Privacy Policy

Gymify Pty Ltd ABN 88 692 493 931 (we, us or our) of Shepparton, Australia, 171 Corio street, Shepparton VIC 3630, is bound by the Privacy Act 1988 (Cth) (Privacy Act) and the Australian Privacy Principles (APPs). This policy explains how and why we collect, use, hold and disclose your personal information.

What is personal information?

Personal information is any information or an opinion about an identified individual or an individual who can be reasonably identified from the information or opinion. Information or an opinion may be personal information regardless of whether it is true.

What personal information do we collect and hold?

We collect information about you and your interactions with us, for example, when you sign up to use our fitness membership website or mobile application (Gymify), purchase or use any of our products or services, supply us with services, call us or otherwise visit our website. The information we collect from you may include your identity and contact details, your history of purchases and use of our products and services and details of enquiries or complaints you make.

Using Gymify: When you sign up to use Gymify we will collect your name, email address, phone number and date of birth. We may also obtain payment-related information, fitness centre access, location and visit data, device and usage data, customer support communications and marketing preferences.

We will never ask for government related identifiers, such as healthcare numbers, social security numbers, passport or driver’s license details.

Accessing Gymify and our website: We may use analytics and tracking technologies to collect information about how you access, use and interact with the Gymify and the website. This information is used to improve our services and marketing performance and may include:

the location from which you have come to Gymify or the site and the pages you have visited; and
technical data, which may include IP address, the types of devices you are using to access the website or Gymify, device attributes, browser type, language and operating system

We use cookies on the website. A cookie is a small text file that the website may place on your device to store information. We may use persistent cookies (which remain on your computer even after you close your browser) to store information that may speed up your use of our website for any of your future visits to the website. We may also use session cookies (which no longer remain after you end your browsing session) to help manage the display and presentation of information on the website. You may refuse to use cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of the website.

Why do we collect, hold and use your personal information?

We collect, hold and use your personal information so that we can:

provide you with products and services, and manage our relationship with you;
contact you, for example, to respond to your queries or complaints, or if we need to tell you something important; or
comply with our legal obligations and assist government and law enforcement agencies or regulators.

How do we collect your personal information?

We will collect your personal information directly from you whenever you interact with us.

We may collect information from third parties such as:

payment providers;
gym partners; and
mobile device providers.

If you do not provide us with your personal information, we may not be able to provide you with our services, communicate with you or respond to your enquiries.

How do we store and hold personal information?

We store most information about you in computer systems and databases operated by either us or our external service providers, such as Amazon Web Services who provide us with secure cloud based storage. Some information about you is recorded in paper files that we store securely.

We implement and maintain processes and security measures to protect personal information, which we hold from misuse, interference or loss, and from unauthorised access, modification or disclosure.

These processes and systems include the following:

Encryption of personal information when being stored and transferred and secure cloud-based infrastructure.
The use of identity and access management technologies to control access to systems on which information is processed and stored.
Requiring all employees to comply with internal information security policies and keep information secure.
Requiring all employees to complete training about information security.
Monitoring and regularly reviewing our practise against our own policies and against industry best practice.

Who do we disclose your personal information to, and why?

We may transfer or disclose your personal information to our related companies.

We may disclose personal information to external service providers so that they may perform services for us or on our behalf.

We may also disclose your personal information to others outside our group of companies where:

we are required or authorised by law to do so;
you may have expressly consented to the disclosure or the consent may be reasonably inferred from the circumstances; or
we are otherwise permitted to disclose the information under the Privacy Act.

If the ownership or control of all or part of our business changes, we may transfer your personal information to the new owner.

Do we disclose personal information to overseas recipients?

We may disclose your personal information to service providers that are located outside Australia. For example, whilst Amazon Web Services primarily hosts our data in Australia, it may at times host your personal information overseas. We take all reasonable steps to safeguard your personal information when transferred overseas in accordance with the APPs and in particular APP 8.

Do we use your personal information for marketing?

We will use your personal information to offer you products and services we believe may interest you, but we will not do so if you tell us not to. These products and services may be offered by us, our related companies, our other business partners or our service providers.

Where you receive electronic marketing communications from us, you may opt out of receiving further marketing communications by following the opt-out instructions provided in the communication.

Access to and correction of your personal information

You may access and correct personal information we hold about you through Gymify or request corrections by contacting us. Our contact details are set out below. There are some circumstances in which we are not required to give you access to your personal information.

There is no charge for requesting access to your personal information, but we may require you to meet our reasonable costs in providing you with access (such as photocopying costs or costs for time spent on collating large amounts of material).

We will respond to your requests to access or correct personal information in a reasonable time and will take all reasonable steps to ensure that the personal information we hold about you remains accurate, up to date, complete, relevant and not misleading.

Data retention and destruction

We only retain your personal information for as long as is necessary to fulfil the purposes for which it was collected. Our retention periods are determined by the original purpose of collection, our ongoing business needs, and our legal and statutory obligations.

We determine the retention period for personal information based on the following criteria:

Purpose of collection: Information is retained for the duration it is needed to provide you with our services, including managing your subscription and facilitating your access to participating fitness centres.
Legal and regulatory requirements: We are required to retain certain information to comply with Australian law. For example, we retain financial records related to your subscription for a minimum of seven (7) years to comply with taxation and corporate laws.
Business and administrative needs: We may retain information for as long as necessary for administrative purposes, to resolve disputes, or to enforce our agreements.

Once personal information is no longer required for any purpose for which it may be used or disclosed under the APPs, we will take reasonable steps to securely destroy it or permanently de-identify it. This includes the secure deletion of electronic data from our systems, archives, and backups.

Health and Other Information Provided to Fitness Centres

We do not collect, use, or store any health information or other sensitive personal data you may provide to a participating fitness centre (Gym) as a condition of entry or for induction purposes.

This information is provided by you directly to the fitness centre and is managed solely by them in accordance with their own privacy policy and their obligations under the Privacy Act and APPs. The retention and destruction of any such information are the exclusive responsibility of the relevant fitness centre. We encourage you to review the privacy policy of each fitness centre you access.

Data Breach Notification

As part of our commitment to protecting your personal information we have implemented a data breach response plan to manage any actual or suspected data breaches.

An "eligible data breach" occurs when there is unauthorised access to, or disclosure of, personal information, and a reasonable person would conclude that this is likely to result in serious harm to any of the individuals to whom the information relates.

In the event of an eligible data breach, we will notify the Office of the Australian Information Commissioner (OAIC) and affected individuals as soon as practicable. This notification will include a description of the data breach, the kinds of information involved, and our recommendations for the steps individuals should take in response to the breach.

Complaints

If you have a complaint about the way in which we have handled any privacy issue, including your request for access or correction of your personal information, you should contact us. Our contact details are set out below.

We will consider your complaint and determine whether it requires further investigation. We will notify you of the outcome of this investigation and any subsequent internal investigation.

If you remain unsatisfied with the way in which we have handled a privacy issue, you may approach an independent adviser or contact the OAIC (www.oaic.gov.au) for guidance on alternative courses of action that may be available.

Contact details

If you have any questions, comments, requests or concerns, please contact us at admin@gymify.com.au.

Changes to this policy

From time to time, we may change our policy on how we handle personal information or the types of personal information that we hold. Any changes to our policy will be published on our website.

You may obtain a copy of our current policy from our website or by contacting us at the contact details above.

Privacy Policy

This website uses cookies.