Privacy Policy
This policy explains what personal information RecoveryPro collects, why, who it is shared with, and the choices you have. RecoveryPro is run by Kurt Micallef, a Performance Physiotherapist based in Dubai, United Arab Emirates. For anything about your data, email hello@rprecoverypro.com.
1. Who is responsible for your data
The controller of your personal data is Kurt Micallef, trading as RecoveryPro, Dubai, United Arab Emirates ("RecoveryPro", "we", "us"). We handle personal data in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, for visitors in the EU or UK, the GDPR.
2. What we collect
- Contact details: your name, email address and, if you choose to give it, phone or WhatsApp number.
- Booking details: the time you book, your name and email, and anything you add to the booking form (through Cal.com).
- Purchase details: what you bought, the amount, the date and the payment reference. Card details are entered on Ziina's secure checkout and never reach our servers.
- Application and coaching information: your goals, training history and, if you choose to share them, injuries or physical limitations. This is health-related information; we only collect it with your explicit consent and only use it to coach you.
- Feedback and reviews: your name, city, rating and comments, and whether you agreed to us publishing them.
- Newsletter: your email address, if you subscribe.
- Website usage: anonymous, aggregated statistics (pages viewed, country, device type) from Vercel Web Analytics, which does not use cookies or identify you.
We only ask for what we need. Optional fields are marked as optional.
3. Why we use it (and our legal basis)
- To provide what you asked for (performing our contract with you): taking bookings, processing payments, delivering programs and download links, coaching you, and answering your messages.
- Health-related information (your explicit consent): to plan coaching that is safe and suited to you. You can withdraw this consent at any time.
- Newsletter and occasional offers (your consent, or our legitimate interest in telling existing customers about similar programs): you can unsubscribe at any time using the link in every such email.
- Publishing reviews (your consent): only if you tick the box allowing it, shown with your first name, last initial and city.
- Running and protecting the site (legitimate interests): preventing fraud and abuse, fixing problems and improving the site.
- Legal obligations: keeping financial records required by law.
4. Who we share it with
We never sell your data or share it for advertising. We use these trusted service providers, who process data only on our instructions:
- Ziina (UAE): payments.
- Cal.com: scheduling and booking confirmations.
- Vercel (including Vercel Blob and Web Analytics): website hosting, secure file storage and anonymous statistics.
- Upstash: the database that stores bookings and orders.
- Resend: sending order, booking and account emails.
- Formspree: delivering the application, feedback and interest forms to us.
- Kit (ConvertKit): the newsletter, if you subscribe.
- The video platform named in your booking confirmation, for your call.
Some of these providers store data outside the UAE (for example in the EU or the United States). Where that happens we rely on their contractual and security safeguards for international transfers. We may also disclose data if the law requires it.
5. How long we keep it
- Order and booking records: up to 12 months, so we can resend downloads and help with your booking.
- Download links: they expire after 48 hours.
- Coaching and application information: for as long as you are a client, then up to 12 months unless you ask us to delete it sooner.
- Financial records: as long as UAE law requires.
- Newsletter: until you unsubscribe.
6. Your rights
You can ask us to: access the data we hold about you; correct it; delete it; restrict or object to how we use it; give you a copy in a portable format; or withdraw any consent you gave. You can also complain to the UAE Data Office or, in the EU/UK, your local data protection authority.
7. How to request a copy or deletion of your data
Email hello@rprecoverypro.com from the address you used with us, with the subject "Data request", and say whether you want a copy, a correction or deletion. We will confirm within 7 days and complete the request within 30 days. We may ask you to confirm your identity, and we may keep records we are legally required to keep (such as payment records), but we will tell you if so.
8. Security
We use encrypted connections (HTTPS), private file storage, expiring single-use download links, access controls and reputable providers. No system is perfectly secure, so please contact us straight away if you think your data has been put at risk.
9. Children
Our services are for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child has given us their data, contact us and we will delete it.
10. Cookies
We do not use advertising or tracking cookies. See our Cookie Policy for the small amount of browser storage the site uses.
11. Changes
If we change this policy we will update the date at the top. Significant changes will be highlighted on the site or emailed to customers.