Privacy Policy

Level 24 (“we”, “us”) operates the gym, rooftop pool and coached classes known as 24 Fitness on the 24th floor of the Le’Mac building, Church Road, Westlands, Nairobi, Kenya, and the website level24.life. For the purposes of the Data Protection Act, 2019 of Kenya (the “Act”), we are the data controller of the personal data described in this policy.

Contact for anything in this policy: reservations@level24.life or +254 794 813990.

We collect only what we need to run the club and answer you:

• Contact details you give us: name, phone number and, where you provide it, email address. This happens when you book a class or tour, send an enquiry, ask to join, or create a member account.
• Membership and booking records: the plan you choose, class bookings, waitlist entries and cancellations.
• Account details if you create a member account: your login details and profile.
• Messages you send us by WhatsApp, phone or email.
• Basic technical data your browser sends to our web host when you visit this site, such as IP address, browser type and pages requested.

We do not knowingly collect sensitive personal data (such as health information) through this website. If you tell us about an injury or health condition so that a coach can look after you, we use it only for that purpose.

We use your data to:

• reply to enquiries and arrange tours, classes and memberships;
• manage bookings, waitlists, cancellations and your member account;
• keep you safe and run the club, including the security of the premises and this website;
• meet our legal and accounting obligations.

Our lawful bases under the Act are: your consent (for example when you submit a form or message us), performance of a contract with you (your membership or booking), compliance with a legal obligation, and our legitimate interest in running and securing the club. We do not sell your personal data.

We share data only where needed to provide the service: with the staff and coaches who run your classes and bookings; with service providers that host this website and our booking system or provide messaging and email, who act on our instructions; with the payment channels you choose to pay through; and with authorities where the law requires it.

When you choose WhatsApp to contact or book with us, that conversation is also handled by WhatsApp under its own terms and privacy policy. Some pages may show an embedded map or video, which can set their own cookies or collect usage data under their providers’ own policies.

Some of these providers may process data outside Kenya. Where they do, we take steps to make sure your data stays protected as the Act requires.

We use your browser’s local storage to keep you signed in to your member account. You can clear this at any time in your browser settings, or by signing out. Embedded third-party content (see above) may use its own cookies.

We keep personal data only as long as needed for the purposes above. Enquiries that do not lead to a membership are kept for a limited period and then deleted. Membership, booking and accounting records are kept for as long as the law requires. You can ask us to close your member account at any time.

We use reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access, including encrypted connections (HTTPS) on this website. No system is completely secure, so we cannot guarantee absolute security.

Under the Data Protection Act, 2019 you have the right to be informed of the use of your data; to access it; to object to its processing; to have inaccurate data corrected; to have data deleted where it is no longer needed or was collected without a lawful basis; and to withdraw consent at any time.

To exercise a right, email reservations@level24.life or call +254 794 813990. We may ask you to confirm your identity first. If you are not satisfied with our response, you may complain to the Office of the Data Protection Commissioner of Kenya (odpc.go.ke).

This website is for adults. We do not knowingly collect personal data from anyone under 18 through it; if you believe we have, contact us and we will delete it.

We may update this policy as our services change. The date at the top shows when it was last revised. See also our Terms of Use.