Our Privacy Policy
Your privacy matters to us. Thyrve is committed to handling your personal and health information carefully, respectfully and transparently. This Privacy Policy explains what information we collect, why we collect it, how it may be used or shared, and the choices available to you.
Who we are
Thyrve (ABN 90 843 528 089), provides personal training and related fitness services in Western Australia.
In this policy, “we”, “us” and “our” refer to Thyrve. We handle personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply.
Privacy contact:
Megan Fox, Owner and Personal Trainer
thyrvePT@gmail.com
0437 803 647
15 Bocker Street, Dardanup, WA, 6236
Information we collect
We may collect:
- Your name, date of birth, address, email address and phone number.
- Emergency contact and, where relevant, parent or guardian details.
- Appointment, attendance, membership, package and payment-status information.
- Fitness goals, training programs, exercise history, check-ins and communications.
- Health information relevant to safe participation, including injuries, medical conditions, symptoms, pregnancy information, accessibility requirements and medical-clearance status.
- Measurements, progress information, photographs or videos you choose to provide.
- Enquiries, feedback, complaints and consent records.
How and why we collect information
We generally collect information directly from you through consultations, forms, pre-exercise screening, our website, email, telephone, in-person interactions and HubFit.
We may also receive information from a parent or guardian, authorised representative, Stripe or another person where you have consented or where collection is otherwise permitted by law.
We use this information to:
- Assess whether our services can be provided safely.
- Develop and personalise training programs.
- Manage appointments, memberships and packages.
- Process payments and maintain transaction records.
- Communicate with you about your training and services.
- Respond to emergencies, concerns or complaints.
- Meet legal, insurance and record-keeping obligations.
- Maintain and improve our services.
If required information is not provided, we may be unable to safely provide some or all of our services.
Health and sensitive information
Health information is considered sensitive information. We collect it only when it is reasonably necessary for our services and with your consent, unless collection is otherwise permitted or required by law.
Health information may be used for pre-exercise screening, appropriate program adjustments, safety decisions, emergency responses, referrals or requests for medical clearance.
Access is limited to people who reasonably need the information to provide or administer your services. For clients under 18, we may require information and consent from a parent or legal guardian.
HubFit, Stripe and other providers
We use HubFit to manage clients, training packages, programs, check-ins, progress information, messages and other coaching services. Information entered into HubFit is also handled according to HubFit’s Privacy Policy, available at:
HubFit uses Stripe to process package and subscription payments. Payment information entered during checkout is processed by Stripe. We may receive transaction, subscription and payment-status information, but we do not intentionally store your complete card or bank-account details in our own client records.
Stripe’s Australian Privacy Policy is available at:
When information may be shared
We may share information with:
- Authorised staff or contractors.
- HubFit, Stripe and other technology or booking providers.
- Accountants, legal advisers, insurers and other professional advisers.
- Payment, administration or record-keeping providers.
- Emergency services or your nominated emergency contact where reasonably necessary.
- Regulators, courts or government authorities when authorised or required by law.
We do not sell client information.
Some service providers may store or process information outside Australia, including in the United Kingdom and United States. Where required, we take reasonable steps to ensure overseas disclosures comply with applicable Australian privacy requirements.
Progress photos, testimonials and marketing
Progress photographs, videos, measurements and testimonials collected for coaching purposes are treated as confidential.
We will not use identifiable photographs, testimonials, results or other client content in advertising, social media or promotional material without separate, optional consent.
You may withdraw your marketing consent for future use by contacting us. Material already lawfully published may take a reasonable amount of time to remove where removal remains within our control.
Storage, security and retention
We take reasonable technical and organisational steps to protect personal information from misuse, loss, interference, unauthorised access, modification or disclosure.
These measures may include secure platforms, restricted access, strong passwords, multi-factor authentication, device security and confidential record handling. However, no internet or storage system can be guaranteed to be completely secure.
We keep information only for as long as reasonably required to provide services and meet legal, tax, insurance, dispute-resolution and record-keeping requirements.
Our usual client-record retention period for adult clients is at least seven years after the client’s last session or the last entry made in their record. Records created while a client is under 18 are generally retained until the client turns 25, or for seven years after the last entry, whichever is later.
When information is no longer required, we take reasonable steps to securely destroy or de-identify it, subject to lawful retention requirements.
Access, correction and your choices
You may request access to personal information we hold about you or ask us to correct information that is inaccurate, incomplete, out of date, irrelevant or misleading.
To make a request, contact thyrvePT@gmail.com and provide enough information for us to identify you and understand your request. We may need to verify your identity before responding.
We will respond within a reasonable period. If access or correction is refused on a lawful ground, we will explain the reason and available complaint options where required.
You may withdraw consent where our handling of information depends on consent. Withdrawal does not affect information previously handled lawfully and may mean we cannot safely continue providing a particular service.