Last Updated: 27/08/2026
Version: 1.0
1. Who we are
ThU. Personal Training Pty Ltd ACN 641 513 699 and U. Personal Training 2 Pty Ltd ACN 659 469 995 trade together as U. Personal Training (“U. Personal Training”, “we”, “us”, “our”). We operate two private personal training studios in Sydney’s Inner West and the website at www.upersonaltraining.com.au.
- Marrickville studio: 12 Chalder Street, Marrickville NSW 2204, operated by U. Personal Training Pty Ltd
- Lewisham studio: 147 New Canterbury Road, Lewisham NSW 2049, operated by U. Personal Training 2 Pty Ltd
Each studio is operated by a separate legal entity. The entity that collects your information is the entity that operates the studio you book with or train at. Both entities apply this policy.
U. Personal Training Pty Ltd and U. Personal Training 2 Pty Ltd use a shared client management system. If you train at either studio, both entities may access your records, including your health information, so that we can coach you safely across both sites. By giving us your health information you consent to that access. If you do not want your records shared, tell us and we will keep them to the studio you train at.
2. What this policy covers
This policy explains how we collect, hold, use, disclose and protect your personal information. It applies to:
- this website and every form on it
- our online booking system
- our studios, consultations and coaching sessions
- our emails, SMS, phone calls and social media accounts
Read this policy with our Cookie Policy and our Terms of Service.
3. The law we follow
We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
We deliver services relating to your physical health. These include movement screening, injury and pain assessment, exercise programming and pre and postnatal training. This makes us a health service provider under the Privacy Act. We comply with the Privacy Act and the APPs in full, whatever our annual turnover.
We also handle health information under the Health Records and Information Privacy Act 2002 (NSW) and the Health Privacy Principles.
Our marketing emails and SMS follow the Spam Act 2003 (Cth). Our phone contact follows the Do Not Call Register Act 2006 (Cth).
4. What personal information we collect
4.1 Information you give us
- Identity and contact details: name, email address, phone number, suburb or postcode, date of birth, emergency contact name and number
- Booking details: preferred studio, preferred coach, appointment times, how you heard about us, your goals and what you want to change
- Payment details: bank account or card details for direct debit, billing address, payment history
- Communications: the content of your enquiries, messages, emails and SMS with us and with your coach
- Consent records: written consent for testimonials, photography and video
4.1 Information you give us
Health information is sensitive information under the Privacy Act and gets a higher level of protection. At your free consultation and during your program, we may collect:
- injury history, surgeries, current pain and movement restrictions
- pre-exercise screening responses covering cardiovascular, respiratory and metabolic risk factors
- medications or medical conditions that affect safe exercise
- pregnancy and postpartum status, birth details and pelvic floor information where you train in our pre and postnatal program
- clearance or referral notes from your GP, physiotherapist or other health practitioner
- movement screen results, strength measures, body measurements and session performance data
We collect health information only with your consent and only where it is reasonably necessary to coach you safely. You can decline to give it. If you do, we may not be able to deliver a program safely and may decline to train you.
4.1 Information you give us
- IP address, approximate location, device type, operating system and browser
- pages you visit, time on page, referring website and search terms
- form interactions, clicks on booking and call buttons
- cookies, pixels and similar technologies, set out in our Cookie Policy
4.4 Information from other sources
- reviews and questions you post on our Google Business Profile
- messages, comments and interactions on our Instagram, Facebook and TikTok accounts
- aggregated advertising and audience reporting from Meta and Google
- your name and contact details from a person who refers you. When we first contact you we will tell you who gave us your details and why
4.5 Unsolicited information
If we receive personal information we did not ask for and could not have collected ourselves, we destroy or de-identify it as soon as practicable, unless the law requires us to keep it.
4.6 Dealing with us anonymously
You can browse this website without telling us who you are. You can ask us a general question by phone without giving your name. You cannot book a consultation, train with us or be billed anonymously.
5. Why we collect and use your information
We use your personal information to:
- respond to your enquiry and book your free consultation
- screen you for exercise risk and design a safe program
- deliver, adjust and review your coaching
- manage bookings, rescheduling and attendance
- bill you and manage your direct debit
- communicate with you about your training, your account and studio operations
- send you marketing where you have not opted out, subject to section 8
- respond to incidents, injuries, complaints and insurance matters
- measure and improve our website, advertising and service
- meet our legal, tax, insurance and record keeping obligations
We use your health information only to screen you, program for you, coach you safely and respond to an incident. We do not use health information for marketing.
