Privacy Policy.

One X Club ("we", "us", "our") operates a luxury gym and wellness club in Patiala, Punjab, offering strength training, personal training, spa services, full-body massage chair access, physiotherapy, InBody body-composition analysis and an AI-powered personalisation mobile app.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the choices you have. It applies to our website (onexclub.in), our club premises, and all interactions you have with us — including enquiries, membership enrolment, club services and job applications.

Membership & enquiries

• Name, phone number, email address and locality/area of residence.
• Your fitness goals, preferred contact time and services you're interested in.
• Membership details — plan duration, start date, payment records and visit history.

Health & fitness data (sensitive)

• Body-composition measurements from InBody 260 scans (weight, body fat, muscle mass, BMI and related metrics).
• Health information you choose to share with our trainers or in-house physiotherapist — injuries, medical conditions (such as PCOD or thyroid concerns), post-pregnancy status and exercise limitations.
• Workout and meal-plan activity within our personalisation mobile app.

Hiring & recruitment

• When you apply for a role with us, we collect your résumé/CV, contact details, work experience, qualifications, certifications and references.

Website usage

• Basic technical data such as browser type, device and pages visited, used only to keep the website working and improve it.

We do not collect biometric identifiers (fingerprints, facial scans) and we do not store full payment card numbers on our systems — payments are processed by the payment provider you choose (UPI, card or net banking).

• Membership enrolment & management — processing your enquiry, joining you as a member, managing your plan, freeze requests, renewals and receipts.
• Club services — delivering personal training, wellness and spa services, full-body massage chair recovery, in-house physiotherapy, InBody scans and your personalised meal and exercise plans.
• Safety & suitability — checking that a programme is safe for you based on health information you share with us.
• Service messages — responding to your calls, WhatsApp messages and emails; sending you booking confirmations, visit reminders and membership updates.
• Marketing (with your consent) — offers, new services and club news, only if you opted in. Every message tells you how to stop receiving them.
• Hiring — evaluating your job application, conducting interviews and verifying references.
• Legal & compliance — meeting tax, accounting and legal obligations in India.

We use WhatsApp and phone calls as our primary ways of staying in touch — for answering enquiries, booking club visits, and member updates. If you message us first, we take that as permission to reply on the same channel. You can ask us to stop contacting you on any channel at any time, and we will.

Health and body-composition data is sensitive. We collect it only with your explicit consent — taken when you enrol, take an InBody scan, or start a training or physiotherapy programme. It is used solely to design and deliver your fitness, wellness or recovery programme, and is never used for marketing or shared with anyone outside your training team and our service providers.

We do not sell your personal data — to anyone, ever. We share it only with:

• Service providers who help us run the club — our cloud database and hosting provider, email service, and payment processors — each bound by confidentiality obligations.
• Professional advisers — auditors, accountants or lawyers, where reasonably required.
• Authorities — only where we are legally required to under Indian law.

• Enquiries that don't convert — up to 12 months, after which they are deleted.
• Member records & payments — for the duration of your membership plus the period required by Indian tax and accounting law (typically 8 years).
• Health & training records — for your membership period; deleted within 12 months of your membership ending, or earlier on your request.
• Job applications — up to 12 months after the hiring decision, unless you ask us to keep your profile for future openings.

Under India's Digital Personal Data Protection Act, 2023, you can ask us to:

• Show you what personal data we hold about you.
• Correct anything that is inaccurate or incomplete.
• Delete your data (where we are not legally required to keep it).
• Withdraw consent for marketing or WhatsApp updates at any time.

To exercise any of these, write to us at join@onexclub.in or call +91 75800 75700. We respond within 30 days.

Membership is for individuals aged 16 and above. We do not knowingly collect data from children under 16 without verifiable consent from a parent or guardian. If you believe a child's data has been shared with us, contact us and we will delete it.

We may update this policy as our services evolve. The latest version is always on this page, with the date it was last updated. Significant changes will be communicated to members directly.

Questions, requests or complaints about your data — contact our grievance officer:

• Email: join@onexclub.in
• Phone / WhatsApp: +91 75800 75700
• Address: Patiala, Punjab 147001, India