Privacy Policy
At Frandovik, we are committed to protecting your privacy and ensuring the security of your personal information.
Table of Contents
1. Overview
Frandovik Power Pilates ("we," "our," or "us") operates a Pilates studio located at 3 Stonequarry Way, Carnes Hill NSW 2171, Australia. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.
We are committed to complying with the Australian Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs), and the General Data Protection Regulation (GDPR) where applicable.
Our Commitment
We believe privacy is a fundamental right. We collect only the information necessary to provide our services and never sell your personal data to third parties.
2. Information We Collect
We collect several types of information to provide and improve our services:
Personal Information You Provide
Contact Information
Name, email address, phone number, mailing address
Fitness Information
Fitness goals, experience level, physical limitations, preferences
Billing Information
Payment details, billing address, membership information
Booking Information
Class bookings, attendance records, scheduling preferences
Information Automatically Collected
- Website Usage Data: IP address, browser type, pages visited, time spent on pages
- Device Information: Device type, operating system, unique device identifiers
- Location Data: General location information for service delivery
- Communication Records: Records of communications with our staff
3. How We Use Your Information
We use your information for the following purposes:
Service Delivery
- Providing Pilates classes and related services
- Managing your membership and bookings
- Processing payments and managing billing
- Communicating about classes, schedules, and studio updates
Service Improvement
- Analyzing usage patterns to improve our services
- Developing new programs and offerings
- Ensuring website functionality and security
- Conducting customer satisfaction surveys
Legal and Safety
- Ensuring safety during physical activities
- Complying with legal obligations
- Protecting our rights and property
- Responding to legal requests
Legal Basis for Processing
We process your personal information based on:
- Contractual necessity for service delivery
- Legitimate interests in improving our services
- Legal compliance requirements
- Your explicit consent where required
4. Information Sharing
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
Service Providers
We may share information with trusted third-party service providers who assist us in:
- Payment processing
- Website hosting and maintenance
- Email communication services
- Booking and scheduling systems
- Accounting and legal services
Legal Requirements
We may disclose information when required by law or to:
- Comply with legal processes or government requests
- Protect the rights, property, or safety of our business, staff, or clients
- Investigate potential violations of our terms of service
- Respond to emergency situations
Third-Party Security
All third-party service providers are contractually required to maintain appropriate security measures and use your information only for the specified purposes.
5. Data Security
We implement comprehensive security measures to protect your personal information:
Technical Safeguards
- SSL encryption for data transmission
- Secure servers with regular security updates
- Firewall protection and intrusion detection
- Regular security audits and monitoring
- Access controls and authentication systems
Administrative Safeguards
- Staff training on privacy and security practices
- Limited access to personal information on a need-to-know basis
- Regular review of security policies and procedures
- Incident response procedures
Physical Safeguards
- Secure storage of physical records
- Controlled access to facilities
- Secure disposal of sensitive documents
Data Breach Response
In the unlikely event of a data breach, we will notify affected individuals and relevant authorities as required by law, typically within 72 hours of becoming aware of the breach.
6. Your Rights
Under Australian privacy law and GDPR (where applicable), you have the following rights regarding your personal information:
Right to Access
Request copies of your personal information we hold
Right to Rectification
Request correction of inaccurate or incomplete information
Right to Erasure
Request deletion of your personal information in certain circumstances
Right to Restrict Processing
Limit how we use your information in specific situations
Right to Data Portability
Receive your information in a portable format
Right to Object
Object to certain uses of your information
To exercise any of these rights, please contact us using the information provided in Section 12. We will respond to your request within 30 days.
7. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to enhance your browsing experience:
Types of Cookies We Use
- Essential Cookies: Necessary for website functionality
- Performance Cookies: Help us understand how visitors use our website
- Functionality Cookies: Remember your preferences and settings
- Marketing Cookies: Used to deliver relevant content and track campaign effectiveness
Managing Cookies
You can control cookies through your browser settings. Note that disabling certain cookies may affect website functionality.
Cookie Preferences
For detailed information about our cookie usage and to manage your preferences, please see our Cookies Policy.
8. Data Retention
We retain your personal information only as long as necessary for the purposes outlined in this policy:
- Active Members: Information retained during membership and for 7 years after termination for legal and tax purposes
- Website Users: Non-essential data deleted after 3 years of inactivity
- Marketing Information: Retained until you opt out or for 2 years after last engagement
- Legal Records: Retained as required by applicable laws
When information is no longer needed, we securely delete or anonymize it according to our data destruction procedures.
9. International Data Transfers
Some of our service providers may be located outside Australia. When we transfer your information internationally, we ensure appropriate safeguards are in place:
- Adequacy decisions by relevant authorities
- Standard contractual clauses
- Certification schemes
- Codes of conduct
We only work with providers who demonstrate adequate data protection standards.
10. Information About Minors
Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16 without parental consent.
For participants under 18, we require:
- Parental or guardian consent
- Emergency contact information
- Any relevant information for safe participation
Parental Rights
Parents and guardians have the right to review, modify, or delete their child's information. Contact us if you believe we have collected information from a minor without proper consent.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make changes:
- We will post the updated policy on our website
- We will update the "Last Updated" date
- For significant changes, we will notify you by email or prominent website notice
- Your continued use of our services constitutes acceptance of the updated policy
We encourage you to review this policy periodically to stay informed about how we protect your information.
12. Contact Information
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
Privacy Officer - Frandovik Power Pilates
Address: 3 Stonequarry Way, Carnes Hill NSW 2171, Australia
Phone: +61450242612
Email: [email protected]
Business Hours: Monday-Friday 6:00 AM - 9:00 PM, Saturday-Sunday 8:00 AM - 6:00 PM
Contact Us OnlineRegulatory Information
If you are not satisfied with our response to your privacy concern, you may lodge a complaint with:
- Australia: Office of the Australian Information Commissioner (OAIC) - www.oaic.gov.au
- EU/UK: Your local data protection authority