Privacy Policy

1. Who We Are

RYT Club operates rytclub.in, an Indian direct-to-consumer athleisure platform based in Hyderabad, Telangana, India. We are the data controller responsible for your personal information collected through this website.

This Privacy Policy is published in compliance with the Information Technology Act, 2000, the IT (Amendment) Act, 2008, the Digital Personal Data Protection Act, 2023, and applicable rules thereunder.

2. Information We Collect

We collect personal information that you provide directly to us and data generated through your use of our website:

Information you provide

• Contact information: full name, email address, phone number
• Delivery information: shipping address including PIN code, city, and state
• Account information: password (stored as a one-way encrypted hash - never in plain text), saved addresses, order history
• Communications: messages you send us via email or WhatsApp

Payment information

All payment transactions are processed by Razorpay Payment Solutions Pvt. Ltd. We do not receive, store, or process your card number, CVV, UPI PIN, or net banking credentials. Razorpay's own privacy policy governs the payment data you submit to their platform.

Usage and device data

• IP address and approximate location (country/city level)
• Browser type, operating system, device type
• Pages visited, time spent, referral source
• Session identifiers and cookies (see Section 7 for cookie details)

3. How We Use Your Information

We use your personal information for the following purposes, only to the extent necessary for each purpose:

• Order fulfilment: to process, pack, and deliver your orders and to issue GST-compliant invoices
• Order communications: to send order confirmation, dispatch, delivery, and refund notifications via WhatsApp and email
• Customer support: to respond to your queries, return requests, and complaints
• Account management: to maintain your account, saved addresses, and order history
• Marketing (with consent only): to send promotional offers, new product announcements, and sale alerts via WhatsApp or email - only if you have opted in. You may opt out at any time.
• Analytics and improvement: to understand how visitors use our website and to improve our products and user experience
• Legal compliance: to meet our obligations under applicable Indian law (e.g., GST record-keeping)

4. Legal Basis for Processing

We process your personal data on the following bases:

• Contract performance: processing necessary to fulfil your purchase
• Legal obligation: compliance with GST, taxation, and regulatory requirements
• Consent: marketing communications and non-essential cookies (consent may be withdrawn at any time)
• Legitimate interest: fraud prevention, website security, and improving our services

5. WhatsApp Communications

By providing your phone number and placing an order, you consent to receiving transactional WhatsApp messages from RYT Club including: order confirmation, dispatch notification, delivery update, and refund status.

Marketing messages (new arrivals, offers) are sent only with your explicit opt-in consent. You may opt out of marketing messages at any time by replying "STOP" or contacting us at support@rytclub.in. Opting out of marketing will not affect transactional order messages.

6. Sharing Your Information

We do not sell, rent, or trade your personal information to any third party. We share your data only in the following limited circumstances:

• Courier partners (Delhivery, BlueDart, DTDC via Shiprocket) - your name, phone number, and delivery address are shared solely to fulfil delivery
• Razorpay - for payment processing (contact and order details as required by Razorpay's system)
• Vercel (hosting infrastructure) - technical processing of web requests; no personal data is permanently stored by Vercel beyond standard server logs
• Legal authorities - if required by law, court order, or to protect the rights and safety of RYT Club or its users

All third-party service providers we use are required to handle your data in accordance with applicable privacy law and are contractually prohibited from using it for purposes other than those specified above.

7. Cookies

We use minimal cookies on rytclub.in for the following purposes:

• Essential cookies: maintaining your shopping cart across pages and sessions (required for the website to function - these cannot be disabled)
• Analytics cookies: anonymised usage data (Vercel Analytics) to understand how visitors interact with our website - no personally identifiable information is stored

You can manage or disable non-essential cookies via your browser settings. Please note that disabling cookies may affect the functionality of your shopping cart and other features.

8. Data Retention

We retain your personal information for as long as is necessary for the purpose for which it was collected, or as required by applicable law:

• Order and transaction records: 7 years (required under GST and tax regulations)
• Account data: for as long as your account is active, plus 12 months after account deletion
• Marketing consent records: until consent is withdrawn
• Customer support communications: 2 years from the date of last interaction

Once the applicable retention period expires, your data is securely deleted or anonymised.

9. Data Security

We implement industry-standard technical and organisational security measures to protect your personal information, including:

• HTTPS encryption for all data transmitted via the website
• Passwords stored as one-way cryptographic hashes
• Access controls limiting data access to authorised personnel only
• Regular monitoring and security updates

While we take all reasonable precautions, no online system is completely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights, we will notify you as required by applicable law.

10. Your Rights

Under applicable Indian data protection law, you have the following rights in relation to your personal data:

• Right of access: request a copy of the personal data we hold about you
• Right to correction: request correction of inaccurate or incomplete personal data
• Right to erasure: request deletion of your personal data (subject to our legal retention obligations)
• Right to withdraw consent: withdraw consent for marketing communications at any time, without affecting the lawfulness of prior processing
• Right to grievance redressal: raise a complaint with us if you believe your data has been processed unlawfully

To exercise any of these rights, email us at privacy@rytclub.in. We will respond within 30 days.

11. Children's Privacy

Our website is not directed to children under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us immediately at privacy@rytclub.in and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The revised policy will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

For material changes that significantly affect how we use your data, we will notify you via email or a prominent notice on the website prior to the change taking effect.

13. Contact & Grievance Officer

For privacy-related queries, requests, or complaints, please contact our Grievance Officer:

RYT Club - Data Grievance Officer
Hyderabad, Telangana, India
privacy@rytclub.in

We aim to acknowledge all privacy requests within 72 hours and resolve them within 30 days.