Privacy policy

Last updated: August 20, 2026

IMBODY INDIA

PRIVACY POLICY

Effective Date: ____  |  Last Reviewed: ____August 2026

Imbody India (“Imbody India”, “we”, “us”, “our”) respects your privacy and is committed to protecting the personal data you share with us when you visit our website [www.imbody.com]/ [www.fitnessimbody.com], purchase our smart fitness equipment, or interact with our sales, support, or after-sales teams. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights available to you under Indian law, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 (“DPDP Rules”).


  1. KEY TERMS USED IN THIS POLICY

This Policy uses terminology drawn from the DPDP Act. For clarity:

Data Fiduciary

Imbody India, which determines the purpose and means of processing your personal data.

Data Principal

The individual to whom the personal data relates (e.g., a customer, website visitor, or lead).

Personal Data

Any data about an individual who is identifiable by or in relation to that data.

Processing

Any operation on personal data, including collection, storage, use, sharing, or deletion.

Consent Manager

A person registered with the Data Protection Board of India who enables you to give, manage, review, or withdraw consent through an interoperable platform, where applicable.

Data Protection Board

The Data Protection Board of India, the regulatory authority established under the DPDP Act.


  1. PERSONAL DATA WE COLLECT


  1. Information You Provide


  • Identity and contact details: name, phone number, email address, billing and shipping/installation address.

  • Order and payment information: order history, invoice details, payment method (processed via our payment gateway/banking partners; we do not store full card numbers).

  • Communications: messages sent via WhatsApp, email, phone, or contact forms, including support and warranty requests.

  • Health and fitness-related information you voluntarily provide, such as body measurements, fitness goals, or training preferences, where you use Imbody smart equipment features, apps, or connected consoles that let you log this information.

  1. Information Collected Automatically


  • Device and usage data: IP address, browser type, device identifiers, pages visited, and interaction data when you use our website or connected fitness equipment/app.

  • Cookies and similar technologies used for site functionality, analytics, and (where consented to) marketing (see Section 8).

  1. Information From Third Parties


  • Information from authorized retail partners, distributors, or installation partners who refer or process your order on our behalf.

  • Information from payment gateways or logistics partners relevant to completing and delivering your order.


  1. PURPOSE OF PROCESSING & LEGAL BASIS 


Under the DPDP Act, we process your personal data on the basis of your consent, or where permitted, for a legitimate use recognised under the DPDP Act (such as a purpose you have voluntarily provided data for, or where processing is necessary to respond to a medical emergency, or to comply with law). We use personal data to:

  • Process, fulfil, and deliver your orders, including installation and after-sales service.

  • Provide customer support, handle returns, refunds, and warranty claims.

  • Send order updates, service communications, and (only with your consent) marketing communications.

  • Personalize your experience on connected equipment/apps, such as tracking workouts you choose to log.

  • Improve our products, website, and services through aggregated or de-identified analytics.

  • Comply with applicable law, respond to lawful requests from government or regulatory authorities, and enforce our Terms of Service and Refund Policy.


  1. CONSENT 


  • Where consent is the basis for processing, we will give you a clear notice, in English and, where required, an Indian language, describing the personal data being collected and the purpose of processing, before or at the time of seeking your consent, as required under the DPDP Act and DPDP Rules.

  • You may give, refuse, or withdraw your consent at any time. Withdrawal will not affect the lawfulness of processing carried out before withdrawal, and may affect our ability to provide certain services (e.g., we may be unable to process a refund or deliver a purchased item without your contact and address details).

  • Where a Consent Manager is available and registered with the Data Protection Board, you may also manage your consent through that platform.  


  1. HOW WE SHARE YOUR PERSONAL DATA 


We do not sell your personal data. We may share personal data with:


  • Data Processors acting on our instructions, such as logistics/courier partners, installation technicians, payment gateways, IT and cloud hosting providers, and customer support tools.

  • Authorized Imbody India retail and service partners, strictly for fulfilling your order, installation, or warranty service.

  • Group companies, including our manufacturing partner Shuzhiyinli (Xiamen) Sport Technology Co., Ltd, where necessary for product support, technical support, quality, or warranty purposes.

  • Government or regulatory authorities, where required by law, or to establish, exercise, or defend legal claims.

  • A successor entity in the event of a merger, acquisition, or sale of business assets, subject to equivalent privacy protections.


  1. CROSS BORDER DATA TRANSFER 


Your personal data may be stored or processed on servers located outside India, including in connection with our manufacturing partner in China, or cloud service providers used for hosting our website and systems. Where we transfer personal data outside India, we do so in accordance with the DPDP Act, which permits transfers to countries other than those specifically restricted by the Central Government, and we take reasonable steps to ensure such transfers are subject to appropriate safeguards. 


  1. DATA RETENTION 


  • We retain personal data only for as long as necessary to fulfil the purposes described in this Policy, including order fulfilment, warranty periods, statutory record-keeping, and dispute resolution.

  • Where you withdraw consent or request erasure, we will delete or anonymize your personal data unless retention is required to comply with a legal obligation (e.g., tax, accounting, or consumer protection recordkeeping).

  • If you have not interacted with us for a period specified under the DPDP Rules for the purpose for which data was collected, and retention is not otherwise required by law, we will erase such personal data along with any associated log-in information, subject to prior notice where required.


  1. COOKIES & TRACKING TECHNOLOGIES 


  • Essential cookies necessary for the website and connected app/console to function.

  • Analytics cookies used to understand website and product usage, to improve our services.

  • Marketing cookies, used only with your consent, to show you relevant offers.

  • You can control or disable non-essential cookies through your browser or device settings, and through any cookie consent banner on our website.


  1. DATA SECURITY 


We implement reasonable security safeguards, as required under the DPDP Act and DPDP Rules, to protect personal data against unauthorized access, disclosure, alteration, and destruction. These include access controls, encryption of data in transit where applicable, secure storage practices with our hosting/IT partners, and contractual safeguards with our Data Processors. In the event of a personal data breach, we will notify the Data Protection Board of India and affected Data Principals in the manner and within the timelines prescribed under the DPDP Rules.


  1. YOUR RIGHTS AS A DATA PRINCIPAL 


Subject to the DPDP Act and DPDP Rules, you have the right to:


  • Access a summary of the personal data we hold about you and the processing activities carried out.

  • Correct, complete, or update your personal data.

  • Request erasure of your personal data, where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.

  • Withdraw consent at any time, as described in Section 4.

  • Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity, in the manner prescribed under the DPDP Rules.

  • Register a grievance with us, and if unresolved, approach the Data Protection Board of India.


To exercise any of these rights, contact our Grievance Officer using the details in Section 12. We will respond within the timelines prescribed under the DPDP Rules.


  1. CHANGES TO THIS POLICY 


We may update this Privacy Policy from time to time to reflect changes in our practices, our products, or applicable law, including as further provisions of the DPDP Act and DPDP Rules come into force. The updated Policy will be posted on our website with a revised “Last Reviewed” date, and, where required, we will notify you of material changes.


  1. GRIEVANCE OFFICER & CONTACT US 


In accordance with the DPDP Act and applicable Indian law, you may contact our Grievance Officer for any questions, requests, or complaints regarding this Policy or our handling of your personal data:

  • Company: APEX GLOBAL

  • Phone / WhatsApp: +919111817111

  • Email: apexglobal@imbodyindia.com

  • Website: www.imbodindiay.com

  • Support Hours: [Monday–Saturday, 10:00 AM–6:00 PM IST]