Who handles your request
FitnessByMaddy is operated by Mandeep Jakhar (Sole Proprietor), Haryana, India. Udyam MSME registration: UDYAM-HR-07-0038343. Maddy handles service and privacy enquiries. Contact support@fitnessbymaddy.com or +91 70824 78374.
What you choose to share
A start request asks for your name, email, country and time zone, service choice and whether the request concerns an adult or a child. A phone number and call preference are optional. On the children’s route, the parent or guardian provides their own contact details, the child’s age (8–18) and their participation declaration. Do not submit a child’s direct contact information.
You may also choose to answer seven context questions about goals, routine, sleep, food, relevant injuries or conditions, past attempts and obstacles. These answers can contain sensitive information. They are accepted only when encrypted storage is configured. You can make a basic enquiry without them and provide relevant context during a secure assessment later.
For a purchase, you provide your name, email, phone number and preferred contact method—email, WhatsApp or both—on Razorpay’s checkout page. Maddy uses the payment and contact details available there to check the purchase and arrange your service. The website’s after-payment page provides next-step guidance; it does not ask you to enter those details or your payment ID again. For a child’s service, use the parent or guardian’s contact details. Do not put private health information in checkout fields.
Why the information is used
Your details allow Maddy to review and respond to your enquiry, arrange the next step, and provide the requested service. For requests submitted through the website, the system also records the consent wording/version, time of consent and request/payment status. Optional learning emails and sales follow-ups require a separate choice. Choosing a contact method for paid-service coordination does not subscribe you to marketing. WhatsApp requires an explicit choice and an international phone number.
What is stored and protected
When a request is successfully saved, contact details, consent records and request status are stored in the site database. The seven private answers are encrypted before storage with a server-held key; authorised operator access is needed to read them. Ordinary enquiry lists omit those answers. Application protection is not a promise that any online system is risk-free.
If you previously submitted the website’s separate after-payment form, its contact details, payment reference, preferences and consent records may remain in the site database for service coordination and review. You do not need to submit them again. The current checkout flow does not automatically copy Razorpay’s customer or payment records into that database. You can ask support about access, correction or deletion of earlier records.
The enquiry form does not accept card numbers, medical files or exercise-video uploads. The exercise form-check service is arranged separately once coaching starts. The method for sharing videos, who can access them and how they are retained must be explained before you send them.
Providers and messages
The public website is hosted on Vercel. Its production enquiry storage is configured through Supabase; the form confirms when a request has been saved. Hosting and database providers process information needed to deliver and protect the service, including technical request logs. These providers may process data outside your country.
Resend processes website service emails, including enquiry acknowledgements and updates about requests already submitted. Updates concerning an earlier after-payment submission may include the service, supplied payment reference and submission reference. An acknowledgement of a request is not proof of payment. For new purchases, Maddy checks Razorpay and contacts you using the checkout details and preference. Optional learning updates and sales follow-ups are sent only if you choose them. Email delivery can be delayed or unsuccessful. Private intake answers are not included in automated messages.
Automated WhatsApp messaging is not connected. If you opt in, Maddy may contact you manually about your request. A WhatsApp link opens WhatsApp, a Meta service, only when you choose it; it does not send a message on your behalf or guarantee an automatic reply.
Payment links take you to a separate page hosted by Razorpay. Razorpay processes the payment details, contact information and service-contact preference you enter there. The kids payment pages also ask for parent details and the child’s name and age. These fields are submitted to Razorpay; use the parent’s contact details rather than the child’s. Payment and customer information made available to Maddy is used to verify the purchase, coordinate the service and handle payment enquiries. Read Razorpay’s privacy policy before using its payment page.
The site forms do not collect full card details. Returning from a payment page does not automatically verify a payment on this website. Maddy checks the transaction in Razorpay and coordinates the service using your checkout details. If you need payment support, you can contact Maddy by email or WhatsApp. Do not share your full card number, CVV or one-time password. We do not sell or rent your personal information.
Learning tools, preferences and analytics
The public calculators run in your browser. Calculator values and results are not sent to the enquiry database or analytics. Currency preference and analytics preference may be stored locally in your browser. The currency estimate service requests exchange rates without sending your form answers.
After an enquiry is saved, this browser tab may keep its reference, selected service, status and saved time for up to 24 hours. This helps you return to the receipt without sending the enquiry again. Contact details and private answers from the enquiry form are not saved in browser storage. Closing the tab or clearing its storage removes this local receipt; it does not delete the submitted enquiry from the database.
If you used an earlier version of the separate after-payment form, that browser tab may still contain a recovery record in session storage: the contact and payment-reference details you entered, your choices, a random access token and a saved status reference. The current after-payment page does not collect those details or create that recovery record. Closing the tab or clearing its session storage removes the local copy, but does not delete any record already submitted to the database. Contact support for help with an earlier request. Do not share your browser session.
Optional website measurement stays off unless you allow it and its storage is configured. It records aggregate counts by day for approved page, button, service and campaign categories. It does not create visitor profiles, use advertising cookies or store visitor identifiers in those counts. Learning pages are grouped without recording their health topic. Form answers, calculator values, names, contact details, full query strings and advertising click IDs are not sent.
After you allow measurement, a small set of approved campaign categories may be kept in this browser tab so the next page uses the same source. This record contains no visitor ID and is cleared when you turn measurement off or close the tab. Unknown campaign text is discarded; it is not stored as free text. Technical rate-limit controls use a keyed, time-scoped digest separately from the aggregate counts. Your browser’s Global Privacy Control or Do Not Track signal keeps optional measurement off. Use “Privacy choices” in the footer to change your choice. A checkout click or a visit to the after-payment page is never treated as a confirmed purchase by website measurement.
Choice, access and retention
Emails about optional updates include a preference link. The preference page asks for confirmation before changing your choice. You can also contact Maddy to withdraw permission for optional email or WhatsApp contact. Essential enquiry acknowledgements are separate from optional updates.
You can request access, correction, withdrawal of an optional consent or deletion through the support contact above. Maddy may need to verify that the request concerns your information. Records are used to handle your enquiry and support the service you choose; some records may need to be retained for accounting, legal obligations or an unresolved dispute. Ask about the records held for you and their retention when making a request. Clearing browser storage or unsubscribing does not automatically delete your enquiry or service records.
Children and parent involvement
Kids live coaching is a separate service for ages 8–18, beginning with a parent consultation. My Body Plan is for adults. The parent or guardian supplies their own contact information; the site does not create an independent child account or ask for a child’s direct email or phone number. At 18, the young adult must also agree to any sharing of their information and family involvement.
The form records the adult’s parent or guardian declaration; the form alone does not verify parental authority. Identity, authority, safeguarding and the arrangements for any live-session provider must be confirmed with the family before onboarding. Any session recording or public promotional use requires separate appropriate permission; a coaching enquiry or payment does not provide that permission. A selected session excerpt is published with guardian permission. There is no child dieting or behavioural advertising feature.
Changes to this notice
Updates to this notice are dated above, with renewed consent requested where needed. Read the service terms and payment and refund information before purchasing.