Privacy Policy

1. Scope

This Privacy Policy explains how BUSY TO FIT with PRASANTH ("Busy To Fit", "we", "us" or "our") collects, uses, shares, retains and protects personal data when you visit https://busytofit.com, purchase or use a membership, participate in workouts or sessions, communicate with us, or interact with related services such as WhatsApp or YouTube.

This Policy should be read together with our Terms and Conditions. It does not govern a third-party service operating under its own privacy policy.

2. Who is responsible for your data

BUSY TO FIT with PRASANTH is responsible for deciding why and how your personal data is processed in connection with our services.

3. Personal data we may collect

• Account and identity data: name, age confirmation, email address, WhatsApp/mobile number, city, membership ID and login or authentication information.
• Transaction data: membership plan purchased, price, payment status, transaction reference, invoices, refunds and payment-related information. We normally receive payment confirmation rather than your complete card, bank-account or UPI credentials.
• Service and fitness data: workout attendance or access, programme progress, fitness goals, preferences and feedback. If you voluntarily provide information about injuries, pregnancy, menstrual cycle, accessibility requirements, medical conditions or body measurements, we may use it for the specific purpose explained to you.
• Communications and content: support messages, survey responses, comments, reviews, testimonials, images or videos you submit, and records of consent or communication preferences.
• Device and usage data: IP address, device and browser type, operating system, approximate location derived from IP, timestamps, referring pages, pages viewed, links opened, cookies, crash logs and security events.
• Third-party platform data: limited profile, delivery, interaction or technical information received from services we use to provide membership access, communications, video delivery, payments, analytics or support.

4. How we collect data

We collect information directly from you when you register, purchase a membership, complete a form, contact support, submit feedback or participate in our services.

We may also collect information automatically through our website and related technologies, or receive limited information from payment, communication, video, analytics and other service providers.

We may also receive information from public interactions you choose to make on social media or video platforms.

Where another person purchases a membership for you or provides your details to us, that person should have the appropriate authority to do so and should ensure that you are aware of this Privacy Policy.

5. Why we use personal data

We may use your personal data to:

• Create and manage your account and membership.
• Process membership payments and resolve transaction-related issues.
• Provide workout access, session links, recordings, schedules and programme updates.
• Provide customer support and respond to fitness or access-related questions.
• Understand member needs and improve our workout programmes and services.
• Send essential service communications and, where permitted, marketing communications.
• Understand website and service usage, troubleshoot problems and improve the member experience.
• Prevent fraud, unauthorised access, link sharing, misuse, abuse and security incidents.
• Comply with applicable laws and respond to lawful requests.
• Establish, exercise or defend legal claims where necessary.

6. Grounds for processing

We process personal data only for lawful purposes.

Depending on the situation and applicable law, we may rely on your consent, your request for a specific service, processing necessary to provide the membership or service you have requested, legal obligations, and permitted purposes such as preventing fraud, protecting safety or establishing legal claims.

Where processing is based on consent, we will make the request clear and specific.

You may withdraw consent where applicable by contacting us using the details provided in this Policy. Withdrawal of consent does not affect processing that was already carried out lawfully and may affect our ability to provide a feature that requires that information.

7. Fitness and health information

If you choose to tell us about an injury, pregnancy, menstrual cycle, medical condition, accessibility requirement, body measurement or fitness goal, we may use that information only for the purpose explained to you.

This may include answering a support question, helping suggest a safer workout modification or improving our programme design.

Busy To Fit is a fitness and coaching platform and is not an electronic medical-record service.

Please do not send diagnoses, medical reports or other health information that is unnecessary for your question or support request.

We do not sell optional health information for money or use it for targeted advertising.

8. When we share personal data

We disclose only the information reasonably necessary for the relevant purpose to trusted service providers and other parties where appropriate, including:

• Payment processors, banks and invoicing providers.
• Communication and customer-support providers, including WhatsApp-related business messaging services.
• Video, content-delivery and platform providers, including YouTube or Google services.
• Website hosting, cloud storage, security, authentication, analytics and technical-support providers.
• Professional advisers such as accountants, auditors, insurers and lawyers, where appropriate.
• Government authorities, regulators, courts or law-enforcement bodies when disclosure is legally required or reasonably necessary to protect rights and safety.
• A genuine purchaser, investor or successor in connection with a merger, reorganisation or sale of the business, subject to appropriate confidentiality and legal requirements.

Service providers are expected to process personal data only for agreed purposes and to maintain appropriate safeguards.

We do not sell personal data for money.

9. International processing

Some of the service providers we use may process or store information outside India.

Where this occurs, we take reasonable contractual, technical and organisational safeguards and comply with applicable requirements under Indian law.

