Privacy Policy
Dhanus Gold Fitness ("DGF", "we") runs a gym in Kengeri Satellite Town, Bengaluru. This policy explains what personal data we collect, why, who we share it with, and how you can access or delete it. We follow India's Digital Personal Data Protection Act, 2023.
1. Data we collect
- Membership details you give at admission: name, mobile and WhatsApp number, email, gender, date of birth, address, emergency contact, blood group, occupation, medical conditions you choose to disclose, photograph and signature.
- Payments: package, amounts, payment mode, UPI/transaction reference, invoices. We do not store card numbers.
- Attendance and access: fingerprint data stored on our eSSL devices at the gym, a numeric device ID, and check-in times. Fingerprint templates stay on the devices inside the gym and are not uploaded to our cloud database.
- Messages: when you message us on WhatsApp, Instagram or Facebook, we receive your message, profile name, phone number or platform user ID, and the time, through Meta's official APIs.
- Enquiries and reviews: details you share when asking about membership, and public Google reviews of our gym.
2. Why we use it
- To register and manage your membership, issue GST invoices and receipts, and keep required tax records.
- To control entry to the gym and record attendance.
- To reply to your messages, and to send service messages such as welcome notes, receipts, renewal and payment reminders, and birthday wishes. You can reply STOP at any time to stop non-essential messages.
- To follow up on enquiries you start, and to respond to reviews.
- For your safety during training (medical information you choose to share).
We do not sell your data and do not use it for advertising profiles.
3. Who we share it with
- Meta Platforms (WhatsApp Business Platform, Instagram, Facebook) – to receive and send messages.
- Supabase (cloud database, servers in Mumbai, India region) – to store app data securely.
- Google – to manage our Google Business Profile and reply to reviews.
- Vercel – to host the app.
- Government or tax authorities when the law requires.
These providers only process data on our instructions.
4. How long we keep it
Membership and invoice records: 8 years (GST and accounting rules). Messages and enquiries: up to 2 years after the last conversation. Fingerprints: removed from our devices when you ask, or within 90 days after your membership ends and is not renewed.
5. Security
Access is limited to authorised staff with individual logins. Data is encrypted in transit (HTTPS) and protected by row-level access rules in our database.
6. Your rights
You can ask to see, correct or delete your data, or withdraw consent for messages. See Data deletion or contact us. We respond within 30 days.
7. Children
Members under 18 join only with a parent or guardian's consent. Children under 10 are not allowed on the gym floor.
8. Changes and contact
We will post any changes on this page. Grievance officer: Prashanth, Dhanus Gold Fitness – dhanusgoldfitness@gmail.com, +91 97400 18911.