TheFitHab — Train. Transform. Thrive.
DPDP Act (2023) Statutory Compliance

Privacy Policy & Data Notice

This Privacy Notice is issued by TheFitHab Fitness LLP (Trade Name: "TheFitHab") in strict compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of the Republic of India.

DPDP Act (2023) Notice & Summary for Data Principals

Under Indian data protection laws, you are the "Data Principal" and TheFitHab Fitness LLP acts as the "Data Fiduciary". We process your digital personal data only with your explicit, informed consent for specified personal training packages, home visits, outdoor sessions, and online coaching. You retain the absolute statutory right to access, correct, erase your personal data, or withdraw consent at any time.

01Identity of the Data Fiduciary

The entity determining the purpose and means of processing your personal data is:

Entity Legal NameTheFitHab Fitness LLP
Brand NameTheFitHab
Registered OfficeVasant Square Mall, Vasant Kunj Rd, Pocket 5, Sector B, Vasant Kunj, New Delhi, Delhi 110070

02Itemized Categories of Personal Data We Collect

In compliance with Section 5 of the DPDP Act, we only collect digital personal data that is strictly necessary for our personal training and fitness coaching services:

Contact, Identity & Location Data

Full name, email address, telephone number, residential address (for Home PT visits), and preferred training location.

Payment & Transaction Records

Selected training package, transaction ID, payment status, and amount paid. We do not store credit/debit card PINs or CVV numbers on our servers.

Fitness & Health Declaration Notes

Voluntarily provided workout goals, past injuries, physical activity readiness declarations, and trainer notes for coaching customization.

Technical & Usage Metadata

IP address, browser type, device identifiers, and essential session cookies necessary for website security and authentication.

03Specified Purposes of Data Processing (Section 6)

We process personal data solely for the following specified, legitimate purposes:

  • Facilitating 1-on-1 Home PT session scheduling, trainer dispatch, and outdoor meetup coordination.
  • Delivering digital training guides, customized workout plans, and nutrition coaching blueprints.
  • Processing invoices, coaching package receipts, and verifying payment transactions.
  • Responding to customer inquiries, support requests, and scheduling discovery consultations.
  • Publishing client transformation stories and reviews only with prior express written consent.
  • Ensuring network security, fraud prevention, and compliance with statutory Indian accounting laws.

04Your Statutory Rights Under the DPDP Act (Sections 11–14)

As a Data Principal, the law confers upon you the following inviolable rights:

1. Right to Access Information (Section 11)You have the right to request a clear summary of your personal data being processed, along with the identities of all Data Processors who have been granted access.
2. Right to Correction & Erasure (Section 12)You have the right to correct inaccurate data, update incomplete records, or request complete erasure ("Right to be Forgotten") of personal data no longer necessary for service delivery.
3. Right of Grievance Redressal (Section 13)You have the right to lodge a formal grievance with our designated Grievance Redressal Officer and receive an expeditious resolution within 30 days.
4. Right to Nominate (Section 14)You have the right to designate another individual to exercise your privacy rights on your behalf in the unfortunate event of death or incapacity.

05Consent Management & Withdrawal of Consent

Your consent is unconditional and voluntary. You may withdraw consent for data processing at any point by emailing privacy@thefithab.com. Upon withdrawal, we will cease processing your personal data within 72 hours, except where retention is strictly mandated by Indian taxation or financial auditing laws.

06Protection of Children's Personal Data (Section 9)

We prioritize the safety of minors:

  • We do not knowingly collect personal data of individuals under 18 years of age without verifiable consent from their parent or lawful guardian.
  • We never engage in tracking, behavioral monitoring, or targeted commercial advertising directed toward minors.

07Security Safeguards & Breach Protocol (Section 8)

To protect against unauthorized access, loss, or data breach, TheFitHab implements industry-grade technical and organizational safeguards:

  • Encryption in Transit & at Rest: TLS 1.3 cryptographic protocols across all endpoints and encrypted PostgreSQL database storage.
  • Strict Access Control: Role-Based Access Control (RBAC) ensuring only authorized administrative personnel and assigned personal trainers view relevant client notes.
  • Breach Notification: In the unlikely occurrence of a data breach, we will notify the Data Protection Board of India and affected Data Principals promptly as stipulated by DPDP rules.

Statutory Grievance Redressal Officer (Section 8(10))

In compliance with Section 8(10) of the DPDP Act 2023, you may contact our designated Grievance Officer for privacy concerns, data deletion requests, or consent withdrawal:

DesignationData Protection & Grievance Redressal Officer
Official Privacy Emailprivacy@thefithab.com
Physical Postal AddressTheFitHab Fitness LLP, Vasant Square Mall, Vasant Kunj, New Delhi 110070
Statutory Resolution TimelineWithin 30 days as prescribed under the DPDP Act

If your grievance is not resolved satisfactorily within the prescribed timeline, you have the statutory right to escalate the matter to the Data Protection Board of India.