Aaroh

Privacy Policy

Last updated 10 October 2026. This policy explains how Aaroh handles personal data. We follow every law that applies to that processing, in India and outside India.

Who we are

Aaroh provides sports coaching, player and programme registration, and pay-and-play bookings at our venues. Aaroh is responsible for that personal data. Under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) we are the Data Fiduciary. Where a law outside India uses another name for that role, Aaroh holds it.

Questions about this policy, your data, or a grievance can go to support@aarohsports.com. That is the business contact of the person who can answer questions about our processing. If the Central Government notifies Aaroh as a Significant Data Fiduciary, we will appoint a Data Protection Officer and publish that contact here. If a law outside India requires a local representative or a similar contact, we will publish that contact here as well.

The laws that apply

We handle personal data in line with every law that applies to the processing, whether that law is in force in India or in another country. In India that includes the DPDP Act, the rules made under it, and other Indian laws that apply to coaching, payments, tax, consumers, and information technology. Outside India it includes the privacy and data-protection law of each country that applies to you or to the session.

If more than one law applies and the rules differ, we follow the rule that gives you stronger protection, unless a law that applies requires us to do otherwise.

What this policy covers

It covers personal data we process when you:

The enquiry form on this website sends your name, phone number, optional email, sport, and message to support@aarohsports.com so we can reply. FormSubmit transmits that email. We use it only to respond. Accounts, registrations, and payments are stored so we can provide coaching and pay-and-play.

Personal data and why we use it

We collect only what we need for the purpose you are told about. We do not use it for a fresh purpose unless we give you a new notice and, where applicable law requires it, take fresh consent.

Personal data Purpose
Name, email, phone number, role (player, parent or guardian, or coach), and a password stored in a protected form. If you sign in with Google, the name and email address Google shares with us. Create and secure your account, verify the email address, and let you sign in.
For a player or a child added by a parent: date of birth, gender, sport, skill level, academy, batch or programme, and a photo if you add one. For a player under 18: parent or guardian name and phone number. Register the player, place them in the right sport and batch, and contact the parent or guardian.
For a parent or guardian: relationship to the child, and the child’s name, date of birth, gender, and sports. Link the adult’s account to the child and let them see schedule, progress, and fees.
For a coach: sports coached, specialisation, years of experience, certifications, a short bio, and coaching or identity documents you upload. Onboard the coach and match them to academies and sessions.
Session date, venue, attendance, coach remarks, and assessment scores. Run coaching, record who attended, and show progress to the player and, for a child, the parent or guardian.
Pay-and-play booking: name, contact details, sport, venue, date and time slot, and the amount. Hold the booking, admit the player, and support them if the slot changes.
Payment record: amount in rupees, invoice or booking reference, sport or programme, status, method (UPI, card, net banking, wallet, cash, or bank transfer), and the transaction reference our payment partner or the academy returns. We do not store full card numbers, card CVV, or UPI PIN. Collect programme fees and pay-and-play charges, issue a receipt, and handle a failed or refunded payment.
Emergency contact and medical notes, only if you choose to give them. Help staff respond if a player is injured or unwell during coaching or pay-and-play.
Messages you send us, and the name, phone, optional email, sport, and note in a website enquiry. Reply to you.

Consent and other grounds

We use personal data only when a law that applies allows it. Depending on that law, the ground may be your consent, the need to carry out the registration, coaching, or pay-and-play booking you asked for, a legal duty, a medical emergency, or another ground that law provides. We do not rely on a ground the applicable law does not allow.

Where we rely on consent, it has to be free, specific, informed, unconditional, and unambiguous, given by a clear action such as creating an account, confirming a registration, or paying for a booking. Consent is limited to the purposes in this policy. We do not make coaching or a pay-and-play slot conditional on consent for an unrelated purpose, such as marketing.

You may withdraw consent at any time by emailing support@aarohsports.com from your registered email, or from account settings when that control is available. Withdrawal is as easy as giving consent. It does not undo processing already done lawfully. A batch place, registration, or booking that needs the data may then stop. We may keep a record the law requires us to keep, such as a paid invoice.

Children

We treat a player under 18 as a child. We process a child’s personal data for coaching, registration, or pay-and-play only with verifiable consent from a parent or lawful guardian, as Indian law requires. If another law sets a different age or a stricter consent rule for that child, we follow the stricter rule. We may ask the adult to confirm their identity and that they are the parent or lawful guardian before the child’s account or registration is activated.

The parent or lawful guardian may exercise the child’s rights, including access, correction, erasure, and withdrawal of consent. We do not track children, carry out behavioural monitoring of children, or direct targeted advertising at children. We do not process a child’s data in a way likely to harm the child’s well-being.

Uses that do not ask for consent

Where the law that applies allows it, we may use personal data without a fresh consent in these cases only:

Who we share it with

We do not sell personal data. We share it only as far as the purpose requires:

Those parties may use the data only for the purpose we share it for. On request, we will give you a summary of the personal data we have shared and the categories of parties who received it.

Where it is processed

We process personal data in India. A service provider may process it in another country only when every law that applies allows the transfer. Under Indian law we do not transfer personal data to a country the Central Government has restricted. If a law outside India requires a further safeguard, we put that safeguard in place before the transfer.

This website loads typefaces from Google Fonts. That request is handled by Google. The public website does not set its own cookies. The coaching service uses session information that is necessary to keep you signed in. We do not use it for advertising.

How long we keep it

We keep account, registration, attendance, and assessment records while the account, enrolment, or booking is active, and afterwards only as long as we need them for a fee dispute, a certificate, a safety question, or a legal claim. We then erase them or remove the link to you.

We keep payment and tax records for the period tax and accounting law requires, in India or in any other country whose law applies. If you withdraw consent, or another applicable law requires us to stop, we stop processing for that purpose and erase the data unless a law requires us to retain it.

Security and breaches

We use reasonable security safeguards to protect personal data, including limiting access to people who need it for coaching, registration, or payments, and protecting account passwords. No method of storage or transmission is perfect. If a personal data breach occurs, we will inform each authority and each affected person that an applicable law requires us to inform, in the manner and within the time that law sets. In India that includes the Data Protection Board of India.

Your rights

You may exercise these rights by emailing support@aarohsports.com. Use the email on your account, say which right you want to use, and include enough detail for us to find the registration or booking. We may confirm that you are the account holder or, for a child, the parent or lawful guardian, before we act.

Those rights are available under Indian law. If a law outside India applies to you, you also have every right that law gives. That can include a portable copy of your data, a limit on our use while a request is open, an objection to a use that is not based on your consent or on a contract, and a human review where a decision is made by automated means alone. We do not decide enrolment, batch placement, or a pay-and-play booking by automated means alone. Name the country whose law you are relying on when you write to us.

Grievances and regulators

If you have a grievance about our processing, email support@aarohsports.com with the subject “Privacy grievance”. We will respond within the time required by the law that applies to your request. In India that includes the period prescribed under the DPDP Act and the Rules made under it.

If you are not satisfied with that response, or you do not receive one in the required time, you may complain to the authority that law names. In India that is the Data Protection Board of India, and Indian law expects you to use this contact first. Outside India it is the privacy or data-protection authority of the country whose law applies to you.

Changes

If we change what we collect or why, we will update this page and change the date at the top. Where an applicable law requires a fresh notice or fresh consent, we will ask you before we rely on the new purpose.