Privacy policy

Last updated: 2026-04-26

CtrlFit ("we", "us", "our") operates ctrl-fit.com (the "Service"). This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and your rights under India's Digital Personal Data Protection Act, 2023 ("DPDP Act").

We're a sole proprietorship registered in India, operating from Greater Noida, Uttar Pradesh 201301.

What information we collect

When you place an order or interact with our site, we collect:

Identity & contact: name, email address, phone number, billing address, shipping address.
Order data: items purchased, sizes, quantities, payment status.
Payment data: processed entirely by Razorpay — we never see or store your card numbers, UPI IDs, or netbanking credentials. Razorpay returns only a transaction ID and status.
Technical data: browser type, IP address, pages visited, time spent. Collected via cookies.
Communications: messages you send us by email or WhatsApp.

Why we collect it

Purpose	Data used
Process and fulfil your order	Name, address, phone, email, items
Accept payment	Routed to Razorpay (we receive only success/failure + amount)
Ship your order	Routed to Shiprocket (name, phone, full address, items)
Send order updates	Email, phone, order ID
Customer support	Whatever you share when contacting us
Improve the site	Anonymous browsing analytics

Who we share data with

We share data only as necessary to fulfil your order:

Razorpay Software Private Limited — payment processing. Their privacy policy: razorpay.com/privacy.
Shiprocket / Kartrocket Pvt Ltd — shipping aggregator. Shiprocket forwards the shipment to one of its courier partners based on your pin code: Delhivery, Bluedart, DTDC, Xpressbees, India Post. Their privacy policy: shiprocket.in/privacy-policy.
Shopify Inc. — our ecommerce platform. They handle hosting, cart, and checkout infrastructure. Their privacy policy: shopify.com/legal/privacy.
Email service (Zoho Mail) — for transactional emails and replies to your support queries.

We do not sell your personal information to third parties. We don't share it with advertisers or marketing networks.

Cookies

We use essential cookies for cart functionality and login state, and basic analytics cookies (Shopify's built-in). You can disable cookies in your browser, but cart and checkout will not work without them.

Data retention

Order data is kept for 7 years to comply with Indian tax and accounting law.
Marketing email subscriptions are kept until you unsubscribe.
Support tickets are kept for 2 years.

Your rights under the DPDP Act 2023

As a Data Principal, you have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Erase your data, subject to legal retention requirements (e.g., past orders for tax purposes).
Withdraw consent for marketing emails at any time (one-click unsubscribe in every email).
Nominate another person to exercise these rights on your behalf in case of incapacity.
File a grievance with the Data Protection Board if your concerns aren't resolved by us.

Grievance Officer

For data-related concerns, contact:

Rohit Sharma (Owner, CtrlFit)
Email: hello@ctrl-fit.com
Phone: +91 87556 29753

We respond to grievances within 15 days as required by the DPDP Act.

Children's privacy

Our service is not directed at users under 18. We do not knowingly collect personal data from minors. If we learn we've collected data from a minor, we'll delete it.

Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change. Material changes will be communicated via email if you have an active account.