Legal

Privacy Policy

Last updated 6 October 2026

Your privacy matters to us, especially because some of what you share with us is about your health. This policy explains what information we collect, why, how we keep it safe, and the choices you have.

1.Who we are

This policy applies to Oceanside Gym Pty Ltd (ABN 33 646 380 314), trading as Vitality 4 U ("Vitality 4U", "we", "us"), of Unit 2/1 Arnold St, Cheltenham VIC 3192.

We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth) and, for health information, the Health Privacy Principles in the Health Records Act 2001 (Vic).

2.What we collect

We only collect what we need to look after you and run our business. This may include:

• Contact and booking details: your name, phone number, email address, booking history, memberships, packages and gift cards.
• Health information: answers to our health questionnaire, such as medical conditions, pregnancy, injuries or medications that affect whether a modality is safe for you, and notes our team makes about your sessions.
• Payment details: handled by Fresha and its payment providers. We don't see or store your full card number.
• Emergency contact details, if you give them to us.
• Messages and feedback you send us by email, phone, Instagram or reviews.

You can contact us without giving your name, for example to ask a general question. To book and use our services, though, we'll need to know who you are.

3.How we collect it

We collect information directly from you: when you book through Fresha, fill in a health questionnaire or participation form, visit the venue, or contact us by phone, email or social media. If someone books on your behalf (for example a friend on Two-Up Tuesday or a parent for a guest under 18), we may receive your details from them.

We only collect health information with your consent, or where the law allows.

4.Why we use it

• To take and manage your bookings, memberships, packages and gift cards, and to take payment.
• To check that our services are safe for you and to tailor your sessions.
• To contact you about your bookings, for example confirmations, reminders and changes.
• To respond to your questions, feedback and complaints.
• To improve our services and keep our records, and to meet our legal and insurance obligations.
• To send you news and offers, but only if you've agreed (see Marketing messages).

We don't sell your personal information. We don't use automated systems to make decisions about you that significantly affect your rights or interests.

5.Who we share it with

We only share your information when it's needed for the purposes above, or when the law allows or requires it:

• Fresha, which provides our booking, payment and client records system. Fresha handles your information under its own privacy policy.
• Payment processors and our bank, to process payments and refunds.
• Service providers who help run our business, such as IT, email, accounting and insurance providers, who must protect your information.
• Emergency services or medical professionals, if you need urgent help in the venue.
• Regulators, courts or law enforcement, where the law requires it.

We never share your health information for marketing.

6.Information stored overseas

Some of our service providers, including Fresha, may store or process information on servers outside Australia. Where this happens we take reasonable steps to make sure your information is protected to a standard similar to Australian law.

7.This website and cookies

This website doesn't use advertising or tracking cookies, and doesn't ask you for personal information. However:

• The map on our contact section is provided by Google Maps, and our fonts are provided by Google Fonts. Google may receive technical information such as your IP address when these load, under Google's own privacy policy.
• When you click "Book", you go to Fresha's website, where Fresha's privacy policy and cookies apply.
• Links to Instagram take you to Instagram, which has its own privacy policy.

8.Marketing messages

We'll only send you marketing emails or texts if you've agreed to receive them, in line with the Spam Act 2003 (Cth). Every message includes an easy way to unsubscribe, or you can just tell us. Booking confirmations and reminders aren't marketing, so you'll still receive those.

9.Security and retention

We take reasonable steps to protect your information from misuse, loss and unauthorised access. Paper forms are stored securely in the venue, and electronic records are kept in password-protected systems that only our team can access.

We keep your information only as long as we need it, or as long as the law requires. Where the Health Records Act 2001 (Vic) applies, health information is kept for at least seven years after your last visit (or, for guests under 18, until they turn 25). After that it's securely destroyed or de-identified.

If a data breach is likely to cause you serious harm, we'll let you know and, where required, notify the Office of the Australian Information Commissioner.

10.Accessing and correcting your information

You can ask to see the personal and health information we hold about you, and ask us to correct anything that's wrong or out of date. Just email [email protected] or ask our team. We'll respond within 30 days. We may need to confirm your identity first, and in limited cases allowed by law we may decline a request. If we do, we'll explain why.

11.Questions and complaints

If you have a question or concern about your privacy, please contact us first so we can put it right:

We'll respond within 30 days. If you're not satisfied with our response, you can contact:

• the Office of the Australian Information Commissioner: oaic.gov.au or 1300 363 992
• for health information, the Health Complaints Commissioner (Victoria): hcc.vic.gov.au or 1300 582 113

12.Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.