PRIVACY POLICY

PRIVACY POLICY

RISE MUAY THAI FITNESS

Last updated: August 2026


RISE Muay Thai Fitness (“RISE”, “we”, “us” or “our”) respects your privacy and is committed to protecting the personal and health information we collect and hold.


This Privacy Policy explains how we collect, use, disclose, store and manage personal information in connection with our gym, memberships, classes, personal training, programs, website and related services.


We manage personal information in accordance with applicable Australian privacy laws, including, where applicable, the Privacy Act 1988 (Cth) and Australian Privacy Principles, and the Health Records and Information Privacy Act 2002 (NSW) and Health Privacy Principles.


1. Information we collect

We may collect personal information that is reasonably necessary for us to operate RISE and provide our services, including:

  • your name, date of birth and contact details;

  • emergency contact information;

  • account and membership information;

  • class bookings, attendance and training history;

  • payment and transaction information;

  • enquiries, correspondence and communications with us;

  • information provided through our website, Glofox, Google Forms, surveys, challenges,

promotions or other online forms;

  • photographs, video, testimonials or other content where you have consented to its 

collection or use;

  • feedback and reviews you provide to us; and

  • other information reasonably required to administer your relationship with RISE.


Health and sensitive information

Because RISE provides physical training services, we may also collect health or sensitive information where it is reasonably necessary for your safety and participation.


This may include information about:

  • injuries or previous injuries;

  • medical conditions;

  • pregnancy;

  • physical limitations or restrictions;

  • medications where relevant to your participation;

  • information provided on health or pre-exercise screening forms; and

  • other circumstances that may affect your ability to safely participate in training.


We will only collect health or sensitive information where it is reasonably necessary for our activities and where you provide the information to us, consent to its collection, or collection is otherwise permitted or required by law.


2. How we collect information

We generally collect personal information directly from you when you:

  • create a RISE profile or account through Glofox, our membership and booking platform;

  • purchase a membership, class pack, personal training session or other service;

  • book or attend a class or training session;

  • complete a registration, waiver, health questionnaire, Google Form, survey or other form;

  • provide information through our website;

  • contact us by phone, email, SMS, messaging service, social media or in person;

  • participate in a RISE program, challenge, event or promotion; or

  • otherwise voluntarily provide information to us.


Where we use Google Forms or another online form, the reason for collecting the information will generally be explained at the time it is requested.


By submitting information through such a form, you consent to RISE collecting and using that information for the stated purpose and in accordance with this Privacy Policy.


In limited circumstances, information may also be provided to us by a parent, guardian, emergency contact, health professional or another person with your authority.


3. Why we collect and use your information

We collect and use personal information to operate RISE and provide our services, including to:

  • establish and administer your RISE account;

  • manage memberships, class packs and personal training;

  • manage class bookings, attendance and credits;

  • process and administer payments;

  • deliver classes, training programs and related services;

  • understand health, injury or physical considerations relevant to your safe participation;

  • modify exercises or training where reasonably appropriate;

  • communicate with you about your membership, bookings, training or RISE activities;

  • provide customer service and respond to enquiries;

  • manage emergencies, incidents and safety matters;

  • administer challenges, events, promotions and community activities;

  • improve our classes, programming, services and member experience;

  • manage our business, accounting, administration and record-keeping;

  • send information about RISE services, programs, offers or events where permitted by law and

in accordance with your communication preferences;

  • meet insurance, legal, regulatory and risk-management requirements; and

  • exercise or protect our legal rights.


Where information is collected for a particular purpose, we will generally only use or disclose it for that purpose or for a directly related purpose you would reasonably expect, unless you consent to another use or disclosure or we are otherwise permitted or required by law.


4. Health information and training safety

Your health and safety are important to us.

Where you provide information about an injury, medical condition, pregnancy, limitation or other health matter, we may use that information to:

  • determine whether modifications to your training may be appropriate;

  • assist our coaches in safely delivering your training;

  • respond to an incident or emergency;

  • manage your membership where a health issue affects your participation; or

  • otherwise provide our services safely and appropriately.


Relevant health or injury information may be shared with RISE coaches where reasonably necessary for your safety or for the delivery of your training.


Coaches are expected to treat this information confidentially and use it only for legitimate RISE purposes.

You are responsible for informing RISE of relevant changes to your health, injury status or physical capacity that may affect your ability to participate safely.

RISE does not provide medical advice. You should obtain appropriate medical advice where required before participating in physical activity.


5. Glofox and third-party service providers

RISE uses third-party platforms and service providers to operate the business and provide services to members.

Our key service providers currently include:

  • Glofox – our membership management and class booking platform, used to manage member

profiles, memberships, bookings, attendance, credits and related account information;

  • Stripe – our payment processing provider;

  • Google, including Google Forms, where online forms are used to collect information provided

voluntarily by members, prospective members or participants; and

  • our website hosting and website administration providers.


We may also use other service providers from time to time for purposes such as:

  • email and communications;

  • cloud storage;

  • accounting and financial administration;

  • technology support;

  • insurance;

  • marketing or website analytics; and

  • professional or business advisory services.


We only disclose information to service providers where it is reasonably necessary for them to provide services to us or where disclosure is otherwise permitted by law.


When you use a third-party platform such as Glofox, Stripe or Google, that provider may also collect, process and store information in accordance with its own privacy policy, terms and data-handling practices.


Some third-party providers operate internationally or may store or process information using servers located outside Australia.


RISE does not sell member personal information.