We do not sell your personal information. We share it only as set out below.
| Who | What they receive | Why | Where held |
|---|---|---|---|
| Clubworx | Contact details, bookings, attendance, program notes, health screening notes | Booking and client management system | Australia |
| Ezidebit | Name, contact details, bank or card details, payment history | Fortnightly direct debit billing | Australia |
| Our coaches | Your contact details, goals, health screening and program | To coach you. Coaches are engaged under contracts that require confidentiality | Australia |
| [HOSTING PROVIDER, e.g. SiteGround] | Website form submissions, server logs, IP address | Website hosting | [Sydney, Australia] |
| Website usage data, advertising identifiers, cookie data | Analytics, Google Ads, Google Business Profile | Australia, United States and other countries | |
| Meta (Facebook, Instagram) | Website usage data, advertising identifiers, cookie data | Advertising and audience measurement | United States and other countries |
| [EMAIL AND SMS PLATFORM] | Name, email address, mobile number, engagement data | Sending emails and SMS | Australia |
| Our marketing agencies | Campaign performance data. Testimonials and images only where you gave written consent | Advertising and content production | Australia |
| Professional advisers and insurers | Only what is relevant to a claim, audit or dispute | Accounting, legal, insurance | Australia |
| Emergency services and your emergency contact | Information needed to respond to a medical emergency | To protect your life, health or safety | Australia |
We may also disclose personal information where the law requires or permits it, including to a court, tribunal
or regulator, or if we sell or restructure the business, in which case the buyer is bound by this policy.
7. Sending information overseas
Some of our providers store or process information outside Australia. Google and Meta process advertising and analytics data in the United States and other countries where they hold infrastructure.
Before we disclose personal information to an overseas recipient we take reasonable steps to ensure they handle it consistently with the Australian Privacy Principles, as APP 8 requires. Those steps include using established providers with published privacy commitments and contractual protections.
We do not send your health information overseas. Health information stays in our Australian systems.
8. Marketing and how to opt out
YIf you give us your details, we may send you information about our services, offers, events and content. We do this under APP 7 and the Spam Act 2003.
Every marketing email carries a working unsubscribe link. Every marketing SMS carries a reply-to-stop instruction. We action opt-outs within 5 business days.
You can also email admin@upersonaltraining.com.au at any time and ask us to stop.
Opting out of marketing does not stop service messages about your bookings, your account or your billing. Those are not marketing and continue while you are a client.
We do not use or disclose sensitive information, including health information, for direct marketing.
9. How we protect your information
We take reasonable steps to protect your information from misuse, interference, loss, unauthorised access, modification and disclosure. Those steps include:
- access controls, so coaches see only the client records they need
- password protection and multi-factor authentication on our core systems
- encrypted connections on our website and booking forms
- storing payment details with Ezidebit rather than on our own systems
- confidentiality obligations in every coach and contractor agreement
- secure storage and destruction of any paper records
No system is completely secure. We cannot guarantee the security of information you send us over the internet.
10. How long we keep it
- Health information: at least 7 years from your last service with us, as section 25 of the Health Records and Information Privacy Act 2002 (NSW) requires. Where we collected the information while you were under 18, until you turn 25.
- Financial and tax records: at least 7 years, as tax law requires.
- Enquiries that do not become clients: up to 24 months, then deleted or de-identified.
- Marketing lists: until you unsubscribe, plus a suppression record so we do not contact you again.
- Website analytics data: per the retention settings in Google Analytics, currently [14 MONTHS, CONFIRM SETTING].
When we no longer need information and no law requires us to keep it, we destroy or de-identify it.
11. Data breaches
We follow the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act. If we suspect a data breach, we assess it within 30 days. If we find a breach likely to cause you serious harm, we notify you and the Office of the Australian Information Commissioner as soon as practicable.
12. Accessing and correcting your information
You can ask for a copy of the personal information we hold about you, including your health records, and you can ask us to correct it.
Email admin@upersonaltraining.com.au or write to G01 147 New Canterbury Road, Lewisham, 2049 We may ask you to verify your identity.
We aim to respond within 30 days. Where your request covers health records held under the Health Records and Information Privacy Act 2002 (NSW), the law allows us up to 45 days and we will tell you if we need that time.
We do not charge you for making a request. If we charge for giving you access, the charge will not be excessive, will not exceed our actual cost, and we will tell you the amount before we do the work.
We can refuse access in the limited circumstances APP 12 allows, such as where access would seriously threaten someone’s life or health, or would unreasonably affect another person’s privacy. If we refuse, we will tell you why in writing and how to complain.
13. Automated decision making
We do not use automated decision-making technology to make decisions that significantly affect your rights or interests. A qualified coach makes every decision about your screening, your program and whether we can train you safely.
14. Children and young people
Our services are designed for adults. We do not collect personal information through this website from anyone we know to be under 15. If you are under 18, a parent or guardian must consent before you train with us and before we collect your health information.
15. Complaints
If you think we have breached the Australian Privacy Principles or the Health Privacy Principles, contact us first:
Privacy Officer
Email: admin@upersonaltraining.com.au
Phone: 0427 821 072
Post: [POSTAL ADDRESS]
We acknowledge complaints within 5 business days and aim to respond within 30 days.
If you are not satisfied with our response, you can complain to:
Office of the Australian Information Commissioner
Phone: 1300 363 992
Web: www.oaic.gov.au
For health records, NSW Information and Privacy Commission
Phone: 1800 472 679
Web: www.ipc.nsw.gov.au
16. Changes to this policy
We may update this policy. The current version always sits at www.upersonaltraining.com.au/privacy-policy with the date it took effect. Material changes will be notified by email to active clients.
17. Contact us
U. Personal Training
Email: admin@upersonaltraining.com.au
Phone: 0427 821 072
Marrickville: 12 Chalder Street, Marrickville NSW 2204
Lewisham: 147 New Canterbury Road, Lewisham NSW 2049