Data Policy

This Data Policy supplements our Privacy Policy and explains how Poise & Pulse stores, secures, and retains data collected through our website and studio operations, in alignment with India's Digital Personal Data Protection Act, 2023 (DPDP) and applicable global standards.

Lawful Basis

We process personal data on the basis of your consent, to fulfil contracts (such as membership bookings), to comply with legal obligations, and for our legitimate business interests.

Categories of Data

• Identity data: name, gender (optional), date of birth (optional).
• Contact data: email, mobile (with country code), address.
• Booking and attendance records.
• Payment metadata (we do not store full card details).
• Health declarations voluntarily shared for class safety.

Storage & Security

Data is stored on secured, access-controlled cloud infrastructure with encryption in transit (TLS) and at rest where supported. Access is restricted to authorised personnel on a need-to-know basis.

Retention

• Enquiry data: retained for up to 24 months from last contact.
• Active member data: retained for the duration of membership plus 7 years for compliance.
• Marketing consents: until withdrawn.

International Transfers

Some processors may be located outside India. We ensure adequate safeguards are in place for any cross-border data transfers.

Your Rights

You may access, correct, port, restrict processing of, or erase your data, and withdraw consent at any time by writing to info@poiseandpulse.com.

Grievance Officer

For data-related grievances, contact our Grievance Officer at info@poiseandpulse.com. We aim to respond within 30 days.