Privacy Policy

1 Who We Are

Nikhil Kohli Fitness is a personal training and online fitness coaching service run by Nikhil Kohli, based in Noida, Uttar Pradesh, India. We operate at nikhilkohlifitness.com and can be reached at connect@nikhilkohlifitness.com.

We are the data fiduciary for any personal data you share with us — meaning we are responsible for deciding how your data is collected and used.

2 What Data We Collect

We only collect information that you voluntarily provide when filling out the booking or contact form on our website. This includes:

• Name — so we know who we're talking to
• Phone number — to reach you for session confirmation and coaching communication
• Email address — for follow-up communication and session details
• Goal and fitness details — such as your fitness goal, current activity level, and any notes you share in the form

We do not collect sensitive personal data such as health records, financial account details, or government identification numbers.

3 How We Use Your Data

Your information is used only for the following purposes:

• To contact you to confirm or schedule your consultation or trial session
• To deliver fitness coaching, training plans, and nutrition guidance as part of your coaching program
• To send updates, progress check-ins, and support messages related to your coaching
• To process payment for your session via Razorpay (see Section 4)

We do not sell, rent, or share your personal information with any third party for marketing purposes. We will never contact you with unsolicited promotional messages from other businesses.

4 Third-Party Services

We use the following third-party services to operate the website and process bookings. Each has its own privacy policy:

Razorpay — Payment processing for session bookings. When you make a payment, your payment details (card number, UPI, etc.) are entered directly on Razorpay's secure platform and are never seen or stored by us. Razorpay is a PCI-DSS compliant payment gateway. See their privacy policy at razorpay.com/privacy.

Forminit — Form submission service used to receive and store the contact/booking form data you submit on this website. Your name, email, phone number, and form responses are transmitted to Forminit's servers when you submit the form. See their privacy policy at forminit.com.

Beyond these two services, your data is not shared with any other third parties.

5 Data Retention

We retain your personal information for as long as you are an active client, and for up to 2 years after your last interaction with us — unless you request earlier deletion (see Section 6).

This retention period allows us to refer back to your history if you return for coaching, and to meet any legal or financial record-keeping requirements.

After 2 years of inactivity, your data is deleted from our records and from any communication tools we use to manage client information.

6 Your Rights

Under India's Digital Personal Data Protection (DPDP) Act 2023, you have the following rights regarding your personal data:

• Right to access — You can ask us what personal data we hold about you, and receive a copy of it.
• Right to correction — If any of your information is inaccurate or incomplete, you can ask us to correct it.
• Right to erasure — You can ask us to delete your personal data at any time. We will process deletion requests within 30 days.
• Right to withdraw consent — You can withdraw your consent for us to use your data at any time. This will not affect any coaching services already delivered.
• Right to grievance redressal — If you believe your data has been mishandled, you have the right to raise a complaint with us, and if unresolved, with India's Data Protection Board.

7 Data Security

We take reasonable steps to keep your information safe. Our website uses HTTPS (SSL/TLS encryption) for all data transmitted between your browser and our server. Payment processing is handled entirely by Razorpay, which is certified to PCI-DSS standards — your payment details never pass through our servers.

No method of data transmission over the internet is completely secure. However, we are committed to protecting your data and will notify you promptly if we become aware of any breach that affects your information.

8 Legal Compliance

This privacy policy is written in compliance with the Digital Personal Data Protection (DPDP) Act, 2023 — India's primary law governing how personal data is collected, processed, and protected.

Key principles we follow under the DPDP Act:

• Consent-based collection — We only collect your data when you voluntarily submit a form on our website.
• Purpose limitation — We use your data only for the purposes described in this policy.
• Data minimisation — We collect only what is necessary to provide our services.
• Storage limitation — We do not keep your data longer than necessary.

If India's data protection laws or regulations change, we will update this policy accordingly.

9 Contact Us

If you have any questions, concerns, or requests about this privacy policy or the way we handle your data, please get in touch:

• Email: connect@nikhilkohlifitness.com
• Phone: +91 93689 99256
• Location: Noida, Uttar Pradesh, India

We aim to respond to all privacy-related queries within 30 days.