Privacy Policy

We collect several types of information to provide and improve our services. Personal identification information includes your name, email address, phone number, date of birth, and gender when you create an account. Payment information such as credit card details and billing address is collected for membership purchases, processed through secure third-party payment processors. Health and fitness data includes your fitness goals, workout preferences, and progress tracking to personalize your experience. Usage data is automatically collected, including IP address, browser type, and pages visited. We also collect communication data from your correspondence with us and location data if you enable location services.

We use your information to provide and maintain our services, including processing memberships, delivering fitness programs, and tracking your progress. We personalize workout plans based on your goals, recommend relevant content, and improve our offerings through usage analysis. Communication purposes include sending service updates, responding to inquiries, and sending promotional materials if you've opted in. We process payments securely, prevent fraud, and maintain financial records. For security and legal compliance, we protect against unauthorized access, enforce our terms, and comply with legal obligations. Analytics help us understand user behavior and improve our services.

We share your information only in specific circumstances. Service providers including payment processors, email services, cloud storage, and analytics providers receive limited access to help us operate our business. All service providers are contractually obligated to protect your data. In business transfers such as mergers or acquisitions, your information may be transferred to the new entity with prior notification. We may disclose information when legally required, to protect our rights, or to ensure user safety. With your explicit consent, we may share information for other purposes. Aggregated and anonymized data may be shared for research or marketing without restriction.

We implement robust security measures to protect your information from unauthorized access, alteration, or disclosure. All data transmitted is encrypted using SSL/TLS protocols, and sensitive data is encrypted at rest. Payment information is processed through PCI-DSS compliant gateways. Access controls ensure only authorized personnel can access data, with multi-factor authentication and role-based permissions. We conduct regular security audits, penetration testing, and continuous monitoring. Employees receive training on data protection and sign confidentiality agreements. Our servers are housed in secure data centers with restricted access and regular backups. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

You have important rights regarding your personal information. The right to access allows you to request a copy of your data and information about how we use it. The right to rectification enables you to correct inaccurate information and update your profile. The right to erasure permits you to request deletion of your data in certain circumstances. The right to restrict processing allows you to limit how we use your data. The right to data portability enables you to receive your data in a machine-readable format. The right to object allows you to object to processing for direct marketing or based on legitimate interests. The right to withdraw consent means you can withdraw permission at any time. To exercise these rights, contact us using the information at the end of this policy, and we'll respond within 30 days.

We use cookies and tracking technologies to enhance your experience. Essential cookies enable core functionality and cannot be disabled. Performance cookies help us improve the website by tracking usage patterns anonymously. Functionality cookies remember your preferences like language and region. Targeting cookies from advertising partners show relevant ads based on your interests. Analytics tools like Google Analytics help us understand visitor behavior. You can control cookies through your browser settings, though disabling them may affect functionality. Third-party cookies may be used for advertising and analytics, and you can opt out through industry platforms. We use web beacons in emails to track engagement and improve communications.

Our services are not intended for individuals under 16, and we do not knowingly collect personal information from children without parental consent. Age verification measures are in place during registration. If we discover we've collected information from a child under 16, we will immediately delete it and terminate the account. Parents can review, request deletion, or refuse further collection of their child's information. If you believe we've collected information from a child under 16, contact us immediately. For users 16-18, we recommend parental involvement. Special protections apply to children's data, including stricter consent requirements and enhanced security measures.

Your information may be transferred to and processed in countries other than your residence. We use legal mechanisms including Standard Contractual Clauses and adequacy decisions to ensure adequate protection. Our servers are located in secure data centers in the United States and Europe, with backup systems in multiple locations. All entities processing your data are contractually obligated to provide adequate protection, and we implement encryption and regularly review our transfer mechanisms. Your privacy rights remain protected regardless of processing location. By using our services, you consent to international data transfers while we maintain protection according to this policy and applicable laws.

We retain your information only as long as necessary to fulfill our purposes and comply with legal obligations. Account information is retained during active membership and typically up to 7 years after closure. Payment records are kept for 7-10 years per tax regulations. Health and fitness data is retained while active and up to 3 years after closure. Communication records are kept for up to 5 years. Anonymized analytics data may be retained indefinitely. Marketing data is retained until you unsubscribe. Legal holds may extend retention periods. When periods expire, we securely delete or anonymize data. You can request early deletion subject to legal obligations.

Our website may contain links to third-party websites with their own privacy policies. We have no control over these sites and encourage you to review their policies. Social media integration allows you to connect with platforms like Facebook or Instagram, which may collect information according to their policies. Third-party fitness apps and devices may integrate with our services with your permission, which you can revoke anytime. Payment processors handle transactions securely under their own policies. Advertising partners may use cookies to deliver relevant ads, and you can opt out through industry tools. Analytics services operate under their own privacy policies. We select partners carefully but cannot guarantee their practices.

We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. We'll notify you by posting the updated policy with a new "Last Updated" date, sending email notifications for significant changes, and displaying prominent notices when you log in. Changes may include new features, legal compliance updates, or clarifications. Your continued use after changes constitutes acceptance, though material changes may require explicit consent. We recommend checking this policy periodically and reviewing the "Last Updated" date. Previous versions are available upon request. If you disagree with changes, you can close your account. We're committed to transparency and welcome your feedback.

For questions or requests regarding this Privacy Policy, contact our Privacy Team at mail@fitspace.in (we respond within 48 hours). For data access requests, email mail@fitspace.in with "Privacy Request" in the subject line (processed within 30 days). Our mailing address is 2986, 12th Main Rd, Indiranagar, Bengaluru, Karnataka 560008. Phone support: +91 8489785994 (Monday-Friday, 9 AM - 6 PM IST). Contact our Data Protection Officer at mail@fitspace.in for compliance matters. Please provide your name, email, and a clear description of your request. If unsatisfied with our response, you can file a complaint with your local data protection authority.