Policies

• Identity and contact information, date of birth, photograph and emergency contact.
• Membership, attendance, access-control, booking, purchase, communication and complaint records.
• Payment status and transaction information; full bank or card details may be held by the authorised payment provider rather than us.
• Health screening, injury, accessibility and medical information voluntarily supplied or reasonably required for safety.
• CCTV, incident reports and security/access logs.
• Device, browser, IP address, cookie, analytics and advertising information.
• Employment or contractor information where a person applies to work with us.

We collect information directly from you, your parent or representative, online forms, apps, access systems, CCTV, staff interactions and transactions. We may also receive information from payment processors, Fitness Passport, ClassPass, booking providers, insurers, emergency services, another Ozzy Fitness club you visit, or a lawful third party.

• Provide and administer memberships and services.
• Process payments and manage accounts.
• Verify identity, control access and maintain safety and security.
• Assess reasonable health, accessibility or emergency needs.
• Communicate service notices, bookings, complaints and member support.
• Improve facilities, services, Website performance and customer experience.
• Send marketing where permitted and honour opt-out requests.
• Meet legal, insurance, accounting and regulatory obligations; establish or defend legal claims.

We seek consent to collect health or other sensitive information unless collection is otherwise authorised or required by law. We limit access to people who need it for safety, service delivery, legal or administrative functions. Do not send more medical information than reasonably necessary.

We may disclose relevant information to other participating Ozzy Fitness entities, central administration, payment and IT providers, booking platforms, Fitness Passport or ClassPass, professional advisers, insurers, emergency services, law-enforcement bodies, regulators, debt recovery providers and prospective purchasers of a club or business, where authorised and subject to appropriate safeguards. We do not sell personal information as a standalone product.

Some cloud, communications, analytics or service providers may process information outside Australia. Contact us for the current list. We take reasonable steps required by applicable privacy law when using overseas providers.

We may send offers and updates where permitted by law. You can unsubscribe using the message link or contact us. Service, safety and account communications are not marketing and may continue while relevant.

CCTV and access logs are used for member and staff safety, incident response, loss prevention, investigating breaches and supporting lawful claims. CCTV is not placed in toilets, showers or change rooms. Footage is accessed only for authorised purposes and retained for the period reasonably required, subject to incidents, insurance and legal holds.

We use reasonable technical, physical and organisational safeguards. No system is completely secure. We retain information only as long as reasonably needed for the purposes above and applicable legal, tax, insurance, limitation and recordkeeping requirements, then securely delete or de-identify it where practicable.

You may request access to or correction of personal information by contacting the Privacy Officer. We will verify identity and respond within a reasonable period. If we refuse a request, we will explain the lawful reason where required. Privacy complaints will be acknowledged and investigated. If unresolved, you may contact the Office of the Australian Information Commissioner or the relevant state privacy or health-complaints body.

We assess suspected data breaches and, where required, notify affected individuals and the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme.

For a member under 18, we may collect information from the member and parent or guardian and communicate with either as reasonably necessary to manage the membership, safety and payments. We consider the young person's capacity and privacy interests.

The Cookie Policy provides more detail about online tracking. We may update this policy prospectively and will publish the current version and effective date.