Privacy Policy

Effective date: 12 November 2025

1. Introduction

The Register of Exercise Professionals Pakistan (REPs Pakistan) is committed to protecting the privacy and personal data of all members, applicants, and stakeholders.

This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the Pakistan Data Protection Bill 2023 and other relevant laws.

By applying for or maintaining membership with REPs Pakistan, you agree to the terms of this policy.

2. Data Controller

REPs Pakistan is the data controller for the personal information it collects and processes in connection with membership registration, renewal, and administration.

3. Information We Collect

We collect only the information necessary to manage your membership and ensure compliance with REPs Pakistan standards. This includes:

  • Full name and contact details (address, phone, email)
  • Date of birth and identification details
  • Qualification and certification records
  • CPD (Continuing Professional Development) history
  • Payment details related to membership fees
  • Evidence of first aid certification and professional insurance (where applicable)
  • Correspondence between you and REPs Pakistan

We do not collect or store sensitive categories of personal data such as racial or ethnic origin, health data, or biometric data unless required for legal or verification purposes.

4. How We Use Your Information

Your data is used for the following purposes:

  • To process and manage your membership application or renewal
  • To verify qualifications and maintain public registers of approved professionals
  • To issue and track membership certificates
  • To manage CPD and professional development records
  • To communicate updates, policy changes, and renewal reminders
  • To send newsletters and partner information (only with your consent)
  • To comply with legal and regulatory obligations

5. Lawful Basis for Processing

We process personal data under the following lawful bases:

  • Performance of a contract
  • Legal obligation
  • Legitimate interests
  • Consent (for marketing and communications)

6. Data Storage and Security

All personal data is securely stored on REPs Pakistan’s own servers located within Pakistan.
Where limited data is shared with approved partners such as PD:Approval Ltd (UK) for accreditation or verification purposes, it is protected through data processing agreements ensuring equivalent security and confidentiality standards.

7. Data Retention

Your personal data is retained for as long as necessary to fulfil the purpose for which it was collected.
For membership data, this means up to six (6) years after membership ends, unless a longer period is required by law or regulatory obligation.
After this period, your data will be securely deleted or anonymised.

8. Sharing of Information

We may share personal data only with:

  • PD: Approval Ltd (UK)
  • ICREPs (International Confederation of Registers for Exercise Professionals)
  • Regulatory or legal authorities if required by law
  • Our service providers (e.g., IT or payment processors) under confidentiality agreements

We do not sell or trade your personal data to third parties.

9. International Data Transfers

In limited cases, your information may be securely transferred to the United Kingdom for processing by PD:Approval Ltd, which operates under equivalent privacy and data-protection standards to ensure your data remains protected.

10. Your Rights

Under the Pakistan Data Protection Bill 2023, you have the right to:

  • Access a copy of your personal data
  • Request correction or deletion of inaccurate information
  • Withdraw consent for marketing communications
  • Object to or restrict processing under certain conditions
  • Lodge a complaint with the relevant data protection authority

To exercise these rights, contact: [email protected]

11. Cookies and Website Tracking

Our website uses essential session cookies to ensure proper functionality and improve user experience.
We do not use cookies for advertising or tracking purposes without your consent. You can manage or disable cookies in your browser settings.

12. Marketing Communications

REPs Pakistan may send occasional updates, newsletters, or partner offers relevant to your professional registration.
You will only receive such communications if you have opted in. You may unsubscribe at any time using the link provided in each email or by contacting [email protected].

13. Data Breach and Incident Reporting

In the unlikely event of a data breach, REPs Pakistan will promptly assess the risk and, where necessary, notify affected individuals and the relevant data protection authority in accordance with the law.

14. Updates to This Policy

This Privacy Policy will be reviewed regularly and updated when necessary to reflect changes in law or organisational practices. The latest version will always be available on the REPs Pakistan website.

Contact Us

For any questions or concerns regarding this policy or how your data is handled, please contact:
Data Protection Officer
REPs Pakistan
Email: [email protected]