listings, preventing scraping abuse, and responding to incoming support requests.
Legal Compliance
Maintaining business records and complying with valid judicial or statutory orders from Ethiopian regulatory authorities.
Section 04
4. How We Use Information
We use the data we collect solely to:
Display, search, and filter gym listings across Ethiopian neighborhoods;
Provide real-time distance sorting and interactive route maps to gym branches;
Authenticate Gym Owners and enable them to update branch hours, amenities, and photos;
Respond to support tickets, partnership requests, and photo takedown notices;
Safeguard our platform against automated scraping, spam listings, and security breaches;
Ensure compliance with our Terms of Service and applicable law.
We do not sell personal data: fitzone.et has never sold, rented, or traded personal data to third-party data brokers, marketers, or advertisers, and will never do so.
Section 05
5. Cookies & Storage Technology
Strictly Necessary Cookies Only — No Tracking or Advertising Cookies
fitzone.et does not use third-party behavioral cookies, tracking pixels, or cross-site advertising networks. Our use of cookies is strictly limited to functional authentication:
Cookie / Identifier
Category
Purpose
Duration
session_token
Strictly Necessary
Maintains secure authenticated session for logged-in Gym Owners in the dashboard.
30 Days
theme / ui_prefs
Functional (Client)
Remembers user interface preferences (such as dark or light theme mode).
Persistent
Section 06
6. Third Parties & Data Processors
We engage select third-party service providers to deliver essential infrastructure for fitzone.et. These providers operate under strict confidentiality obligations:
Map Tile Providers (OpenStreetMap): When you view interactive maps on gym detail pages or in the branch location picker, your browser fetches map imagery directly from OpenStreetMap Foundation servers. This standard web request transmits your IP address and user-agent to OpenStreetMap in order to render map tiles.
Cloud Storage & Content Delivery (CDN): Uploaded gym logos and facility photos are hosted on secure cloud object storage and served through CDN caching layers to provide fast download speeds across Ethiopia.
Hosting & Server Infrastructure: Our backend API and frontend Next.js applications run on secure cloud servers that process HTTP requests, maintain session security, and execute database queries.
Law Enforcement & Legal Authorities: We may disclose information if required to do so by applicable Ethiopian law, court subpoenas, or government orders, or to protect the vital safety of users or the public.
Section 07
7. Data Retention & Deletion
We adhere to data minimization and do not keep personal data longer than necessary:
Temporary Location Data: Ephemeral coordinates used for distance calculation are discarded immediately from server memory;
Server Log Files: IP addresses and system diagnostic logs are kept on rolling retention schedules (typically 30 to 90 days) for security forensics;
Owner Account & Listings: Retained for the lifetime of your active gym profile. If you close your account, your personal credentials and unpublished drafts are promptly deleted.
Section 08
8. Data Security Measures
We implement robust technical and organizational security controls designed to safeguard your information:
Encrypted Transit
All data is transmitted via modern HTTPS/TLS encryption.
Hashed Credentials
Owner passwords are never stored in plaintext and use strong key derivation.
Strict Access
Administrative access to databases is restricted to authorized personnel.
Section 09
9. Your Rights & Choices
Under the Ethiopian Personal Data Protection Proclamation (No. 1321/2024), you possess defined rights regarding your personal data:
Right of Access & Portability: You may request confirmation of whether we hold personal data concerning you and obtain an export.
Right to Rectification: Gym Owners can correct their facility details, hours, phone numbers, or photos at any time directly inside the dashboard.
Right to Erasure (“Right to be Forgotten”): You may request the permanent deletion of your account and personal records.
Revoking Location Permissions: Visitors can disable location access at any time through their device or browser settings.
Lodging Inquiries: To exercise any data right, submit a request to hello@fitzone.et. We acknowledge and address requests promptly.
Section 10
10. Cross-Border Data Transfers
Because fitzone.et utilizes globally distributed cloud hosting, CDN distribution, and database infrastructure, data may be processed on servers located outside Ethiopia. Whenever data is processed internationally, we ensure appropriate organizational, technical, and contractual safeguards are maintained to protect data integrity consistent with this policy and Proclamation No. 1321/2024.
Section 11
11. Children's Privacy
fitzone.et is not intended for use by children under the age of 18. We do not intentionally solicit or process personal data from minors. If you believe a child has provided us with personal data without parental consent, please contact us at hello@fitzone.et so we can investigate and promptly delete the information.
Section 12
12. Changes to This Privacy Policy
We may periodically update this Privacy Policy to reflect technical improvements, new product features, or regulatory updates. The current version will always be accessible at fitzone.et/privacy with the “Last updated” timestamp. We encourage you to review this policy periodically.
Section 13
13. Contact & Data Inquiries
If you have questions regarding this Privacy Policy or wish to exercise your data rights under Ethiopian law, please contact our privacy team:
