PRIVACY POLICY

1. Who we are

Team CBJC Pty Ltd (ACN 697 882 214, ABN 34 697 882 214) of 11c/24 Kokera Street, Wallsend NSW 2287, New South Wales, Australia.

We trade as The Pursuit Gym and as Team CBJC. This policy covers both business names and both websites, thepursuitgym.info and teamcbjc.info.

We respect your privacy. This policy explains what personal information we collect, why we collect it, who we share it with, and how you can access it, correct it or complain about how we've handled it.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

2. What we collect

2.1 Information you give us

Identity and contact details. Name, date of birth, email address, phone number, postal address, and emergency contact details.

Health information. Medical conditions, injuries, illnesses, pregnancy, medications, supplement use, disordered eating history, pre-exercise screening answers, medical clearances, body weight, body measurements, progress photographs, and training and nutrition history.

Payment information. Billing details and direct debit or card details. These are collected and held by our payment provider, not by us.

Membership and coaching records. Attendance, access records, session history, programs, check in responses, and your communications with our coaches.

Images and video. Photographs and footage taken at the gym, at events, or supplied by you, where you have consented.

2.2 Information we collect automatically

When you use our websites we may collect your IP address, device and browser type, pages visited, time spent on each page, the website that referred you, and how you interact with our forms and content.

2.3 Health information is sensitive information

Health information is sensitive information under the Privacy Act and receives stricter protection than other personal information.

We collect it only with your consent, and only where it is reasonably necessary to deliver training and coaching safely.

We do not use health information for marketing.

3. How we collect it

- Directly from you, in person, by phone, by email, or through forms on our websites

- Through our enquiry and booking forms

- Through our booking and enquiry calendar

- Through our customer platform, GoHighLevel

- Through cookies, pixels and analytics on our websites

- From a third party where you have authorised it, such as a referring health practitioner

Where it is reasonable and practicable to do so, we collect personal information directly from you.

4. Why we collect it

- We use your personal information to:

- Provide gym access, personal training and online coaching

- Assess whether you can train safely and design appropriate programs

- Manage your membership, bookings, check ins and payments

- Communicate with you about your training and your account

- Respond to your enquiries

- Send you marketing communications, where you have consented

- Improve our websites and services

- Maintain safety and security at our premises

- Meet our legal, insurance and record keeping obligations

- We will not use your personal information for an unrelated purpose unless you would reasonably expect us to, you have consented, or the law requires or permits it.

5. Who we share it with

6. Overseas disclosure

Several of the providers listed above store and process data outside Australia, principally in the United States. This includes Stripe, GoHighLevel, Typeform, Google, Meta and EmbedSocial.

Before disclosing personal information overseas we take reasonable steps to ensure the recipient handles it consistently with the Australian Privacy Principles.

7. Marketing communications

Where you have consented, we may send you marketing by email and SMS about our services, offers and events.

Every marketing message includes a way to opt out. You can do so at any time by using the unsubscribe link, replying STOP to an SMS, or emailing [email protected]. We will action your request promptly.

Opting out of marketing does not stop essential communications about your membership, coaching, bookings or payments.

We comply with the Spam Act 2003 (Cth), which requires consent, accurate sender identification, and a functional unsubscribe facility in every commercial electronic message.

We do not use your health information for marketing.

8. Cookies and tracking

Our websites use cookies and similar technologies:

- Essential cookies, which are required for the sites to function

- Analytics cookies (Google Analytics), which help us understand how the sites are used

- Advertising cookies and pixels (Meta Pixel), which let us measure and target advertising

You can control cookies through your browser settings. Blocking some cookies may affect how the sites work.

9. Keeping your information secure

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These include access controls, unique logins, multi-factor authentication, staff training, restricted access to health records and progress photographs, secure platforms, and device security.

No system is completely secure. If we become aware of a data breach that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner as required under the Notifiable Data Breaches scheme.

10. How long we keep it

We keep personal information only as long as we need it for the purposes described in this policy, or as required by law.

Health and training records are retained for 7 years after your membership or coaching ends, for insurance and legal reasons. Where you were under 18 at the time, we retain those records for 7 years from your eighteenth birthday.

After that period we securely destroy or de-identify the information.

11. Automated decision making

We do not use computer programs to make decisions that could significantly affect you.

If that changes, we will update this policy to describe the types of personal information used and the kinds of decisions made, in accordance with our obligations under the Privacy Act.

12. Accessing and correcting your information

You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading.

Contact us at [email protected]. We will respond within 30 days. We may need to verify your identity first.

We do not usually charge for access, but may charge a reasonable fee for the cost of retrieving and supplying extensive records. We will tell you before any fee applies.

In limited circumstances the Privacy Act permits us to refuse access. If we do, we will explain why in writing and tell you how to complain.

13. Withdrawing consent

You may withdraw your consent to our collection or use of your information at any time by contacting us.

If you withdraw consent to us handling your health information, we may no longer be able to provide training or coaching to you safely, and your membership or coaching may need to end.

You may withdraw consent to us using your photographs, video or testimonial at any time. We will stop using that content in future material, though we may not be able to recall material already printed, published or distributed by third parties.

14. Complaints

If you believe we have mishandled your personal information, please contact us first at [email protected]. We will acknowledge your complaint within 2 business days and aim to resolve it within 30 days.

If you are not satisfied with our response, you may complain to:

Office of the Australian Information Commissioner Website: oaic.gov.au Phone: 1300 363 992 Post: GPO Box 5288, Sydney NSW 2001

15. Changes to this policy

We may update this policy from time to time. The current version is always available at thepursuitgym.info/privacy-policy. We will notify you of significant changes.

16. Contact us

Team CBJC Pty Ltd ACN 697 882 214 · ABN 34 697 882 214 Trading as The Pursuit Gym and Team CBJC

11c/24 Kokera Street, Wallsend NSW 2287

Privacy enquiries: [email protected]