PRIVACY POLICY

Last Updated: 01/04/2025

JCMT PTY LTD, trading as Legends Gym, is committed to protecting your privacy and the confidentiality of your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

1. Collection of Personal Information

We collect personal information from website visitors and members for purposes directly related to our services and operations. The types of personal information we may collect include:

Identity and Contact Information: Name, email address, phone number, address, date of birth, gender.
Membership and Billing Information: Payment information (credit card details, bank account information) which is securely stored by our third-party provider, Gym Master, for billing purposes only. We do not directly store your full payment details on our systems.
Health and Fitness Information: Information collected through standard exercise questionnaires and more detailed information gathered by our personal trainers during assessments and program development. We will obtain your explicit consent before collecting sensitive health information.
Fitness Goals and Preferences: Information you provide regarding your fitness objectives and exercise preferences.
Website Usage Data: Information about your interactions with our website, including pages visited, time spent on the site, and other usage statistics.
Technical Information: Your IP address and device information.
Media: Photos or videos taken at the gym or during events, with your consent where appropriate.
Other Information: Any other information you voluntarily provide through forms, sign-ups, or interactions with us.

We collect this information through various means, including:

Online Forms: Membership sign-up forms, contact forms, and other online submissions.
Account Creation: When you create an account on our website or sign up for a membership.
Cookies and Tracking Technologies: As described in section 7 below.
Direct Interactions: In-person sign-ups at our facility, phone calls, and other direct communications.
Third-Party Integrations: Through our partnerships with Gym Master (membership management and billing), payment processors, marketing platforms, scheduling software providers, and analytics providers.
Surveys and Questionnaires: When you participate in surveys or provide feedback through questionnaires.

2. Use of Personal Information

We use your personal information for the following purposes:

To process your membership application and manage your account.
To process payments for membership fees and other services.
To communicate with you regarding your membership, updates, newsletters, and promotional offers (where you have consented to receive them).
To personalize your experience at Legends Gym and tailor our services to your needs and preferences.
To provide you with our fitness services and programs, including personal training.
To schedule appointments for classes, personal training sessions, and other services.
To improve our website, services, and overall member experience.
For marketing and advertising purposes, including sending you information about our services and promotions that may be of interest to you (where you have provided consent or as otherwise permitted by law).
For internal record-keeping and administrative purposes.
To comply with our legal and regulatory obligations.

3. Disclosure of Personal Information

We may disclose your personal information to the following third parties for the purposes outlined above:

Payment Processors: To facilitate payment processing for your membership and services.
Marketing Platforms: To assist us in delivering marketing communications and targeted advertising (where you have consented).
Scheduling Software Providers: To manage class bookings and appointments.
Analytics Providers: To analyze website usage and improve our online services.
Legal and Regulatory Authorities: If required by law or legal process.

We do not sell or rent your personal information to third parties.

4. Data Security

We take the security of your personal information seriously and have implemented reasonable measures to protect it from misuse, interference, loss, unauthorised access, modification, or disclosure. These measures include:

Encryption of data during transmission and when stored at rest.
Firewalls and other security technologies to protect our systems.
Access controls to limit who can access your personal information.
Regular security audits and assessments of our systems and processes.
Mandatory staff training on data privacy and security practices.

In the event of a data breach, we will promptly assess the situation, take steps to contain and remediate the breach, and notify affected individuals in accordance with our legal obligations.

5. Data Retention

We will retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including for the duration of your membership and for a reasonable period thereafter to:

Manage your account and provide ongoing services.
Comply with legal and regulatory requirements.
Resolve disputes and enforce our agreements.
Maintain business records for analysis and improvement of our services.

Data Retention Policy:

Membership Information: We will retain your membership information for the duration of your active membership and for a period of 7 years after your membership ends to comply with accounting and tax regulations, handle potential disputes, and for analysis of membership trends.
Billing Information: Payment details processed through Gym Master are retained according to their policies. We retain records of transactions for 7 years for accounting purposes.
Health and Fitness Information: We will retain health questionnaire data for 3 years after your last interaction with our personal training services, unless you request its earlier deletion (where legally permissible). Personal trainers may have their own retention policies for session notes, which will be communicated to you.
Website Usage Data: We typically retain website usage data for 13 months for analytics purposes.
Marketing Communication Preferences: We will retain your preferences regarding marketing communications indefinitely until you unsubscribe or withdraw your consent.

When your personal information is no longer needed, we will take reasonable steps to securely destroy it or de-identify it.

6. Your Rights and Choices

Under the Australian Privacy Principles, you have certain rights regarding your personal information, including the right to:

Access: Request access to the personal information we hold about you.
Correction: Request the correction of any inaccurate, incomplete, or outdated personal information we hold about you.
Deletion: Request the deletion of your personal information in certain circumstances (e.g., when it is no longer needed for the purpose for which it was collected, and we are not legally required to retain it).
Objection to Processing: Object to the processing of your personal information for certain purposes, such as direct marketing.

To exercise any of these rights, please contact us using the contact details provided in section 10 below. We may require you to verify your identity before processing your request.

You also have choices regarding how we use your data:

Marketing Communications: You can opt out of receiving marketing emails from us by clicking the "unsubscribe" link in our emails or by contacting us directly.
Cookie Preferences: You can manage your cookie preferences through the cookie consent banner on our website.

7. Cookies and Tracking Technologies

Our website uses cookies and other tracking technologies to enhance your browsing experience, analyze website traffic, and personalize content. These may include:

Essential Cookies: These cookies are necessary for the basic functionality of our website and enable you to navigate the site and use its features.
Analytics Cookies: These cookies collect information about how you use our website, such as which pages you visit and how long you spend on them. This helps us to understand and improve our website's performance.
Marketing/Advertising Cookies: These cookies are used to track your browsing activity across websites and deliver targeted advertisements that may be relevant to your interests.
Third-Party Cookies: These cookies are set by third-party service providers (e.g., analytics platforms, advertising networks) and may track your online activity across different websites.

You can manage your cookie preferences through the cookie consent banner that appears when you first visit our website. You can also adjust your browser settings to block or delete cookies, but this may affect your ability to fully access and use our website.

8. International Data Transfers

We do not currently transfer your personal information to countries outside of Australia. If this changes in the future, we will update this Privacy Policy and implement appropriate safeguards to ensure your personal information is protected in accordance with Australian privacy laws.

9. Children's Privacy

While our gym services may be used by individuals under the age of 18, JCMT PTY LTD trading as Legends Gym is committed to protecting their privacy. All staff who interact with children hold valid Working with Children Checks as required by law. We adhere to the principles of the Privacy Act when collecting and handling the personal information of children. For individuals under a certain age (e.g., 16), we may require parental or guardian consent for certain services or data collection activities.

10. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Legends Gym (operated by JCMT PTY LTD) 89 Anzac Pde, Kensington NSW 2033 Email: info@legendsgym.org Phone: 0483 936 774

11. Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will 1 notify you of any significant changes by sending an email to the email address you have provided to us and by posting a prominent notice on our website. The "Last Updated" date at the top of this policy indicates when the latest changes were made. 2 We encourage you to review this Privacy Policy periodically.