Legal

Privacy Policy

Last updated: 25 July 2026

This policy explains how AscendX Limited (trading as fitweb) collects, uses, stores, and protects your personal information. We operate under the New Zealand Privacy Act 2020.

If you are in the United Kingdom or the European Union, the UK GDPR and EU GDPR also apply to how we handle your personal information, and we honour the rights they give you (see “Your rights” below).

If you have questions, email us at hello@fitweb.io.

---

Who we are

AscendX Limited, trading as fitweb. Registered in New Zealand. Our website is fitweb.io and you can contact us at hello@fitweb.io.

What we collect

When you use fitweb, we may collect the following personal information:

• Account information: your name, email address, phone number, and business name
• Site content: your photo, bio, services, specialisations, and other content you provide through the onboarding form; this is used to generate your website
• Payment information: processed by Stripe on our behalf. fitweb does not store your card details
• Lead enquiries: contact details submitted by visitors to your fitweb site (name, email, phone, message); these are routed to you as the site owner
• Usage information: basic technical data such as IP address, browser type, and pages visited, collected automatically by Cloudflare
• Business records: information you choose to add to your business dashboard: your own clients, classes, packages, and expenses. This can include your clients' names, contact details, and payment amounts. It powers your private income, client, and reporting tools
• From ExerciseNZ or REPs: if your fitweb site is provided as part of your REPs registration or your ExerciseNZ membership, we receive your name and contact details from them to set up your account

Some of this information is about other people, for example your own clients. Where you add it, you are responsible for that information and for having any consent needed to store it, and you remain its primary point of contact. fitweb stores and processes it only to provide your dashboard. You can edit or delete this information from your dashboard at any time, request a copy of it, and it is removed when your account is closed.

Why we collect it

We use your information to:

• Create and operate your fitweb website
• Send you sign-in links, account notifications, and renewal reminders
• Route lead enquiries submitted through your site to you
• Process payments and manage your subscription
• Communicate with you about your account
• Improve the fitweb platform

We do not sell your personal information to third parties, and we do not share it with advertising networks. From time to time we may tell you about fitweb products and services that could help your business, and you can opt out of these messages at any time.

Aggregated, anonymised insights

We may combine business information across fitweb users into aggregated, anonymised form to understand industry trends and produce benchmark insights, such as typical revenue, client, or lead-conversion figures for a type of professional. This aggregated information can never be used to identify you, your business, or your clients: it contains no names or contact details, it is only ever reported as combined figures across many users, and small groups are suppressed so that no individual can be inferred.

We may publish or share these aggregated, anonymised insights, including with partners such as ExerciseNZ, or in reports. This is not a sale of your personal information, and your individual business records are never shared.

If you submit an enquiry

When you send an enquiry through a website built with fitweb, the name, email, phone number, and message you provide go to that business so it can respond to you. fitweb stores and delivers the enquiry on the business's behalf and does not use it to market to you. It is deleted when the business's site is deleted, and you can ask for it to be removed sooner by contacting the business or emailing hello@fitweb.io.

Who we share it with

We share your information only with the service providers necessary to operate fitweb:

• Cloudflare: platform hosting, DNS, and security (global infrastructure)
• Stripe: payment processing (New Zealand and United States)
• Resend: transactional email delivery (AWS Tokyo region)
• Anthropic: AI-powered site generation (United States). Your onboarding form responses are sent to Anthropic's API to generate your site copy
• Google Analytics: anonymous analytics on our marketing site (fitweb.io). We use Google Analytics to understand how visitors use our site. No personally identifiable information is shared with Google. Data is processed in the United States. Google Privacy Policy.
• ExerciseNZ / REPs: administering the membership or registration benefit (New Zealand), where your site is part of your ExerciseNZ membership or REPs registration

Each of these providers has their own privacy policy and data processing agreements in place.

ExerciseNZ and REPs

Many fitweb sites are provided as a benefit of either REPs registration or ExerciseNZ membership, through our partnership with both. If that's how you came to fitweb, your registration or membership contact details are shared with us so we can create and manage your site, and we may share limited account information back, such as whether your site is active or has been set up, so the benefit can be administered. We only use this information to provide and administer your fitweb site.

Where your data is stored

Your data is stored in Cloudflare's KV storage infrastructure, which operates across global data centres including in the United States. By using fitweb, you consent to your information being stored and processed outside of New Zealand.

How we protect your information

We take reasonable steps to keep your information safe. All data is encrypted in transit (HTTPS), and the platform runs on Cloudflare's infrastructure with access restricted to authorised people. Signing in is passwordless (we email you a one-time link rather than storing a password) and administrative access is further protected by two-factor authentication.

No online service can be completely secure, but if a privacy breach occurs that is likely to cause serious harm, we will notify the affected individuals and the Office of the Privacy Commissioner as required by the Privacy Act 2020.

How long we keep it

We keep your personal information for as long as your fitweb account is active and we need it to provide the service. If your account is closed or your site is deleted, your data, including your site content and all associated leads, is permanently removed from our systems within 30 days, except where we are required to retain certain records for legal, tax, or accounting purposes.

Lead enquiries submitted through your site are stored on your behalf so you can follow them up, and they remain yours to manage. You can view, edit, export, or permanently delete individual leads from your dashboard at any time. We do not keep lead data for longer than is necessary to support your business, and every lead tied to a site is permanently deleted when that site is deleted. You can also ask us to delete all of your data at any time (see “Your rights” below).

Your rights

Under the New Zealand Privacy Act 2020, you have the right to:

• Request access to the personal information we hold about you
• Request correction of any inaccurate information
• Ask us to delete your information (subject to any legal obligations)
• Make a complaint to the Office of the Privacy Commissioner if you believe we have breached your privacy rights

If you are in the UK or EU, you also have rights under the UK and EU GDPR, including access, rectification, erasure, restriction, data portability, and objection. You may lodge a complaint with your local supervisory authority, and in the UK that is the Information Commissioner’s Office (ICO).

To exercise any of these rights, contact us at hello@fitweb.io. We will respond within 20 working days.

An access or export request covers the personal information we hold about you: your account details, leads, and business records. It does not include your website's design or code, which are governed by our Terms of Service (and, for bespoke sites, your project agreement).

Cookies and tracking

fitweb uses a session cookie (fw_session) to keep you logged in to your account. This is a functional cookie; it is required for the platform to work and is not used for advertising or tracking.

Our marketing site (fitweb.io) uses Google Analytics to understand how visitors find and use the site. This sets _ga cookies that collect anonymous usage data (pages visited, session duration, traffic source). No personally identifiable information is included. See our Cookie Policy for full details.

Changes to this policy

We may update this policy from time to time. When we do, we'll update the date at the top of this page. For significant changes, we'll notify you by email.

---

Questions? Email hello@fitweb.io and we'll come back to you.