Privacy Policy

1. Information We Collect

We may collect the following types of personal information:

• Identity information: Name, date of birth, gender
• Contact information: Email address, phone number, postal address
• Membership information: Membership type, attendance history, class bookings, and account details held in our member management system (GymMaster)
• Health information: Health conditions, injuries, or fitness-related information you provide to enable safe participation in classes and training
• Payment information: Transaction records (payment card details are processed securely by our third-party payment processor and are not stored by us)
• Communications: Messages sent via our website contact form, chatbot, email, or SMS
• Website usage data: IP address, browser type, pages visited, and analytics data (see section 7)

2. How We Collect Information

We collect personal information through:

• Membership registration and sign-up forms
• Class bookings and attendance tracking via GymMaster
• Online contact and enquiry forms on our website
• Email newsletter sign-up (managed via MailerLite)
• Our website chatbot
• Phone, email, SMS, and in-person communications
• Automatically through website analytics (Microsoft Clarity)

3. How We Use Your Information

We use your personal information to:

• Manage your membership and class bookings
• Provide fitness classes, personal training, and massage services
• Communicate with you about your membership, bookings, and our services
• Process payments for memberships, services, and products
• Send you newsletters, promotions, and updates (with your consent — you may unsubscribe at any time)
• Improve our services, facilities, and website experience
• Look at how regularly you are training, so we can check in if your attendance drops off (see below)
• Comply with legal obligations

4. How We Store and Protect Your Information

We take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, or disclosure. Measures include:

• Secure electronic storage with encryption
• Password-protected systems and restricted access
• Regular review of security practices

5. Third-Party Services

We use the following third-party services to operate our business. Your information may be shared with these providers solely for the purposes described:

• GymMaster — member management, class bookings, attendance tracking
• MailerLite — email newsletter delivery and subscriber management
• Stripe — secure payment processing
• Microsoft Clarity — anonymous website usage analytics and heatmaps
• Twilio — text messages, phone calls to our business number, and voicemail
• Resend — delivery of emails we send you, such as sign-in codes, notifications and survey invitations
• OpenRouter — carries messages you send to our website chatbot to the AI service that writes the reply
• Google — maps showing our location, and videos we embed on our pages (YouTube). Where a page includes a map or a video, your browser loads it from Google directly, so Google receives your IP address and basic browser information even if you do not click on it
• Vimeo — videos we embed on our pages. Where a page includes a Vimeo video, your browser loads the player from Vimeo directly, so Vimeo receives your IP address and basic browser information even if you do not press play. We ask Vimeo not to track you and not to collect viewing statistics when it plays our videos. Vimeo tells us it still sets a small number of cookies it treats as essential to running and securing the player, and if you have visited Vimeo before, your browser may send it cookies it already stored

We will not sell, rent, or trade your personal information to any other third party.

6. Your Rights

Under Australian privacy law, you have the right to:

• Access your personal information held by us
• Request correction of inaccurate or incomplete information
• Withdraw consent for marketing communications at any time
• Lodge a complaint if you believe your privacy has been breached

To exercise any of these rights, please contact us using the details below.

7. Cookies and Website Analytics

Our website uses Microsoft Clarity for anonymous usage analytics and heatmaps. Pages that include an embedded Google map or video may also set cookies from Google. You can manage cookie preferences through your browser settings. These tools help us understand how visitors use our website so we can improve the experience.

8. Children and Young People

We run classes for children as well as adults, so we hold personal information about people under 18.

• A junior membership is set up by a parent or guardian, who signs off on the child joining. The contact details we hold are usually theirs, and we deal with the parent or guardian on matters relating to the membership.
• We collect the same kinds of information for a junior member as for an adult — name, date of birth, contact details, attendance and class bookings, and any health or injury information we need so they can take part safely.
• A parent or guardian may ask to see, correct, or have us delete the information we hold about their child, using the contact details in section 12.
• The member app has its own age rule — it is for members aged 13 and over. See section 9.

9. The Wonga Health & Fitness Member App

This section describes how the Wonga Health & Fitness member app handles your information. The rest of this policy applies to the app as well. The app is available to current members aged 13 and over, and you sign in with a one-time code.

What the app holds about you

• Your name, email address and mobile number — copied from your membership record in GymMaster when you sign in, and refreshed each time you sign in. The app does not ask you to type these in, and you cannot change them in the app: your membership record remains the source of truth.
• Your sign-in codes — we store a scrambled (hashed) form of the code, never the code itself, together with the email address or mobile number it was sent to. These are deleted automatically within 24 hours of the code expiring.
• A notification registration for each device you sign in on — an identifier issued by Google or Apple that lets us send notifications to that device. It contains no contact details.

What the app shows you but does not store

Your upcoming classes and recent attendance are read from GymMaster each time you open the app — the app displays them, it does not keep its own copy. Training content (the exercise and technique library, gradings and standards) is the same for every member and is not personal information.

What the app does not do

• It contains no advertising, no advertising identifiers, and no analytics, tracking or crash-reporting tools.
• It does not access your location, camera, microphone, contacts, photos, or any health or fitness data held by your phone (such as Apple Health or Google Health Connect).
• It does not handle payments. Memberships and payments are handled by Wonga Health & Fitness through GymMaster, and online store purchases are handled on our store website.
• It does not ask you to enter any information beyond signing in.
• We do not sell, rent or trade your information, and we do not share it for anyone else’s marketing.

Notifications

The app asks your permission before sending notifications, and you can turn them off at any time in your phone’s settings. Deleting your app account removes your devices’ notification registrations, so the app stops sending them.

Who your app information is shared with

Apart from the services already listed in section 5, app information is shared only as follows:

• Google (Firebase Cloud Messaging) on Android and Apple (Apple Push Notification service) on iPhone — they receive your device’s notification registration and the content of a notification in order to deliver it to your phone. Both process this information outside Australia, primarily in the United States.

Where we disclose personal information to a recipient overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles.

Links that leave the app

Booking a class and visiting our online store open in your phone’s browser rather than inside the app. Those sites handle your information under their own terms, and section 5 applies.

Children and young people

The app is intended for members aged 13 and over. If you are under 13, please do not create an app account — speak to our team and we will help you another way.

If you are under 18 and want to use the app, we ask that a parent or guardian knows about it and agrees. If you are a parent or guardian and you would like a young person’s app account removed, contact us using the details in section 12 and we will do it. Section 8 covers how we handle young people’s information more generally.

How long app information is kept

• Your app profile — for as long as you have an app account, and removed when you delete it (see section 10).
• Sign-in codes — deleted automatically within 24 hours of expiring.
• Notification registrations — until you sign out, delete your app account, or the registration stops working.

10. Deleting Your Member App Account

If you use the Wonga Health & Fitnessmember app, you can delete your app account and its associated data at any time — from inside the app, or by emailing us if you have already uninstalled it. See App Account Deletion for what is removed, what we keep, and why.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with the updated date. We encourage you to review this page periodically.

12. Contact Us

If you have any questions about this Privacy Policy, wish to access or correct your information, or wish to make a complaint, please contact us:

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).