Sphere Wellness Studio Privacy Policy

Sphere Wellness Studio Pty Ltd · ABN 92 671 676 565
79 Errol Street, North Melbourne VIC 3051
Effective date: 26 September 2026 · Version 2.0 (replaces the policy dated 1 August 2025)

Sphere Wellness Studio Pty Ltd ("Sphere", "we", "us", "our") respects your privacy. This policy explains how we collect, use, store and share your personal information, including health information, when you use our studio, website, app or services.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and health information in line with the Health Records Act 2001 (Vic) and its Health Privacy Principles. Because we provide health services, these laws apply to us regardless of the size of our business.

1. What information we collect

We only collect information that is reasonably necessary to provide our services.

TypeExamples
Personal detailsName, date of birth, gender, address, phone, email
Emergency contactName, relationship and phone number of the person you nominate
Parent or guardian detailsFor clients under 18: the parent or guardian's name, contact details and consent
Health information (sensitive information)Pre-exercise screening (APSS), injuries, medical conditions, medications, pregnancy, GP clearances, goals
Body composition dataBody scan results such as weight, body fat %, skeletal muscle mass
Training recordsPrograms, weights, reps, session notes, progress reviews
Exercise physiology recordsAssessments, clinical notes, treatment plans, referral letters, and — where relevant — NDIS, Medicare or DVA details (e.g. NDIS number, plan manager, Medicare or DVA card details, referring practitioner)
Recovery recordsSauna and ice bath waivers and health declarations
Payment informationCard or bank details (processed and stored by our payment providers — we do not keep full card numbers), billing and purchase history
CCTV footageVideo recorded by security cameras in and around the studio (see section 10)
Photos and videoOnly with your written consent, for coaching feedback or marketing
Digital and usage dataBookings, attendance, app activity, IP address, device and browser type, website activity via cookies, analytics and the Meta pixel
CommunicationsEmails, SMS, calls, social media messages and feedback you send us

Anonymity: you can make general enquiries without identifying yourself. We can't provide training, recovery or clinical services anonymously, because we need your details to deliver them safely.

Other people's information: if you give us someone else's details (e.g. an emergency contact or a gift voucher recipient), please let them know.

2. How we collect it

  • Directly from you: forms on our website or app, PT Minder sign-up, consultations, screening, body scans, sessions, purchases, email, SMS, phone and in person.
  • From a parent or guardian, for clients under 18.
  • From third parties, with your consent or where permitted: your GP or referring practitioner, NDIS plan managers or support coordinators, ClassPass (if you book through them), and people you refer or who refer you.
  • Automatically: through cookies, analytics and the Meta pixel on our website and app, and through CCTV at the studio.

We collect health information only with your consent, or where the law allows (for example, in an emergency).

3. Why we use it

We use your information to:

  1. Assess whether exercise is safe for you and deliver training, recovery, body scanning and exercise physiology services.
  2. Manage memberships, bookings, attendance, waitlists and payments.
  3. Contact you in an emergency using your nominated contact.
  4. Send service messages — booking confirmations, reminders, policy and billing notices.
  5. Process claims and reports for NDIS, Medicare or DVA where you use those services.
  6. Communicate with your GP or other health providers, with your consent.
  7. Send you news and offers (see section 8) — you can opt out anytime.
  8. Measure and improve our advertising, including through the Meta pixel (see section 11).
  9. Keep our studio, clients, staff and property safe and secure, including through CCTV.
  10. Improve our services, train our staff and manage our business.
  11. Meet our legal, insurance and regulatory obligations.

We will never use your health information for marketing or advertising without your express consent.

We do not make decisions about you using fully automated processes.

4. Who we share it with

We never sell or rent your personal information. We share information only as needed with:

WhoWhy
PT MinderMembership, bookings, client records, our branded app
NookalExercise physiology clinical records
GoHighLevelClient communications, enquiries, SMS and email
StripeMembership and online payments
SquareIn-studio retail purchases at reception
XeroAccounting and invoicing
Google WorkspaceEmail, calendars and secure document storage
ClassPassBookings made through ClassPass
Meta (Facebook/Instagram)Website activity via the Meta pixel, to measure and target our advertising — we never share health information with Meta
Your GP, referring practitioner or allied health providersWith your consent, for your care
NDIA / NDIS plan managers, Services Australia (Medicare), DVATo process claims and reports for those services
Emergency servicesWhere needed to protect your life, health or safety
Police, insurers and lawyersCCTV footage or records where needed to investigate an incident, a claim, or where required by law
Our accountants and professional advisersTo manage our business and meet obligations
Government or law enforcementWhere required or authorised by law

Our service providers may only use your information to provide services to us and must protect it.

