Privacy Policy

Last updated: 25 October 2026

This policy explains what personal information Delhi Dance & Fitness ("we", "us") collects on www.delhidancefitness.in and when you book or attend our classes, why we collect it, who sees it, how long we keep it and what rights you have. We are a dance, dance workout, fitness, yoga and acting training business run by Sachin from Delhi, India. We teach in Delhi and live on Zoom to students worldwide. We are the "Data Fiduciary" under India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the "controller" under the UK and EU GDPR.

What we collectWhy (legal basis)ConsentSharingTransfersRetentionChildrenYour rightsSecurity and breachesComplaints

1. What we collect and why

2. Legal basis

India (DPDP Act): we process your personal data on your consent, or where the law allows, for the purpose you gave it. UK and EU: we rely on (a) your consent (cookies, the callback form, health information, photos); (b) contract, when you book classes; (c) our legitimate interest in replying to enquiries and keeping the site secure; and (d) legal obligations such as tax records.

3. Consent and how to withdraw it

We ask for consent in plain language, for one purpose at a time, and never pre-tick boxes. Withdrawing is as easy as giving it:

• Cookies: use Cookie settings in the footer and choose Decline.
• Messages: reply STOP on WhatsApp or tell us you do not want to be contacted.
• Health information, photos or any other consent: message Sachin on WhatsApp +91 87008 61471 or email delhidancefitnes@gmail.com.

Withdrawing does not affect what we did lawfully before. If you withdraw, we stop that processing and delete the related data unless the law requires us to keep it.

4. Who we share information with

We do not sell your information. We share it only with services that help us run the business, and only what they need: Cal.com (bookings), Zoom (classes), WhatsApp (messages), Google (analytics, only if you accept), Meta (ad measurement, only if you accept), YouTube (videos) and Netlify (hosting and the callback form). Where our instructors help teach your class, they see only the details they need to teach you and must keep them confidential. We may disclose information if the law or a court requires it.

5. International transfers

We are based in India, so information you give us is processed in India. Our service providers may process it in other countries, including the United States. India's law permits such transfers except to countries the government restricts. For people in the UK and EU, where the law requires safeguards for transfers, we rely on the safeguards our providers offer (such as standard contractual clauses or approved data-transfer frameworks) and, where it applies, on your consent or on the transfer being necessary to deliver the class you booked.

6. How long we keep it

• Enquiries that do not become classes: deleted within 12 months of our last contact.
• Students: kept while you are a student. Invoices and payment records are kept for up to 6 years after the last class because tax and accounting law requires it.
• Health and fitness notes: deleted within 12 months after your last class, or earlier if you ask, unless the law requires otherwise.
• Photos, videos and reviews: until you withdraw permission.
• Analytics and advertising data: kept according to the retention setting of Google Analytics and Meta for this site; we aim to keep it at 14 months or less.
• Zoom recordings: we do not record classes unless we tell you first and you agree. Any recording is deleted when it has served its purpose, within 90 days unless you ask us to keep it.

7. Children

We teach children from age 4. A parent or guardian must make the booking. Under the DPDP Act a person under 18 is a child, and under US law (COPPA) a child under 13 needs a parent's consent, so:

• We take a parent's or guardian's verifiable consent before enrolling a child. We do this by confirming with the parent on their own phone number and through the written class agreement the parent accepts before paying.
• We do not knowingly collect personal information from a child through this website without a parent's involvement.
• We do not track children's behaviour or target advertising at children. Google Analytics and Meta Pixel are switched off on pages about children's classes.
• Photos or videos of a child are used only with a parent's written permission, which the parent can withdraw at any time.
• If you believe a child has sent us information without a parent knowing, tell us and we will delete it.

8. Your rights

In India you can ask for a summary of the personal data we hold and how we use it, ask us to correct or complete it, ask us to erase it, withdraw consent, use our grievance process, and nominate someone to exercise these rights if you die or cannot do so yourself.

In the UK and EU you can also ask us to restrict processing, to give you your data in a portable format, and to stop processing based on our legitimate interests. We do not make decisions about you by automated means alone.

In California you can ask what we collect, to correct or delete it, and to opt out of "sale" or "sharing". We do not sell personal information. If you press Decline, no data is shared with Meta or Google through cookies, and we honour the Global Privacy Control signal.

In Canada, Australia, New Zealand, Singapore and elsewhere you may have the right to access and correct your information and to complain to the local privacy regulator, and we will respect those rights.

To use any right, message Sachin on WhatsApp +91 87008 61471 or email delhidancefitnes@gmail.com or use the grievance page. We may ask you to confirm who you are. We reply within 30 days and always within the 90-day limit set by Indian rules.

9. Security and data breaches

We keep your information safe with reasonable measures: HTTPS on this website, access only for people who need it, a small amount of data, no card details stored, and removal of information we no longer need. If a breach puts your personal data at risk, we will tell the Data Protection Board of India and the people affected as the law requires, and where the UK or EU GDPR applies we will inform the regulator within 72 hours of becoming aware. We will tell you what happened, what data was involved and what you can do.

10. Complaints

Please contact us first through the grievance page so we can put things right. You can also complain to the Data Protection Board of India (once it is operating for complaints), to the UK Information Commissioner's Office (ico.org.uk), to the data protection authority in your EU country, or to the privacy regulator where you live.

11. Changes and contact

We may update this policy and will change the date above when we do. If a change affects how we use your data, we will ask for your consent again where the law requires it. Questions: message Sachin on WhatsApp +91 87008 61471 or email delhidancefitnes@gmail.com or visit our contact page.