Privacy Policy

1.Who we are

This website and our club are operated by THF — The House of Fitness (“THF”, “we”, “us”, “our”), 16/COM-9, Raibareli Rd, Sector 16, Vrindavan Colony, Lucknow, Uttar Pradesh 226029. For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), THF is the Data Fiduciary for the personal data described in this policy.

This policy applies to our website, member dashboard, enquiry forms, WhatsApp, phone and email communication, and to the personal data we handle at the club. By using our services you acknowledge that you have read this policy.

2.Personal data we collect

Data you give us directly

• Enquiries and trial requests: name, phone number, email address, the program or plan you are interested in, and your message.
• Account and membership: name, phone, email, password (stored only as a one-way encrypted hash), selected plan, membership dates, and invoices.
• Profile: profile photo and emergency contact (name, phone, relationship).
• Health and fitness information (optional): blood group, medical conditions, injuries or notes you choose to share, weight, height, body type, and progress photos you upload.
• Support requests: the topic and content of messages you send us.

Payment data

Online payments are processed by our payment gateway partner. We never see or store your full card number, CVV, net-banking password, or UPI PIN. We receive only the transaction reference, amount, payment method type, and status.

Data collected automatically

• Device and usage information such as browser type, pages visited, referring page, and approximate location, collected through Google Analytics with IP anonymisation enabled.
• Small files stored in your browser (cookies and local storage) that keep you signed in and remember your preferences. See “Cookies and analytics” below.

Data collected at the club

Attendance / check-in records, and, where installed, CCTV footage of common areas for safety and security. CCTV never covers changing rooms, showers, or washrooms.

3.How and why we use your data

We use personal data only for clear, specified purposes:

• To respond to your enquiry and book trials or consultations.
• To create and manage your membership, process payments, issue invoices, and send service messages such as renewal reminders (14 and 3 days before expiry).
• To design safe training and nutrition guidance and track your progress.
• To contact your emergency contact if you are unwell or injured at the club.
• To keep the club and our website safe, and to prevent fraud or misuse.
• To understand how our website is used so we can improve it.
• To meet legal, tax, and accounting obligations.
• To send offers and updates, but only if you have opted in.

We process your data on the basis of the consent you give when you submit a form, create an account, or share information with us, and for the legitimate uses permitted under Section 7 of the DPDP Act, such as providing a service you have asked for, complying with law, or responding to a medical emergency.

4.Health information

Health information is optional but helps us coach you safely. We use it only to plan your training and respond in an emergency. It is visible only to you, your assigned trainer, and authorised club managers, and it is never used for marketing.

You can update or delete health details and progress photos at any time from your member profile, or by writing to us.

5.Calls, messages, and marketing

When you submit an enquiry, you agree that our team may contact you by phone, WhatsApp, SMS, or email about that enquiry. Service messages about an active membership (payment receipts, renewal reminders, schedule changes) are part of the service.

Promotional messages are sent only with your consent. You can opt out at any time through the notification settings in your member profile, by replying “STOP” to a message, or by emailing thf.thehouseoffitness@gmail.com.

6.Who we share data with

We do not sell or rent your personal data. We share it only with:

• Service providers (Data Processors) who work on our behalf under contract, such as our payment gateway, website hosting and database providers, email / SMS / WhatsApp messaging providers, and Google Analytics.
• THF staff and trainers on a need-to-know basis.
• Authorities when required by law, court order, or to protect the safety of members, staff, or the public.
• A successor business if THF is merged, sold, or restructured, subject to this policy.

Some providers may store data on servers outside India. Where that happens, we transfer data only as permitted under the DPDP Act and with appropriate safeguards.

7.Cookies and analytics

• Essential storage: keeps you signed in to the member dashboard and remembers settings. The site will not work properly without it.
• Analytics cookies: Google Analytics 4 sets cookies (such as _ga) to count visits and see which pages are useful. IP addresses are anonymised.
• Embedded content: Google Maps and YouTube videos on our pages may set their own cookies under Google’s privacy policy.

You can block or delete cookies in your browser settings, or install the Google Analytics opt-out add-on. Blocking essential storage may stop you from signing in.

8.How long we keep data

• Enquiries that do not lead to a membership: up to 24 months.
• Membership, payment, and invoice records: for the duration of your membership and afterwards for as long as Indian tax and accounting laws require (currently up to 8 years).
• Health details and progress photos: until you delete them, or 12 months after your membership ends, whichever is earlier.
• CCTV footage: overwritten automatically, typically within 30 days, unless needed for an incident investigation.
• Analytics data: no longer than 14 months.

9.How we protect your data

We use reasonable security safeguards, including encrypted (HTTPS) connections, hashed passwords, restricted staff access, and trusted infrastructure providers. No system is completely secure, so please keep your password private and tell us immediately if you suspect misuse of your account.

If a personal data breach occurs, we will inform the Data Protection Board of India and affected users as required by the DPDP Act.

10.Your rights

Under the DPDP Act you have the right to:

• Get a summary of the personal data we hold about you and how we use it.
• Correct, complete, or update inaccurate or incomplete data.
• Ask us to erase your data when it is no longer needed, unless we must keep it by law.
• Withdraw consent at any time. This does not affect processing already done, and some services may stop if they depend on that data.
• Nominate another person to exercise these rights if you die or become incapacitated.
• Have your grievances addressed by our Grievance Officer.

To use any of these rights, email thf.thehouseoffitness@gmail.com from your registered email address or visit the front desk. We may ask you to verify your identity, and we will respond within 30 days.

11.Children

Our online services are meant for adults. We process personal data of anyone under 18 only with verifiable consent from a parent or legal guardian, and we do not track or send targeted advertising to children.

12.Grievance Officer

For any privacy question, complaint, or request, contact our Grievance Officer:

• Grievance Officer, THF — The House of Fitness
• Email: thf.thehouseoffitness@gmail.com
• Phone: +91 89533 59771
• Address: 16/COM-9, Raibareli Rd, Sector 16, Vrindavan Colony, Lucknow, Uttar Pradesh 226029

We acknowledge complaints within 48 hours and aim to resolve them within 30 days. If you are not satisfied with our response, you may approach the Data Protection Board of India.

13.Changes to this policy

We may update this policy as our services or the law change. The “Last updated” date above shows the latest version. For significant changes we will notify members by email or in the member dashboard. Please also read our Terms & Conditions.