Privacy Policy — Bloc Pilates

Small businesses (turnover under $3 million) are often exempt from the Privacy Act — but a business that provides a health service and holds health information is generally covered regardless of turnover. Because we collect health details for exercise screening, we treat ourselves as covered and follow the Australian Privacy Principles. [CONFIRM with the OAIC / your adviser and update this note.]

1. Who we are

Bloc Pilates is operated by [FULL LEGAL / TRADING NAME] (ABN [ABN]) of [STUDIO ADDRESS, NEWMAN WA]. For any privacy question or request, contact [ASH SURNAME] at hello@blocpilates.com.au.

2. What we collect

·Identity & contact: name, email, phone, and emergency contact.
·Health information: pre-exercise screening answers, injuries, medical conditions, pregnancy and anything you tell us so we can help you train safely (this is “sensitive information”).
·Booking & payment: your class history and membership; payments are processed by [Momence / Stripe], who handle your card details under their own privacy terms — we don’t store full card numbers.
·Website & social: basic analytics and any messages you send us via email or Instagram.

3. How we collect it

We collect information directly from you — when you book, sign up, complete a health screen, email us, or talk to us at the studio. Where we use third-party tools (booking, payments, email, analytics) we collect it through them.

4. Why we collect & use it

·To deliver classes safely and manage your bookings and membership.
·To screen for health risks and tailor sessions to you.
·To process payments and keep account records.
·To contact you about your bookings, timetable changes and studio updates.
·With your consent, to send marketing — you can opt out any time.
·To meet our legal, tax and insurance obligations.

We only collect sensitive (health) information with your consent and use it only for the purpose you gave it — keeping you safe in class.

5. Who we share it with

We don’t sell your information. We share it only as needed with:

·our service providers — e.g. [Momence] (bookings), [Stripe] (payments), our email/marketing tool, and IT/website providers;
·our insurer or advisers where reasonably necessary (for example, an incident or claim);
·anyone you ask us to, or where required or authorised by law.

[If any provider stores data overseas, name the countries here] (for example, cloud hosting). We take reasonable steps to ensure they protect your information.

6. Keeping it secure

We take reasonable steps to protect your information from misuse, loss and unauthorised access — including [password-protected accounts, limited access, and secure third-party platforms]. No system is perfectly secure, but we act quickly if a problem arises, and will notify you and the OAIC of an eligible data breach as required.

7. How long we keep it

We keep your information only as long as needed for the purposes above or to meet legal requirements (for example, health, tax and insurance records may need to be kept for [NUMBER] years), then securely delete or de-identify it.

8. Accessing & correcting your information

You can ask to see the personal information we hold about you and ask us to correct it. Email hello@blocpilates.com.au and we’ll respond within a reasonable time. There’s no charge to ask.

9. Marketing & your choices

If you’ve opted in, we may email you studio news and offers. Every message includes an unsubscribe link, and you can opt out any time by contacting us.

10. Complaints

If you think we’ve mishandled your information, please tell us first so we can put it right. If you’re not satisfied, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

11. Changes to this policy

We may update this policy from time to time. The current version always lives here with the “last updated” date shown above.