Privacy policy

This policy explains how Max Fitness Gym collects and uses personal data through this website, our sign-up and QR forms, WhatsApp, and the attendance phone at reception. It is written to follow India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025.

Who is responsible

Max Fitness Gym, Krishan Plaza, Plot No. 6, Nyay Khand 1, Indirapuram, Ghaziabad, Uttar Pradesh 201020 decides how your personal data is used (the "Data Fiduciary"). Our technology vendor hosts and runs this platform for us as a Data Processor, under a written contract.

What we collect and why

• Call-back form: your name, mobile number and fitness goal, so we can call or WhatsApp you about membership. If you don't join, we delete it after 12 months.
• Membership: name, mobile, email (optional), date of birth, gender and a photo, to register and manage your membership, set your fee, check the minimum age and recognise you at reception. Kept for your membership plus 3 years for our accounts, then anonymised.
• Payments: amount, date, method and receipt details, for accounts, receipts and disputes. Kept for as long as tax law requires.
• WhatsApp updates: receipts and renewal reminders, only if you agree. Message records are kept for 24 months.
• Automatic attendance (optional): only with your separate consent, the reception phone creates a face template from your photo to mark your attendance. It is deleted within 30 days of withdrawing consent or leaving. You can say no and staff will mark attendance by hand.
• Attendance history: the dates you trained, kept for 24 months.
• Website analytics: pseudonymous usage data, only if you choose "Allow analytics".

We do not collect Aadhaar numbers, home addresses or health data, and we never sell personal data.

Children

Members under 18 need a parent or guardian to give consent at reception before their first workout. Face attendance stays off for them unless the guardian's consent includes it, and we never use their data for marketing or analytics profiling.

Who we share data with

Only service providers who help us run the gym, each under contract:

• Our hosting provider in India, which stores the platform's data
• Razorpay, which processes online payments
• Meta (WhatsApp Business), which delivers the WhatsApp messages you agreed to receive
• Error monitoring, with personal details removed, and website analytics, only with your consent

Your rights

You can ask to see, correct or erase your data, withdraw any consent, and nominate someone to act for you. Withdrawing is as easy as giving consent: tell reception, tap Unsubscribe on one of our WhatsApp messages, or contact the grievance officer below.

• Seeing your data: within 15 days
• Corrections: within 7 days
• Erasure: within 30 days (payment records we must keep by law are kept without your name)
• WhatsApp updates stop straight away; face attendance stops within 24 hours

How we protect your data

Data is encrypted in transit. Staff can see only what their role needs, behind a PIN. Photos are private and shown only through short-lived links. Sensitive actions are logged.

If something goes wrong

If a data breach affects you, we will tell you in plain language what happened, what it means for you and what we are doing about it, and report it to the Data Protection Board of India as the Rules require.

Grievance officer

Ajay Kuliyal, Max Fitness Gym · 098714 06350 · or ask for him in person at reception, Krishan Plaza, Plot No. 6, Nyay Khand I, Indirapuram, Ghaziabad 201014.

He is the person to contact about anything to do with your personal data — to see what we hold, to correct it, to withdraw a consent or to complain. We acknowledge complaints within 48 hours. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

Changes to this policy

When this policy changes, the date at the top changes too. We will tell you about important changes at your next visit or renewal.