5. Storage outside Australia

Some of our providers (such as GoHighLevel, Stripe, Square, Google, Meta and ClassPass) may store or process information on servers outside Australia, including in the United States. We take reasonable steps to choose providers with strong security and privacy protections. By using our services, you acknowledge this may occur.

6. How we protect it

  • Records are kept in secure, password-protected systems; we don't keep client records on personal devices.
  • Only staff who need information to do their job can see it. Clinical records in Nookal are accessible only to our Exercise Physiologist and the Director.
  • Staff are trained in privacy and confidentiality and bound by confidentiality obligations.
  • Paper records are stored securely and shredded when no longer needed.

7. Data breaches

If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches scheme, and take steps to contain it.

8. Marketing

With your consent, we may send you news, offers and event invitations by email, SMS or app notification. You can opt out anytime by:

  • clicking unsubscribe in an email,
  • replying STOP to an SMS,
  • changing notification settings in the app, or
  • telling us.

Opting out of marketing doesn't stop important service messages about your bookings, membership or billing.

9. Photos, video and testimonials

We only use photos, video, results or testimonials that identify you with your written consent (for clients under 18, a parent or guardian's written consent). You can withdraw consent anytime; we'll stop using the material in new content and remove it where reasonably possible.

10. CCTV

We use CCTV cameras in and around the studio for the safety and security of our clients, staff and property. Signs are displayed at the entrance.

  • Cameras are never placed in toilets, showers or change areas.
  • Footage is stored securely, accessed only by the Director (or a person they authorise), and kept for up to 30 days unless needed to investigate an incident, claim or complaint.
  • Footage may be shared with police, insurers or lawyers where needed to investigate an incident or where required by law.
  • You can ask whether footage of you exists; we may need to protect other people's privacy when responding.

11. Cookies, analytics and the Meta pixel

Our website and app use cookies and analytics tools to understand how people use them. Our website also uses the Meta pixel, which lets Meta (Facebook/Instagram) collect information about your visit — such as pages viewed and actions taken — so we can measure our ads and show relevant ads to people who have visited our site.

You can:

  • disable or delete cookies in your browser,
  • manage your ad preferences in your Facebook or Instagram settings, and
  • ask us not to include you in any customer lists used for advertising.

Some website features may not work as well if cookies are disabled.

12. Accessing and correcting your information

You can ask to see or correct the information we hold about you at any time. Contact our Privacy Officer (below). We'll confirm your identity and respond within 30 days. There's no fee to ask; we may charge a reasonable cost to provide copies of large records. If we refuse, we'll tell you why in writing.

13. How long we keep it

  • Health and clinical records: at least 7 years after your last service, or if you were under 18, until you turn 25 — as required by the Health Records Act 2001 (Vic).
  • Financial records: 7 years, as required by tax law.
  • CCTV footage: see section 10.
  • Other information: only as long as we need it, then securely deleted or de-identified.

14. Clients under 18

  • A parent or guardian must give written consent before a client under 18 takes part in any session, screening or body scan.
  • Sphere Recovery (sauna and ice bath) is for adults only and is not available to clients under 18.
  • The parent or guardian completes the pre-exercise screening and signs our terms on the young person's behalf.
  • We will usually deal with the parent or guardian about the young person's information, taking into account the young person's age and maturity.
  • Photos or video of a client under 18 are only used with a parent or guardian's written consent.

15. Complaints

If you think we've mishandled your information, please contact our Privacy Officer first. We'll acknowledge your complaint within 7 days and aim to resolve it within 30 days.

If you're not satisfied, you can contact:

  • Office of the Australian Information Commissioner (OAIC) — oaic.gov.au · 1300 363 992
  • Health Complaints Commissioner (Victoria) — for health information — hcc.vic.gov.au

16. Contact us

Privacy Officer:
Lonnie Pitcher, Director
Sphere Wellness Studio Pty Ltd
79 Errol Street, North Melbourne VIC 3051
Email: [email protected]
Phone: +61 414 533 268

17. Changes to this policy

We review this policy at least every 12 months and when our services, systems or the law change. The current version is always on our website and in our app. If we make significant changes, we'll let members know.