Pay2Gym – Privacy Policy

Last updated: 09 September 2025

1. Introduction

This Privacy Policy explains how Pay2Gym (the “Platform”), developed and managed by Shasam Infotech, collects, uses, discloses and protects personal information when you access or use our website, mobile applications and related services (collectively, the “Services”). By using the Services, you consent to the collection and processing of information in accordance with this Policy.

2. Scope & Applicability

This Policy applies to all Users of the Platform and to all personal data and sensitive personal information collected, processed, stored or transmitted in connection with providing Services such as account management, wallet functions, bookings and payments. This Policy does not apply to third-party websites or services linked from the Platform.

3. Definitions

Personal Information – Any information that identifies or can be used to identify a natural person.
Sensitive Personal Data or Information – Includes passwords, financial information (card or bank details), health data, biometric data and other categories as defined under applicable law.
User – A person who registers for or uses the Platform.
Gym Partner – A gym, trainer or fitness provider listed on the Platform.

4. Information We Collect

• Account & Contact Data: name, email address, phone number, postal address and profile details provided at registration.
• Payment & Transaction Data: card or bank details (tokenized/encrypted), UPI, transaction history and receipts.
• Device & Usage Data: IP address, device identifiers, browser type, operating system, referral URLs and session logs.
• Location Data: approximate or precise location where permitted by the User.
• Health & Fitness Data: any health or fitness information voluntarily provided by the User.
• Communications: messages, feedback and support requests you submit to us.

5. How We Use Information

We use information to provide and improve the Platform, process bookings and payments, authenticate users, communicate booking confirmations and updates, personalize content and offers, provide customer support, detect and prevent fraud, and comply with legal obligations.

6. Lawful Basis & Consent

Where required, we process personal data on the basis of your consent, performance of a contract (to deliver Services), legitimate interests (to operate and secure the Platform) and to satisfy legal obligations. By using the Platform and submitting information you consent to the processing described in this Policy.

7. Sharing & Disclosure

We may share information with Gym Partners, payment processors, third-party service providers (under contractual confidentiality obligations), law enforcement/regulators where required, and with successor entities in connection with a business transfer.

8. Cookies & Tracking

We use cookies, web beacons and similar technologies to authenticate users, remember preferences and analyse usage. You can manage or block cookies via browser settings; however, disabling some cookies may affect Platform functionality.

9. Non-Personal & Aggregated Data

We may anonymize and aggregate data for analytics, research and business intelligence. Aggregated, non-identifiable data may be shared with partners or advertisers.

10. Data Retention

We retain personal information only as long as necessary to provide Services, comply with legal obligations and resolve disputes. Anonymized data may be retained indefinitely for analytics.

11. Data Security

We adopt industry-standard organizational and technical measures to protect data, including SSL/TLS encryption for data in transit, access controls and contractual safeguards with processors. Please protect your account credentials and notify us of unauthorized access.

12. International Transfers

Your data may be processed or stored outside your country of residence. We will take reasonable steps to ensure appropriate safeguards in accordance with applicable law.

13. Your Rights

You may have rights to access, correct, delete, restrict processing, object to processing and portability of personal data. To exercise these rights, contact our Grievance Officer. We may require identity verification and may refuse manifestly unfounded or excessive requests as permitted by law.

14. Children

The Platform is not intended for persons under 18. We do not knowingly collect personal information from children under 18; if we become aware we will delete such information unless parental consent is provided as required by law.

15. Third-Party Links

This Policy does not apply to third-party websites linked from the Platform. Please review their privacy notices before providing any personal information.

16. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified by posting the updated Policy on the Platform and, where required, by email. Continued use of the Platform after posting constitutes acceptance of the updated Policy.

17. Governing Law & Dispute Resolution

This Policy is governed by the laws of India. Any disputes arising under this Policy will be subject to the exclusive jurisdiction of the courts in Hyderabad, India.

For privacy questions or to exercise your rights, contact: grievance@pay2gym.com

Last updated: 09 September 2025