Privacy Policy
Effective: 1 June 2025
We respect your privacy. This policy explains how your personal data is collected, used, and protected.
Contents
Summary
We collect only the data necessary to operate the booking platform. We do not sell your data. You can request access or deletion at any time by emailing us at support@pb11fitness.com.1. Introduction
PB11 Fitness Studio ("we", "us", "our") operates the PB11 Fitness Studio booking platform available at pb11fitness.com (the "Platform"). This Privacy Policy explains how we collect, use, store, and protect personal information provided by users ("you", "your") when you access our services. By using the Platform you consent to the practices described in this policy.
2. Information We Collect
2.1 Information you provide directly
- Full name, email address, and phone number when you create an account.
- Date of birth (optional) to verify age eligibility.
- Payment information — processed entirely by Razorpay; we do not store card numbers or UPI IDs.
- Profile photo or avatar (optional).
- Messages sent via our contact form.
2.2 Information collected automatically
- Device information: browser type, operating system, device platform (Android, iOS, Desktop, Tablet), HTTP client library version, and OS version where detectable.
- Usage and interaction data: every page visited, clicks on interactive elements (buttons, links), search queries, and duration of visits.
- Log data: IP addresses, access timestamps, and session details.
- Account activity audits: record of profile updates, password resets, role updates, and login/logout events.
- Cookies and similar tracking technologies (see Section 6).
3. How We Use Your Information
- To process class bookings, payments, cancellations, and refunds.
- To send booking confirmations, reminders, and waitlist notifications via email.
- To manage your subscription and credit balance.
- To personalise your experience and show you relevant classes.
- To respond to your queries and provide customer support.
- To send marketing communications about new classes or promotions (only with your consent; you may unsubscribe at any time).
- To detect, prevent, and investigate fraudulent activity, security vulnerabilities, or database tampering.
- To run automated transaction integrity checks (cross-referencing credit ledger records with invoice records and administrative audit logs).
- To comply with applicable laws and regulations.
4. How We Are Permitted to Process Your Data
Under the Digital Personal Data Protection Act, 2023 we process your personal data on the following grounds: • Your consent: for creating your account, taking bookings, processing payments and sending you offers. You may withdraw it at any time. • Certain legitimate uses permitted by the Act: for security, fraud prevention, and meeting our legal and tax obligations. We do not process your data for any purpose beyond what we told you when we collected it. Where we need your data for a new purpose, we will ask you first.
5. Sharing Your Information
- Razorpay (payment processing) — they have their own privacy policy governing your payment data.
- Email service providers (transactional emails only — booking confirmations, OTPs).
- Hosting and cloud infrastructure providers under strict data processing agreements.
- Law enforcement or regulatory authorities when required by law or court order.
- We do not sell, rent, or trade your personal information to third parties for marketing purposes.
6. Cookies
We use strictly necessary cookies to maintain your session and keep you logged in. We do not use third-party advertising or tracking cookies. You can disable cookies in your browser settings, though this may affect Platform functionality.
7. Data Retention
- Account data is retained for as long as your account is active.
- Booking and payment records are retained for seven (7) years to comply with Indian financial and tax regulations.
- Marketing consent records are retained for five (5) years.
- Interactive activity logs (page views, clicks) are retained for ninety (90) days for security auditing and then deleted, except where required for ongoing investigations.
- If you request account deletion, your personal details will be anonymised within thirty (30) days, subject to our legal retention obligations.
8. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include HTTPS encryption, access controls, secure password hashing, and rate limiting. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
9. Your Rights
As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the right to:
- Access: request a summary of the personal data we hold about you and how we process it.
- Correction: have inaccurate or incomplete data corrected, completed or updated. Most of this you can do yourself from your account settings.
- Erasure: ask us to delete your personal data, where we are not required by law to keep it.
- Grievance redressal: complain to our Grievance Officer (Section 13) if you are unhappy with how we have handled your data.
- Nomination: name another person to exercise these rights on your behalf in the event of your death or incapacity.
- Withdraw consent: at any time, though this may mean we can no longer provide the service.
10. Children's Privacy
The Platform is not intended for children. Under the Digital Personal Data Protection Act, 2023 a person below 18 is a child, and we process a child's personal data only with verifiable consent from a parent or lawful guardian. We do not carry out tracking, behavioural monitoring or targeted advertising directed at children. If you believe a child has given us personal data without the required consent, contact us and we will delete it.
11. Third-Party Links
The Platform may contain links to external websites (e.g., social media). We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies before sharing any personal data.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a notice on the Platform at least seven (7) days before the changes take effect. Your continued use of the Platform after that date constitutes your acceptance of the revised policy.
13. Contact & Grievance Officer
For privacy-related queries, access requests, or complaints, please contact our Privacy Officer: PB11 Fitness Studio Chotti Baradari Road, Opp. Bhasha Bhawan, Patiala – 147001, Punjab, India Email: support@pb11fitness.com Phone: +91-9646175003 We will respond to all legitimate requests within thirty (30) days.