6. Payments and financial information

RISE uses Stripe to process payments relating to memberships, class packs, personal training and other services. Payment information may be entered through Glofox or another RISE payment interface and processed by Stripe. RISE does not generally receive or directly store your complete credit or debit card details. Those details are processed through Stripe and the relevant payment systems.


RISE may retain limited information relating to payments where required to administer your account, including:

  • transaction amounts;

  • payment dates;

  • payment status;

  • refunds;

  • failed or declined payments; and

  • related account or transaction records.


Stripe separately handles information it receives in accordance with its own privacy and security practices.


7. Website information and cookies

When you visit our website, certain information may be collected automatically by our website or service providers.

This may include:

  • your IP address;

  • browser and device information;

  • pages viewed;

  • referring pages or websites;

  • time spent on the website; and

  • general website usage information.


Our website or service providers may use cookies and similar technologies to:

  • operate and maintain the website;

  • remember preferences;

  • understand website usage;

  • improve website functionality and performance; and

  • assess the effectiveness of marketing or communications.


You can generally control or disable cookies through your browser settings. Doing so may affect the functionality of some parts of the website.


8. Marketing communications

Where permitted by law, we may use your contact information to communicate with you about:

  • RISE classes and services;

  • programs or challenges;

  • events;

  • membership options;

  • promotions or offers; and

  • other RISE news or information that may be relevant to you.


You may opt out of marketing communications at any time by using an unsubscribe function where available, replying to the communication where appropriate, or contacting RISE. Opting out of marketing will not prevent us from sending communications that are reasonably necessary to administer your membership, bookings, payments or relationship with RISE.


9. Photographs, video and testimonials

RISE may occasionally photograph or film classes, events, training sessions or community activities.

Where an identifiable person's photograph, video, testimonial, story or similar content is intended to be used for marketing or promotional purposes, we will obtain appropriate consent where required.

You may contact us if you have concerns about photography or filming at RISE.


10. How we protect your information

We take reasonable steps to protect the personal and health information we hold from:

  • misuse;

  • interference;

  • loss;

  • unauthorised access;

  • unauthorised modification; and

  • unauthorised disclosure.


Information is primarily held within the systems used to operate RISE, including Glofox, Stripe, Google services, our website and other business administration systems.

Security measures may include:

  • password-protected accounts;

  • controlled user access;

  • limiting information access to people who reasonably require it for their role;

  • use of reputable third-party technology providers; and

  • reasonable physical and electronic security practices.


No online or electronic system can be guaranteed to be completely secure, but we take reasonable precautions appropriate to the nature of the information we hold.


11. Retention and deletion of information

We retain personal and health information for as long as reasonably necessary to:

  • provide our services;

  • administer your membership or account;

  • manage health and safety matters;

  • meet legal, insurance, financial, accounting or regulatory requirements;

  • maintain appropriate business records; and

  • manage or defend actual or potential legal claims.


Where information is no longer required for a legitimate purpose and we are not required or reasonably entitled to retain it, we will take reasonable steps to securely destroy, delete or de-identify it. You may request deletion of personal information we hold about you. However, a request for deletion does not necessarily require us to remove information that we need or are permitted to retain for legal, financial, insurance, health and safety, record-keeping or dispute-management purposes.


12. Accessing and correcting your information

You may request access to personal or health information that RISE holds about you.

You may also ask us to update or correct information that you believe is:

  • inaccurate;

  • incomplete;

  • misleading; or

  • out of date.


To make a request, please contact us using the details at the end of this Privacy Policy. We may need to verify your identity before providing information or making changes. There may be limited circumstances in which we are permitted by law to refuse or restrict access. Where applicable, we will explain the reason for doing so.


13. Data breaches

If personal information held by RISE is lost, accessed or disclosed without authorisation, we will take reasonable steps to:

  • identify and contain the incident;

  • assess the potential impact;

  • reduce the risk of harm;

  • take appropriate remedial action; and

  • meet any applicable notification requirements.


Where we are legally required to notify affected individuals or a privacy regulator of an eligible data breach, we will do so in accordance with applicable law.


14. Children and young people

RISE may provide services to participants under 18 years of age. Where appropriate, we may request information, consent or authorisation from a parent or legal guardian. We take reasonable steps to handle the personal and health information of young people appropriately and only for purposes connected with their participation, safety and administration of RISE services.


15. Anonymity and providing information

Where practical, you may make a general enquiry without identifying yourself. However, certain information is required for us to provide memberships, bookings, training services or other services. If you choose not to provide information reasonably required by RISE, we may not be able to:

  • create or administer your membership;

  • process a booking or payment;

  • provide certain training services;

  • make appropriate safety modifications; or

  • otherwise provide the requested service.


16. Privacy complaints and enquiries

If you have a question, concern or complaint about how RISE has collected, used, disclosed or managed your personal or health information, please contact us using the details below. We will review the matter and take reasonable steps to respond appropriately. If you are not satisfied with our response, you may have the right to contact an applicable privacy regulator, including the:

  • Office of the Australian Information Commissioner (OAIC); or

  • Information and Privacy Commission NSW (IPC NSW).




17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

  • our services;

  • our technology or service providers;

  • our information-handling practices; or

  • applicable legal or regulatory requirements.


The current version will be published on our website and will state the date it was last updated.


18. Contact us

For privacy enquiries, requests for access or correction, complaints or other questions about how we handle personal information, please contact:

RISE MUAY THAI FITNESS
ABN: 74 698 482 209
Address: 312A High Street, Chatswood NSW, Australia
Email: hello@risemuaythai.com.au
Phone: 61 408 445 005