We value your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). It covers personal and sensitive health information gathered through our website, mobile app, in-person interactions (such as pre-exercise questionnaires), and on-site CCTV surveillance.
1. Information We Collect
We only collect personal information that is reasonably necessary for our business operations and services:
- Personal identification and contact details — name, address, date of birth, phone number, email, and emergency contact information, used to identify you, create your membership, and contact you about classes, schedule changes or billing.
- Health and fitness information (sensitive information) — health, medical conditions, injury history, exercise experience and goals, collected with your consent through pre-exercise questionnaires or consultations and used to design safe, effective programs.
- Gym usage and progress data — attendance, class bookings, training progress and fitness assessments.
- Payment and billing information — processed securely through our third-party billing provider (e.g. a direct debit service such as Ezidebit).
- Online activity information — IP address, browser type, device ID and usage data from our website and app, used to improve functionality and user experience.
- CCTV footage — our premises are monitored by CCTV for safety and security. Cameras are not used in private areas such as bathrooms or change rooms.
2. How We Collect Your Information
We collect personal information by fair and lawful means and where possible directly from you: when you provide it to us directly (forms, sign-up, questionnaires, enquiries by phone, email or social media), through our mobile app and fitness software (class bookings, workout tracking), through in-person observations and training sessions, via CCTV surveillance in workout areas and entrances (signs are posted), and from third parties or integrated services (such as partnered wellness programs or membership management platforms). We only collect sensitive health information with your consent.
3. How We Use and Disclose Your Information
We use your personal information only for purposes related to running our gym and providing you services, or as required by law. We do not sell your personal information. Main uses include: providing and managing services (membership, bookings, check-ins), tailoring training and nutrition plans, communication (booking confirmations, schedule changes, billing reminders, and marketing you have consented to — opt out any time via unsubscribe), payments and billing, improving our services (analytics), and safety and legal compliance.
4. Disclosure to Third Parties
We do not disclose your personal information to third parties except as needed to run our business or as required by law, and we only share the minimum necessary information. Third parties may include: billing and payment processors (such as Ezidebit), IT and cloud service providers (membership management, class booking, workout tracking — data may be hosted in Australia or overseas with Australian-standard protections), email/SMS and marketing platforms (such as MailChimp), analytics and advertising partners (such as Google Analytics and Facebook Ads — aggregated or pseudonymised data only), professional advisors and insurers, personal trainers and coaches working with you (bound to confidentiality), law enforcement where legally required, and a new owner in the unlikely event of a business sale or merger (with continued privacy protections).
5. Data Storage and Protection
We protect your information with secure facilities and records (locked storage for paper records), restricted access limited to staff who need it, technical measures including firewalls, anti-malware, encryption (SSL/TLS) and secure password management, and careful selection of cloud providers. We retain personal information only as long as necessary for our services and legal obligations, then securely destroy or de-identify it. CCTV recordings are kept for a limited period and then overwritten unless required for an investigation. If a data breach likely to cause serious harm occurs, we will notify affected individuals and the OAIC as required by law.
6. Accessing and Correcting Your Information
You have the right to access the personal information we hold about you and to request corrections if it is inaccurate, out-of-date or incomplete. Contact us (details below) — we may ask you to verify your identity. We respond within a reasonable time frame (generally within 30 days) and do not usually charge a fee. If we cannot fulfil a request, we will explain why in writing.
7. Privacy Complaints
If you believe your personal information has been mishandled, contact us with the details. We will acknowledge your complaint, investigate, and respond — generally within 30 days. If you are not satisfied with our response, you can escalate to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
8. Contact Us
Email: hello@kapundastrengthstudio.com.au
Post: Kapunda Strength Studio — 21B Main St, Kapunda SA 5373
By providing your personal information to us or using our services, you acknowledge that you have read and understood this Privacy Policy. We may update this policy from time to time; the latest version will always be available on our website.