Skip to content
Muscle Factory Gym and CrossFit

Privacy policy

Muscle Factory Gym and CrossFit ("we", "us") runs the gym Muscle Factory Gym and CrossFit at Delhi and the websites musclefactoryindia.com and its online shop. This policy explains what personal data we collect and how we use it, in line with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000.

What we collect

  • Enquiry and membership details: name, phone number, email, date of birth, address, emergency contact, ID proof when you join, and your photo for the access system.
  • Health information you give us: injuries, medical conditions and fitness goals, so trainers can plan safely. We ask for this separately and only use it for your training.
  • Attendance and usage: check-ins (biometric or QR), class bookings, workout and diet plans, and how you use our member app.
  • Payments: invoices and payment references. Card and UPI details are handled by our payment gateway (Razorpay); we never store them.
  • Shop orders: delivery address, order history and courier tracking.
  • Website: pages visited and device information through cookies (see the Cookie policy).

How we use it

  • To run your membership, classes, personal training and shop orders.
  • To send service messages on WhatsApp, SMS or email: renewal reminders, receipts, class changes, order updates.
  • To send offers and newsletters only when you have opted in. Every such message has an opt-out; reply STOP on WhatsApp or use the unsubscribe link in emails.
  • To keep the premises safe (CCTV at the entrance and on the floor).
  • To meet legal duties (GST invoices, accounting records).

Sharing

We share data only with providers who help us run the gym — payment gateway, WhatsApp Business (Meta), email delivery, courier partners for shop orders and our hosting provider — under contracts that limit them to our instructions. We do not sell personal data. Data may be disclosed when the law requires it.

Keeping and deleting

Membership and payment records are kept for 8 years as tax law requires. Health notes, photos and biometric templates are deleted within 90 days after your membership ends unless you ask earlier. You can ask us to correct or delete your data at any time by writing to the front desk.

Your rights

Under the DPDP Act you may ask what data we hold, have it corrected or erased, withdraw consent, and nominate a person to exercise these rights for you. Write to our Grievance Officer at the front desk or call the front desk. We reply within 30 days. If unhappy, you may approach the Data Protection Board of India.

Children

Members below 18 need a parent or guardian to sign up and consent on their behalf.

Changes

We will post updates on this page. Last updated: 11 Oct 2026.