Privacy policy
What we collect when you use J-Stamina, why we need it, who else sees it, and how to get it back or have it deleted.
Last updated 3 September 2026 · Applies to j-stamina.co.za and everything we sell through it
1Who we are
J-Stamina is an online fitness and nutrition business run by [Registered company name / sole proprietor name]. When this policy says "we", "us" or "J-Stamina", that's who it means.
Under the Protection of Personal Information Act 4 of 2013 (POPIA) we are the responsible party for the personal information described here. That means we decide what gets collected and what happens to it, and we answer for it.
- Trading name
- J-Stamina
- Registered name
- [Full registered name]
- Registration number
- [CIPC number, or "Sole proprietor — not applicable"]
- Information Officer
- [Full name]
- hello@j-stamina.co.za
- Physical address
- [Street address, suburb, city, postal code, South Africa]
2What this covers
The website, the recipe packs and programmes you download, the one-on-one coaching we do online and in person, the WhatsApp community, and the emails we send you.
It doesn't cover other companies' apps and sites that you also use — MyFitnessPal, WhatsApp, your bank, the social platforms we post on. Those have their own policies and we have no control over them.
3What we collect
Information you give us
- To buy: your name, email address, and a billing address where the payment gateway asks for one.
- To coach you properly: age, sex, height, current weight, goal weight, injuries, medical conditions, medication, allergies, food preferences, training history, and how active you are day to day.
- As you go: weigh-ins, measurements, progress photos if you choose to send them, food logs, training logs, and your check-in notes.
- When you talk to us: emails, WhatsApp messages, form submissions, and anything you post in the community group.
Information we collect automatically
- IP address, browser and device type, and rough location (city level) from your IP.
- Pages you looked at, what you clicked, when you visited, and which site sent you to us.
- Whether you opened one of our emails and which links you clicked.
- Which files you downloaded and when, so we can spot account sharing and settle refund questions.
Information from other people
- Our payment gateway tells us whether a payment succeeded, the payment reference, the card type, and the last four digits.
- If you sign up through a social or ad platform, that platform may pass us your name and email.
Progress photos and body measurements are optional. You can use everything we sell without sending a single photo.
4Why we process it
POPIA requires a lawful basis for everything we do with your information. Here is ours, item by item.
| What we do | Why we're allowed to |
|---|---|
| Deliver the files you paid for and give you access | Necessary to perform our contract with you |
| Take payment and manage a coaching subscription | Necessary to perform our contract with you |
| Build a plan around your body, goals and limitations | Your consent — see section 5 |
| Answer questions and handle complaints | Our contract with you, and our legitimate interest in running the business properly |
| Keep tax invoices and financial records | Legal obligation — the Tax Administration Act requires five years |
| Spot fraud, chargebacks and shared logins | Our legitimate interest in protecting the business |
| Improve the programmes using anonymised, aggregated results | Our legitimate interest — nobody is identifiable in this |
| Send you marketing email | Your consent, or section 69(3) of POPIA if you're already a customer |
| Use your testimonial or before-and-after photo publicly | Your separate written consent, which you can withdraw |
Where we rely on your consent you can withdraw it at any time. That doesn't undo what we lawfully did before you withdrew it, and it may mean we can no longer coach you safely.
5Health information
Your weight, injuries, medical conditions, medication and progress photos are special personal information under section 26 of POPIA. We may only process them with your express consent, which you give by completing the intake questionnaire and ticking the consent box.
We use it for one thing: to write and adjust your training and nutrition, and to keep you safe while you do it. We don't sell it, we don't use it for advertising, and we don't share it with insurers, employers or medical schemes.
Only the people who actually coach you can see it — currently Janja Wills and Marek Zadlo. Withdraw your consent and we'll stop using it and delete it within 30 days, except where we're legally required to keep something. Email hello@j-stamina.co.za.
6Payments and card details
We never see your card number. When you pay you're handed to [Payfast], a PCI-DSS compliant payment gateway. You enter your card details on their system, on their servers. They send us back only the result, the reference number, the card brand and the last four digits.
For monthly coaching, the gateway stores a secure token that lets us charge your card again on the agreed date. We hold the token, not the card, and you can cancel the mandate at any time — see the Cancellations & Refunds policy.
The gateway's own privacy terms govern what they do with your data: [link to your gateway's privacy policy].
7Cookies and analytics
Cookies are small files a site stores on your device. We use them for three things:
- Keeping the site working — your cart, your session, and security. These can't be switched off; the site breaks without them.
- Understanding traffic — [Google Analytics] tells us which pages people read and where they leave.
