Legal
Privacy Policy
Who we are
Hibiscus The Club Private Limited (CIN U55209CT2020PTC010489), registered at Block-E, Flat No. 102, VIP Estate, Vidhan Sabha Road, Shankar Nagar, Raipur, Chhattisgarh 492007, operates the Hibiscus member application and the club under development at Naya Raipur, Chhattisgarh. In this policy, "we" and "the club" mean that company.
This policy explains what personal data the member application and our club systems collect, why we hold it, and what you can ask us to do with it.
What we collect, and why
| Information | Why we hold it |
|---|---|
| Mobile number | To sign you in by one-time password, and to reach you about your membership. It is the only way into the app. |
| Name | To identify you and the people named on your membership. |
| Photograph | Shown on your digital membership card and to reception when your entry code is scanned, so a membership cannot be used by someone else. |
| Date of birth of dependants | Only for people named on a Family membership, to confirm eligibility for a child place. |
| Membership and billing records | Your plan, membership dates, status, charges, payments, receipts and refunds. |
| Appointment and benefit records | Which included services you have used and how many remain in the current month. |
| Entry records | The date and time your membership was presented at reception, and the result. |
| Enquiry form details | If you complete the enquiry form on this website, the name, email, phone and message you provide, used only to respond to you. |
| Technical information | App version, device type and error reports, used to fix faults. |
What we deliberately do not collect
The member application does not store personal health records, medical documents, diet plans, workout programmes or wellness assessments. It records only the minimum appointment and entitlement information needed to run the services included in your membership.
We do not track your location. We do not sell personal data to anyone, and we do not use it for third-party advertising.
Who else sees it
We share the minimum necessary with service providers who help us run the club:
- Payment processing. Card and banking details are entered directly with our payment gateway and are never stored on our systems. We retain only the payment reference, amount and status.
- Text messages. Your mobile number is passed to our messaging provider to deliver one-time passwords and membership notices.
- Hosting. Club records are held in a database hosted in India.
- Accounting. Invoice and payment records are passed to our accounting system for statutory bookkeeping.
- Error monitoring. Fault reports are sent to a monitoring service with personal details removed.
- This website. Enquiry form submissions are processed by our website host.
We also disclose information where the law requires it, or to establish or defend a legal claim.
People named on a Family membership
A Family membership may name a second adult and up to two children under 18. The primary member adds them and is responsible, as parent or guardian, for the information provided about any child. Dependants do not receive their own login. A parent or guardian may ask us to correct or remove a dependant's information at any time.
How long we keep it
We keep membership records while your membership is active and for a reasonable period afterwards to settle deposits, dues and disputes. Payment, invoice and tax records are kept for at least eight years, as required by Indian company and tax law. Entry and benefit history is retained as an operational record and is corrected by a new recorded entry rather than being erased, so that balances remain explainable to you. Enquiry form submissions are kept for up to two years unless you ask us to remove them sooner.
Your rights
Under India's Digital Personal Data Protection Act, 2023, you may ask us to:
- tell you what personal data we hold about you and who we have shared it with;
- correct or complete anything inaccurate;
- erase personal data we no longer need for the purpose it was collected or to meet a legal obligation;
- nominate someone to exercise these rights if you die or become incapable of doing so;
- withdraw consent, where we relied on your consent.
Withdrawing consent to hold your mobile number means we can no longer sign you into the app, because there is no other way in. Your membership itself is governed by your membership agreement and is not ended by an app request.
Deleting your account
You can request deletion of your app account from inside the app, or by writing to support@hibiscustheclub.com. We will confirm within seven working days. We will remove what we are not required to keep, and tell you plainly what we must retain and why — normally payment and tax records, and any record needed to settle an outstanding balance or deposit.
How we protect it
Information travels encrypted between your phone and our systems. Access is restricted by role, so a staff member sees only what their job requires, and important actions on member records are logged. Your entry code contains no personal information and cannot be read to reveal your name, number or payment details.
Questions and complaints
Our Grievance Officer under the Digital Personal Data Protection Act, 2023 is Shrey Goyal.
Write to support@hibiscustheclub.com or call +91 94076 01111. We respond within seven working days. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
Changes
If we change this policy we will publish the revised version here with a new effective date, and tell members in the app when the change is significant.