Gym agreement

Under the DPDP Act 2023, the gym is the Data Fiduciary for the member records it enters: names, mobile numbers, emails, addresses, memberships, payments, attendance, workout schedules and workout logs. StreaxFit is the Data Processor and handles those records only to run the service for the gym.

• Tell each member, before adding them, that their details will be held in the app, and why.
• Add only members who are 18 or older, or whose parent or guardian has given verifiable consent that the gym holds.
• Keep member records accurate and correct them when a member asks.
• Give staff logins only to people who need them, and remove them when those people leave.
• Use member data only to run the gym.

• Use member records only to run the service for the gym, never for advertising or for sale.
• Keep data encrypted in transit and limit staff access by role.
• Tell the gym without delay about a personal data breach that affects its members, and help it meet its duties.
• Follow the retention periods in the privacy policy.

Membership records are kept for 2 years after a member leaves and then anonymised. Payment records are kept for 8 years, as tax law requires. A member's own profile stays with the member.

Questions about this agreement: [email protected].