Fitness businesses collect more people's information than they realise — here's what to fix.
A gym owner in Pune thought he only collected names and phone numbers. But his joining form also asked for age, health problems, emergency contacts, and payment details. That is a lot of people's information. India's new privacy law says you must tell people — before they write anything — why you are collecting it. Most fitness businesses are not doing this yet.
Think about every step a new member takes. They fill a paper form or WhatsApp you their details. They book a trainer. They pay by UPI. They tap in on an attendance machine. Each of these steps collects people's information. The law says you must show a simple notice at each step. The notice must say what you are collecting and why. If you skip this, you can face a fine. Your membership form is the first place to fix.
Add a simple privacy notice to your membership joining form today.
List every place you collect member information — forms, WhatsApp, app, attendance.
Check if your business is ready. Takes 3 minutes. Visit saralprivacy.com/assessment
“A membership form is often the first privacy contract in the business.”
Free — takes 3 minutes
Answer a few simple questions. Get your free Readiness Score — sent to your email or WhatsApp.
Check My Readiness →Take our free 3–5 minute industry assessment to find out your compliance risk level.
Take Free Assessment →Free Download
The Complete DPDPA Compliance Guide
Plain English. Everything your business needs to understand the DPDP Rules 2025 — written for founders, not lawyers. Now in 7 Indian languages.
Download the Guide →5 Ready-to-Use Templates
Start complying — not just reading
Privacy Notice, Consent Language, Data Inventory, DSR SOP, Vendor Register. Delivered free to your email.
2-min reads, plain English, every morning. Free forever.