The privacy laws of another country may differ from those applicable in India.

10. Data retention

We keep personal data only for as long as reasonably necessary for the purposes described in this Policy, including providing membership access, maintaining security, resolving complaints, enforcing agreements and meeting tax, accounting and other legal requirements.

The retention period may depend on the type of information. For example:

• Membership and support information may be retained while your account or support issue is active and for a reasonable period afterward.
• Payment and tax records may be retained for the period required by applicable law.
• Optional health information may be deleted or de-identified when it is no longer required.
• Technical logs and backups may be retained for limited operational and security periods.

When information is no longer necessary, we may delete or anonymise it, subject to legal requirements and the practical time required to remove information from protected backups.

11. Security

We use reasonable technical and organisational safeguards appropriate to the nature of the information we handle. These safeguards may include:

• Access controls
• Restricted administrative access
• Secure authentication
• Secure service providers
• Monitoring and security logging
• Backups
• Staff or service-provider confidentiality obligations
• Technical controls designed to protect personal information

However, no online system can be guaranteed to be completely secure.

You are responsible for protecting your device, account access, OTPs and private membership links. If you suspect unauthorised access to your account, please contact us promptly.

12. Your privacy choices and rights

Subject to applicable law and permitted exceptions, you may have the right to:

• Ask for information about the personal data being processed about you.
• Request correction or updating of inaccurate or incomplete information.
• Request deletion of personal information where it is no longer required and where deletion is legally permitted.
• Withdraw consent where consent is the applicable basis for processing.
• Opt out of marketing communications without affecting essential service communications.
• Raise a privacy-related grievance and receive a response through the contact details provided below.
• Exercise other rights available to you under applicable data-protection law.

Some requests may be refused or limited where necessary to protect another person's rights, prevent fraud, preserve legal claims or comply with legal obligations.

Where required, we will explain the reason for such limitation.

13. Cookies and analytics

Our website may use cookies and similar technologies for:

• Sign-in and authentication
• Security
• Preferences
• Website performance
• Analytics
• Understanding how visitors use our website

We may use analytics and website measurement tools to understand website usage, troubleshoot issues and improve the experience.

Where applicable law requires consent for non-essential cookies or similar technologies, we will obtain the required consent before using them.

You may be able to control or block cookies through your browser settings. However, some parts of the website may not work correctly if certain cookies are disabled.

14. WhatsApp, email and other communications

We may use your registered WhatsApp number and email address to send essential service communications, including:

• OTPs
• Workout access information
• Workout reminders
• Schedule changes
• Membership updates
• Payment confirmations
• Safety notices
• Support communications

Marketing messages, where applicable, will be sent only where permitted.

You may opt out of marketing communications through the instructions provided in those messages or by contacting us.

Essential membership communications may continue while they are necessary to provide the service.

15. Public comments and member content

Comments or information that you choose to post publicly on platforms such as YouTube, Instagram or other public channels may be visible to others and may be copied or shared by them.

Please avoid posting private contact information, sensitive health information or other information that you do not want to make public.

Where you provide us with a private message, image, video, review or transformation story, we will seek appropriate permission before using identifiable private content for marketing, unless the content was intentionally made public and its proposed use is otherwise permitted by law.

16. Children

Our services are intended for individuals 18 years of age or older.

We do not knowingly collect personal data from children for membership purposes.

If you believe that a child has provided personal information without appropriate parental or guardian authorisation, please contact us so that we can investigate and take appropriate action where required.

17. Personal-data breaches

If we become aware of a personal-data breach, we will investigate the incident and take reasonable steps to contain, address and remediate the issue.

Where required by applicable law, we will notify affected individuals and relevant authorities within the timeframe required by law.

18. Third-party links and services

Our website, emails or WhatsApp messages may contain links to third-party websites or services.

These may include services used for payments, communications, video delivery, analytics or other purposes.

Third-party services operate under their own terms and privacy policies.

We are not responsible for the independent privacy practices of third-party services. We recommend reviewing their privacy policies before providing information directly to them.

19. Changes to this Policy

We may update this Privacy Policy when our services, technology providers, business practices or legal obligations change.

The latest version will be published on our website with an updated "Last Updated" date.

If a change materially affects how we use personal information that we have already collected, we will provide appropriate notice and seek consent where required by applicable law.

20. Contact and grievance redressal

For privacy questions, requests or grievances, you can contact us using the details below:

Please describe your request clearly and provide enough information for us to verify the relevant account.

We may request reasonable identity verification before providing, correcting or deleting personal information.

We will handle privacy requests and grievances in accordance with applicable law.