Privacy Policy

1. Data Fiduciary (Controller)

For the purposes of Indian data protection law, the Data Fiduciary responsible for your personal data is:

2. Personal Data We Collect

We collect the following categories of personal data:

• Identity & Contact: Full name, mobile number, WhatsApp number, email address, date of birth, and residential address.
• Health & Fitness Information: Medical history, pre-existing conditions, injury disclosures, and fitness goals — provided voluntarily during enrolment or trainer consultations.
• Payment Data: Transaction IDs and payment mode. All payment processing is handled by Razorpay; we do not store raw card details or bank credentials directly.
• Usage Data: Website browsing activity, pages visited, IP address, browser type, and device identifiers — collected via cookies and analytics tools.
• Communication Records: WhatsApp messages, enquiries, feedback, and any other communications exchanged with our team.

3. How We Use Your Personal Data

We use your personal data for the following lawful purposes:

• Processing and managing your gym membership enrolment and renewals
• Delivering and personalising fitness services and training programmes
• Sending membership confirmations, renewal reminders, and class schedules via WhatsApp and SMS
• Following up on free trial enquiries and supporting member retention
• Processing payments and issuing digital receipts
• Running targeted advertising campaigns on Meta (Facebook / Instagram) using Custom Audiences
• Analysing website usage to improve our digital experience
• Complying with legal and regulatory obligations under Indian law

4. WhatsApp & SMS Communication

By providing your mobile number during enrolment, via our website enquiry form, or through any direct contact with our team, you consent to receiving transactional and promotional communications from Flex N Flexi Fitness Hub via WhatsApp and SMS.

You may withdraw this consent at any time by notifying us via WhatsApp or in person at the front desk. Withdrawing marketing consent will not affect essential service communications required to manage your active membership.

5. Meta Advertising & Pixel

We use the Meta Pixel and Custom Audience tools to deliver targeted advertising on Facebook and Instagram. This may involve sharing hashed (cryptographically encrypted) contact data — such as mobile numbers and email addresses — with Meta Platforms, Inc. Raw personal data is not transmitted to Meta.

You may opt out of personalised Meta advertising at any time through your Facebook or Instagram Ad Preferences settings.

6. Data Sharing with Third Parties

We do not sell, rent, or trade your personal data to any third party for commercial purposes. We share data only with the following trusted processors, strictly for the purposes described:

• Razorpay Financial Solutions Pvt. Ltd. — payment processing
• Meta Platforms, Inc. — digital advertising (hashed contact data only)
• Google LLC — website analytics (Google Analytics) and local search visibility (Google Business Profile)
• Legal & Regulatory Authorities — when required by applicable law, court order, or government directive

7. Data Retention

We retain your personal data for as long as your membership remains active. Following membership termination, your data may be retained for up to 3 years for operational, financial, and legal compliance purposes, unless a longer period is required by applicable law.

Health disclosures made during personal training consultations are retained for the duration of that training relationship and deleted upon written request after services conclude.

8. Data Security

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Digital records are stored securely; physical records are maintained on secured premises.

9. Your Rights Under the DPDP Act, 2023

As a Data Principal under India’s Digital Personal Data Protection Act, 2023, you have the following rights:

• Right to Access: Request a summary of personal data held by us and the purposes for which it is processed.
• Right to Correction: Request correction or updating of any inaccurate or outdated personal data.
• Right to Erasure: Request deletion of personal data, subject to our legal retention obligations.
• Right to Withdraw Consent: Withdraw consent for data processing at any time. Note: withdrawal may affect your ability to access certain services.
• Right to Grievance Redressal: Raise a data-related grievance with our Grievance Officer (see Section 14).
• Right to Nominate: Nominate a representative to exercise your data rights in the event of your death or incapacity.

All data rights requests will be acknowledged within 7 working days and resolved within 30 days of receipt.

10. Cookies & Website Analytics

Our website uses cookies and similar tracking technologies to enhance user experience and collect anonymised analytics data. By continuing to browse our website, you consent to the use of cookies in accordance with this Policy.

You may disable or manage cookies through your browser settings. Disabling certain cookies may affect the functionality of some website features. We may use Google Analytics to monitor aggregate usage; data collected is anonymised and not linked to individual identities.

11. Children’s Privacy

We do not knowingly collect personal data from individuals under the age of 16 without explicit parental or guardian consent in accordance with the DPDP Act, 2023. If you believe a minor has provided personal data to us without appropriate consent, please contact us immediately for prompt deletion.

12. Third-Party Links

Our website and social media profiles may include links to external websites or resources provided for general reference. Flex N Flexi Fitness Hub is not responsible for the privacy practices, content, or accuracy of any linked external site. We recommend reviewing the privacy policy of any external website you visit.

13. Updates to This Policy

We may update this Privacy Policy periodically. The revised version will be published on our website with an updated effective date. Continued use of our services after a revision constitutes your acceptance of the updated Policy.

14. Data Grievance Officer & Contact

For data access requests, corrections, deletions, consent withdrawal, or any privacy-related concerns, please contact us: