Legal

Privacy
Policy.

WWILDD FFREERRUNN PRIVATE LIMITED ("ST8 Fitness", "we") · GSTIN 05AAECW1259J1Z8 · Version 1.0 · Last updated 28 July 2026

1. Who we are

ST8 Fitness is a movement academy operated by WWILDD FFREERRUNN PRIVATE LIMITED, on Rajpur Road, Dehradun, Uttarakhand. Registered office: C/o Rajeev Khanna, 11 D, Rajpur Road, Dehradun G.P.O., Dehradun, Uttarakhand 248001, India. GSTIN: 05AAECW1259J1Z8. We are the Data Fiduciary for the personal data described below, under the Digital Personal Data Protection Act, 2023.

2. Data we collect

• Enquiry & enrolment data: name, phone number, age or date of birth, gender, address, guardian name and relationship for minors, emergency contact, discipline of interest and preferred timings.
• Photograph: a photograph taken at enrolment and held on your member profile, used to identify you at the academy.
• Health data: medical conditions, injuries and limitations you disclose so we can train you safely, any medical documentation you provide for a pause or return-to-training clearance, and records of any injury or incident.
• Attendance data: an access card is issued to you and used to record your arrival at the academy. We do not collect fingerprints, facial scans or any other biometric data.
• CCTV: we operate CCTV cameras on the premises for the safety and security of members and staff. Signage is displayed on site.
• Membership data: attendance, progress assessments, levels, plan and payment records (including GST invoices and receipts), ST8 account credit balance, and your interactions with us.
• Communications: messages you exchange with us on WhatsApp, SMS or phone.
• Consent records: the consents you gave, when, and how.
• Website data: basic technical information needed to run the site. We do not use your data to target advertising.

3. How we use it

We use your data to schedule trials and Day Passes and operate memberships; to record attendance; to train you safely, using health disclosures to adapt or restrict activity and decide readiness; to record and deal with injuries and incidents; to send class, fee and safety messages by WhatsApp or SMS where you have consented; to operate ST8 account credit; to issue receipts and meet our legal, tax and safety obligations; and to keep a record of the consents and terms you accepted. We do not use your data for automated decisions that produce legal effects, and we do not profile members for advertising.

4. Consent and how you control it

Consent at ST8 is always an active choice — nothing is pre-ticked. Consent for messages about your membership and consent for promotional messages are given separately, and promotional consent is optional. You may withdraw either at any time by telling the front desk or replying STOP; withdrawal takes effect straight away. Withdrawing consent does not affect anything done lawfully before withdrawal, and does not delete membership, billing, incident or safety records we are required to keep. You may ask us for a copy of the consents we hold for you at any time.

5. Sharing

We do not sell personal data. We share it only with the service providers that run our operations, and only as far as needed: our membership and CRM system provider; our WhatsApp and SMS delivery providers (including Meta Platforms); our payment gateway and banking partners; and our insurers, accountants, auditors and professional advisers — and where the law requires or permits. These providers act on our instructions under contract. Your data is not shared with any other academy or fitness business, and is not used to build or demonstrate any other product.

6. Children

Members under 18 are enrolled by a parent or legal guardian, whose contact details we hold and use for all communications and consents, and whose relationship to the child we record. We take reasonable steps to verify guardian identity at enrolment. Children's photos and videos are used only with signed parental consent, which can be withdrawn at any time. In line with the Digital Personal Data Protection Act, 2023, we do not track or behaviourally monitor children and do not direct advertising at them. A parent or guardian may access, correct or request deletion of their child's data by contacting our Grievance Officer.

7. Retention

• Financial and billing records (invoices, receipts, payment and credit records): kept for 8 years from the end of the financial year of the last transaction, to meet tax and accounting requirements.
• Membership and attendance records (other than financial): kept for the duration of membership and up to 2 years after your last activity.
• Health, injury and incident records: kept for as long as a claim remains possible; for members who were under 18 at the time, until at least 3 years after they turn 18.
• Access-card records: deleted within 30 days of membership ending.
• Consent records: kept as a permanent legal record.
• Enquiry data where no enrolment follows: deleted within 12 months.
• CCTV footage: overwritten within 30 days unless kept for a specific incident.

8. Security

Access to member data is restricted to authorised staff according to their role. Records are held securely, and only authorised administrators can access financial and full member records.

9. Your rights

Under the Digital Personal Data Protection Act, 2023, you may ask us for a summary of the data we hold about you and how we use it; ask us to correct or complete it; ask us to erase data we no longer need for a legal purpose; withdraw consent; nominate another person to exercise your rights in the event of death or incapacity; and raise a grievance with us, and escalate to the Data Protection Board of India if it is not resolved. Contact our Grievance Officer below. We respond within 15 working days.

10. Grievance Officer & contact

Grievance Officer: Shivang Khanna, Co-Founder
ST8 Fitness, Rajpur Road, Dehradun, Uttarakhand · contact@st8fitness.in · +91 70888 28111

We acknowledge every grievance within 24 hours and aim to resolve it within 15 working days.

11. Changes to this policy

We may update this policy. Each update is published here as a new version with its own date. Where changes are material, we let members know through our usual channels.