Privacy Policy

Khao Noi Gym (“KNG”, “we”, “us”) is a Muay Thai gym in Singapore, operated by NexKoins. This policy explains what personal data we collect, why, how we use it, and your rights under Singapore's Personal Data Protection Act 2012 (PDPA).

Questions? Contact our Data Protection Officer: exec.ai@outlook.com

1. What we collect

When you interact with KNG (book a class, sign up, enter a giveaway, or contact us), we may collect:

• Identifying info: name, date of birth, last 4 digits of NRIC (for emergency contact verification only)
• Contact info: email, mobile, postal address (for housecall services)
• Health info: medical conditions or injuries you disclose, so we can train you safely
• Payment info: billing name, but NOT credit card numbers (those go to our payment processor)
• Usage info: classes attended, training preferences, instructor notes
• Technical info: IP address, browser type, pages visited (standard analytics)

2. Why we collect it

• Deliver the training services you signed up for
• Process payments and issue receipts (legal obligation for tax)
• Communicate about class schedules, cancellations, important updates
• Train you safely (medical context)
• Marketing (newsletters, promotions, Spin & Win) — opt-in only
• Comply with Singapore tax, employment, and corporate law
• Improve our services and website

3. Who we share it with

We don't sell your data. We share it only with:

• Our staff (trainers, ops) — to deliver services
• Payment processors (e.g., Stripe, PayNow) — to process payments
• Government agencies (IRAS, CPF Board, MOM) — when required by law
• Cloud service providers (Google Firebase, Cloudflare, Hostinger) — to host our systems
• AI service providers (Anthropic) — for internal operations support only, never for external marketing analysis

We do NOT share your data with advertisers or external marketing companies.

4. Where your data lives

Your data is processed and stored on servers in Singapore and the Asia-Pacific region. Backups are encrypted and stored off-site within Asia-Pacific.

5. How long we keep it

• Active member records: while your membership is active
• Inactive member records: 3 years after your last activity
• Financial transactions: 7 years (Singapore tax law)
• Marketing leads / Spin & Win entries: 2 years, or until you withdraw consent
• Website analytics: 90 days

After retention expires, your data is securely deleted or anonymized.

6. Your rights under PDPA

You have the right to:

• Access the personal data we hold about you
• Correct any inaccurate or incomplete data
• Withdraw consent for marketing communications at any time
• Request deletion (subject to legal retention requirements above)
• Lodge a complaint with the Personal Data Protection Commission (PDPC) at pdpc.gov.sg

To exercise any of these rights, email exec.ai@outlook.com. We'll respond within 30 days.

7. How we protect your data

• All data is encrypted in transit (HTTPS/TLS)
• Sensitive data is encrypted at rest
• Access is restricted to authorized staff only
• Multi-factor authentication on all administrative accounts
• Regular security audits and backup restoration drills
• Staff trained on data handling

In the unlikely event of a data breach that may cause significant harm, we will notify affected individuals and the PDPC within 72 hours, as required by law.

8. Children's data

KNG offers Muay Thai classes for kids. For members under 18:

• A parent or legal guardian must sign the membership and consent form
• Medical info is collected only with parental consent
• We do not market directly to children

9. Cookies and tracking

Our website uses essential cookies to function and analytics cookies to understand usage patterns. We do not use advertising cookies or third-party trackers. You can disable cookies in your browser settings, but parts of the site may not work correctly.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top reflects the most recent revision. Material changes will be communicated by email to active members.

11. Contact

Khao Noi Gym
Singapore
Email: exec.ai@outlook.com (DPO)
Website: teamkng.com

For PDPA complaints not resolved by us:
Personal Data Protection Commission
pdpc.gov.sg