- Advertising — [Meta Pixel / Google Ads] lets us show ads to people who visited but didn't buy. [Delete this bullet if you don't run ad pixels.]
You choose which of the last two run, on the banner that appears on your first visit, and you can change your mind from [the cookie settings link in the footer]. Your browser can also block or clear cookies, though that may break some pages.
8Emails and marketing
If you download a free guide or join the list, you're consenting to marketing email from us — roughly [one a week], about training, food and what we've released.
If you've bought from us, section 69(3) of POPIA lets us email you about similar things we sell without asking again. Either way, every email has a one-click unsubscribe, and you can simply reply and say stop. We action it within [5 business days].
Unsubscribing doesn't stop the emails that come with the service — receipts, renewal notices, download links and messages about your coaching.
We don't sell your email address to anyone, and we don't rent our list.
9Who we share it with
We use other companies to run parts of the business. Under POPIA they're our operators: they may only use your information for the job we've contracted them for, and they're bound in writing to keep it confidential and secure.
| Who | What they get |
|---|---|
| [Payfast] — payments | Name, email, amount, order reference |
| [Mailchimp / ConvertKit] — email | Name, email, what you've bought, how you engage with emails |
| [Hosting provider] — website and file hosting | Everything stored on the site, on their servers |
| [Google Analytics] — analytics | Anonymised usage data, IP address |
| Meta Platforms — the WhatsApp community | Your phone number and anything you post in the group |
| Our accountant, and our attorney if needed | Invoices and transaction records |
| Coaches working with you | Your intake answers and progress data |
We'll also hand over information if a court, SARS, the police or a regulator lawfully requires it, or if we need to defend a legal claim. If the business is ever sold your information moves with it, and we'll tell you before that happens.
10Sending data offshore
Some of the services above store data on servers overseas, mostly in the EU and the United States. Section 72 of POPIA allows that where the recipient is bound by rules giving your information protection comparable to POPIA, or where the transfer is necessary to perform our contract with you. We check that each provider commits to that standard in its terms before we use them.
11How long we keep it
| Information | Kept for |
|---|---|
| Customer and profile details | [12 months] after your last purchase or coaching month |
| Health and progress data | [24 months] after your last session, unless you ask us to delete it sooner |
| Invoices and payment records | 5 years, as the Tax Administration Act requires |
| Marketing list | Until you unsubscribe, then your email stays on a suppression list so we don't re-add you by accident |
| Support emails and WhatsApp | [24 months] |
| Website analytics | [14 months] |
After that we delete it or strip out anything that identifies you. Anonymised, aggregated results — how a programme performed across everyone who did it — may be kept indefinitely, because nobody can be identified from it.
12How we protect it
- The site runs over HTTPS, so what you send us is encrypted in transit.
- Passwords are stored hashed. Nobody at J-Stamina can read yours.
- Only the people who need your data can reach it, and their accounts use two-factor authentication.
- Card details never touch our systems.
- Backups run [daily] and are stored encrypted.
No system is perfectly safe and we won't pretend otherwise. If a breach puts your information at risk, section 22 of POPIA requires us to tell you and the Information Regulator as soon as reasonably possible — what happened, what was exposed, and what you should do about it. We will.
13Your rights
Under POPIA you can:
- Ask what we hold and get a copy of it (section 23).
- Have mistakes corrected or incomplete information completed (section 24).
- Have information deleted where we no longer have a lawful reason to keep it.
- Object to processing we base on legitimate interest (section 11(3)).
- Withdraw consent you previously gave, including for health data and testimonials.
- Opt out of direct marketing at any time, free of charge.
- Complain to us or to the Information Regulator.
Email hello@j-stamina.co.za. We'll confirm within [5 business days] and finish within [30 days]. Formal access requests use the prescribed POPIA form, which we'll send you. We may ask you to confirm who you are first — that protects you, not us.
14Children
J-Stamina is for adults. You must be 18 or older to buy anything, and we don't knowingly collect information about anyone under 18. If you're a parent or guardian and think your child has signed up, email us and we'll delete the account and the data.
15Changes
When we change something here we'll update the date at the top. If a change materially affects your rights — a new category of data, a new purpose, a new recipient — we'll email you before it takes effect.
16Contact and complaints
Start with us: hello@j-stamina.co.za. Most things are a misunderstanding we can fix in a day.
If you're not satisfied, you can complain to the regulator.
Information Regulator (South Africa)
JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001
General enquiries: enquiries@inforegulator.org.za
POPIA complaints: POPIAComplaints@inforegulator.org.za
inforegulator.org.za
See also: Terms of Service · Cancellations & Refunds