Privacy
Policy.

Purpose and Scope

PROJECT; I AU PTY. LTD. trading as Within Lifestyle and Fitness Centre (we, us, or our) is committed to protecting your personal and health privacy.

This Privacy Policy explains how we collect, hold, use, disclose, and safeguard your personal and sensitive information in accordance with the Privacy Act 1988 (Cth), the 13 Australian Privacy Principles (APPs), and the Health Records and Information Privacy Act 2002 (NSW).

By visiting www.withinlifestyleandfitness.com, creating an account, or registering for our fitness services, you consent to the data collection and handling practices described in this policy.

Information We Collect

Because we provide physical fitness, training, and lifestyle services, we must collect both personal information and sensitive health information.

How We Collect Your Data & Our Tech Stack

We collect information directly from you through progressive stages of our onboarding and membership management system.

Initial Website Onboarding: When you register your interest or start signing up on www.withinlifestyleandfitness.com, we collect your basic contact information, including name, email, and phone number.

Secure Payment Processing via Stripe: When you pay for services or memberships, your payment details are processed directly by our integrated payment gateway, Stripe. We do not directly store complete credit or debit card numbers on our local servers. Stripe handles this data in accordance with international PCI-DSS security standards.

App Integration & Medical Waivers via Fitbox: Following payment, your account profile, membership details, class bookings, pre-exercise health screening questionnaires, and signed risk waivers are finalised and securely stored within our fitness management application, Fitbox.

How We Use Your Information

We collect, hold, and use your personal and health information for the following primary purposes:

• Setting up and managing your client membership profile
• Administering class bookings, schedules, and training sessions
• Processing payments, direct debits, and managing account transactions
• Assessing your physical readiness to participate in exercise programs safely
• Contacting you about your membership, schedule changes, facility updates, or service notices
• Complying with our legal and insurance obligations under New South Wales and Australian Commonwealth law

Disclosure of Your Information

We will never sell, rent, or trade your personal or health data to third-party marketers.

We may disclose your personal information only in the following necessary circumstances:

Service Providers: To trusted third-party software and service providers essential to running our business operations, specifically Stripe for billing processing and Fitbox for membership management, health screening, and app functionality.

Emergency Medical Situations: To medical personnel or emergency services if you sustain an injury or experience a medical event on our premises or during a training session.

Legal Requirements: When required or authorised by law, law enforcement agencies, court orders, or statutory regulatory bodies in Australia.

Storage and Data Security

We take reasonable steps to protect your personal and health information from unauthorised access, misuse, loss, disclosure, or modification.

Digital Security: Data collected through our Website is encrypted using Secure Sockets Layer (SSL) technology. Data stored within Stripe and Fitbox is governed by enterprise-grade encryption and access controls.

Access Controls: Only authorised staff and trainers who require access to your health screening data to deliver safe training sessions are granted permission to view your sensitive records.

Accessing, Correcting, or Deleting Your Personal Data

Right to Access and Correct: You may request access to the personal and health information we hold about you and request corrections if you believe any details are inaccurate, out of date, or incomplete.

Complete Data Removal & Erasure: If you wish to terminate your account and have your personal information completely removed from our systems, Stripe records, or Fitbox databases, you may request complete deletion.

How to Submit a Request: Email admin@withinlifestyleandfitness.com with the subject line ‘Privacy / Data Request – [Your Full Name]’.

We will process and respond to your privacy request within a reasonable timeframe, typically within 14 to 30 business days. Certain basic transactional records may be retained where required by Australian tax law or for legal or insurance defence requirements.

Cookies and Website Analytics

Our Website, www.withinlifestyleandfitness.com, may use Google Analytics and similar digital measurement technologies to understand page visits, website performance and actions such as timetable, trial, recovery booking, telephone and enquiry clicks. These measurements help us understand whether the Website is useful; they are not used to collect health information entered into Fitbox or payment details entered into Stripe.

Analytics providers may use cookies or similar identifiers and process technical information such as device type, browser, approximate location and pages visited. You can block or delete analytics cookies through your browser settings. Essential website functions remain available when analytics is blocked.

Complaints and Enquiries

If you have questions about this Privacy Policy or wish to lodge a complaint regarding how your personal information has been handled, contact our Privacy Manager at admin@withinlifestyleandfitness.com or write to PROJECT; I AU PTY. LTD. t/a Within Lifestyle and Fitness Centre, 5 Immarna Road, Rathmines NSW 2283, Australia.

We will investigate your complaint and attempt to resolve the issue promptly. If you are not satisfied with our response, you may lodge a formal complaint with the Office of the Australian Information Commissioner (OAIC).

www.oaic.gov.au ↗

OAIC · 1300 363 992 ↗

Updates to This Privacy Policy

We may revise or update this Privacy Policy to reflect changes in legal requirements, our operational technology stack, or business practices. Updates will be posted directly to this page on www.withinlifestyleandfitness.com with a revised Effective Date. Continued use of our Website or services constitutes your acceptance of the updated Privacy Policy.