Privacy Policy
Last updated: 10 November 2026
This notice explains what personal data BoulderBox collects, why, who we share it with, and the rights you have under India's Digital Personal Data Protection Act, 2023.
Who we are
BoulderBox is run by Chattan Climbing Sports Solutions LLP, Vasant Kunj, New Delhi 110070 ("BoulderBox", "we", "us"). We decide how your personal data is used. Contact us at info@boulderbox.in or +91 96501 05578.
What this notice covers
Our website www.boulderbox.in, visits to the centre, registration and waivers, bookings, passes and memberships, classes, events, birthday parties, corporate sessions and the café.
What we collect
- Details you give us: your name, phone number, email address, postal address, date of birth, gender, emergency contact, the details of a parent or guardian for a child, how you heard about us, and anything you write in a form, email or WhatsApp message.
- Registration and waiver: the details on your registration form and waiver, including your typed signature, the boxes you ticked, the date and time you signed, and the internet address (IP address) and browser of the device you signed on. We keep these as proof of the agreement. If you give an email address, we send you a copy of the signed form.
- Identity document: the registration form asks for the type and number of an identity document (for example Aadhaar, passport or driving licence). We record the type and number you give. Our staff can also ask to see the document to check age or identity. We do not scan or photocopy the document.
- Health information: we do not ask for medical records. The registration form has a box where you can tell us about a medical condition, injury or allergy that matters for climbing, and we record what you write there. If there is an accident at the centre, we write an accident report. The report can include details of the injury and health information that is relevant to it.
- Payments: what you bought and when. Card and UPI details go straight to our payment provider. We do not see or store them.
- Photos and video: we sometimes take photos at the centre and at events.
- CCTV: some areas of the centre are under CCTV, 24 hours a day, for the safety and security of visitors and staff.
- Website use: cookies and tracking tools record the pages you visit, your clicks, your device and browser, and your approximate location.
Why we use it
- To register you, run your bookings, passes and memberships, and give you entry.
- To keep everyone safe, and to meet our insurance and legal duties.
- To answer your enquiries and send you messages about your bookings.
- To send you news and offers, but only if you agreed (for example by ticking "Subscribe"). You can stop these at any time.
- To understand how people use our website so that we can improve it, and to measure and show our ads.
- To keep accounts and tax records as the law requires.
We use your data only for these purposes. Where we rely on your consent, you can withdraw it at any time. This does not affect anything we did before you withdrew it.
Children
Under the Act, anyone under 18 is a child. We collect a child's personal data only with the consent of their parent or legal guardian, given on the registration form and waiver. We do not track children for advertising or profile their behaviour.
Who we share it with
We do not sell your personal data. We share it only with service providers who help us run BoulderBox, and only as much as they need:
- Registration and waivers: GymPro India, our gym management system (waiver.boulderbox.in).
- Payments: Razorpay.
- Website analytics, advertising and forms: Google (Analytics, Tag Manager, Ads and Forms), Meta (Facebook Pixel), Microsoft Clarity and Apollo.io.
- Messages: WhatsApp and our email provider, when you contact us that way.
- Website hosting.
We also share data with authorities when the law requires it. Some of these providers store data outside India, which the Act allows unless the Government restricts a country.
How long we keep it
We keep personal data only as long as we need it for the purposes above, or as long as the law requires. After that we delete it.
- Registration forms, waivers and accident reports: 3 years after your last visit. For a child, until the child is 21.
- CCTV recordings: 30 days. We keep a recording longer only if it shows an incident.
- Accounts and tax records: 8 years, as the law requires.
Your rights
- Ask for a summary of the personal data we hold about you and how we use it.
- Ask us to correct, complete or update it.
- Ask us to delete it, unless the law requires us to keep it.
- Withdraw your consent.
- Nominate someone to use these rights for you if you die or cannot act.
- Complain to us, and if we do not resolve your complaint, to the Data Protection Board of India.
To use any of these rights, email info@boulderbox.in. We may need to check your identity before we act.
Photos
If you do not want to appear in our photos or videos, tell a member of staff. If you appear in something we have posted and want it removed, email us and we will take it down.
Cookies
Our website uses cookies and similar tools from Google (Analytics and Ads), Meta (Facebook Pixel), Microsoft Clarity and Apollo.io. They help us measure visits, understand how the site is used and show our ads to people who have visited. Clarity may record how you move and click on the page. These tools only run after you click "Accept" on our cookie banner. You can change your choice at any time with "Cookie settings" at the bottom of every page, or block and delete cookies in your browser settings. The site still works without them.
Security
We take reasonable steps to protect your personal data. If a breach affects you, we will tell you and the Data Protection Board as the law requires.
Changes to this notice
We will update this notice when our practices change, and change the date at the top.
Questions and complaints
Contact Yaduraj Bhageria, Co-founder, at info@boulderbox.in with "Privacy" in the subject line, or call +91 96501 05578. Our Terms and Conditions are a separate page.