Privacy Policy

1. Introduction & Scope

MSSQUAREE Fitness & Management ("we", "our", or "us"), headquartered in Thane (West), Maharashtra, India, is committed to safeguarding the privacy and integrity of personal information entrusted to us by society committee members, residents, gym members, clubhouse guests, and website visitors ("Data Principals").

This Privacy Policy describes how we collect, use, store, process, and protect your Personal Data across our websites (www.mssquaree.com), mobile platforms, society on-site management kiosks, and staff interfaces.

2. Categories of Information We Collect

We only collect information necessary to deliver quality facility and fitness management services:

• Contact & Identification Data: Full name, telephone/mobile number, email address, date of birth, residential society name, flat/unit number, and photo identification (for gym/clubhouse membership access).
• Society / Inquirer Profile: Society name, committee designation (Chairman, Secretary, Treasurer), estimated number of units/flats, amenities required, and location details.
• Fitness & Health Metrics (Voluntary): Body measurements, emergency contact, workout logs, and self-declared health notes (collected solely for customized fitness training and safety).
• Technical & Usage Data: IP address, device identifier, browser type, operating system, and anonymous interaction metrics via Google Analytics 4.

3. Legal Grounds & Purpose of Processing

In accordance with Section 4 and Section 6 of the DPDP Act 2023, data is processed on lawful grounds including explicit consent and performance of service contracts:

• To prepare customized society facility management and gym AMC proposals.
• To coordinate on-ground society operations (security supervision, gym attendants, trainers, housekeeping).
• To maintain verified member rosters and ensure authorized access to clubhouse and gym amenities.
• To transmit operational committee reports, AMC maintenance logs, and emergency notices.
• To comply with statutory tax, invoicing (GST), and regulatory requirements under Indian law.

4. Data Storage, Security & Retention

All personal data is processed using enterprise-grade encryption (TLS/SSL in transit, AES encryption at rest) and stored on secure server infrastructure adhering to ISO/IEC 27001 standards. We retain personal records only as long as necessary to fulfill contractual obligations or as required by applicable laws (e.g. accounting, taxation, and society registry audit requirements).

5. Non-Disclosure & Third-Party Transfers

We do not sell, rent, or trade your personal data. Information may only be shared with verified service vendors (e.g., automated email delivery, SMS gateways for OTPs, and cloud hosting partners) strictly bound by non-disclosure agreements and Indian data protection obligations.

6. Rights of Data Principals

Under the DPDP Act 2023 and GDPR guidelines, you possess the right to:

• Access & Summary: Request an itemized summary of personal data processed by us.
• Correction & Erasure: Request rectification of outdated information or deletion of records once your association with the managed facility ceases.
• Grievance Redressal: Register complaints regarding processing practices.
• Withdraw Consent: Revoke consent previously granted for optional communications at any time.

7. Grievance Redressal Officer

In compliance with Section 43A of the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, any privacy concern or grievance may be directed to our designated officer: