Privacy Policy

IMPORTANT NOTICE

Please read this Privacy Policy carefully, as your access to and use of our services, including the Website and Apps, signifies that you have read, understand and agree to all terms within this Privacy Policy. If you do not agree with any part of this Privacy Policy or our Terms of Use (available here), please do not access or continue to use any of our services, the Website and the Apps, or otherwise submit your personal information to us.In some cases, we will ask for your consent to process your personal information. You may indicate your consent in a number of ways, including, as permitted by law, ticking a box (or equivalent action) to indicate your consent when (i) providing us with your personal information through our services or a form; or (ii) registering or creating an account with us.

WHO ARE WE?
1. This Privacy Policy (‘Policy’) sets out the policy of 98 Capital Pty Limited (ACN 639 004 032), 98 Franchise Pty Limited (ACN 645 028 333), 98 Training Pty Limited (ACN 639 004 452), 98 Administration Pty Ltd (ACN 658 043 924), 98 Gym Pty Ltd (ACN 143 131 131) and their subsidiaries, affiliates and franchisees (‘we’, ‘us’ or ‘our’) with respect to the way in which we collect, use, disclose, store, secure and dispose of personal information about our members, customers, franchisees and employees (‘you’).
2. We are committed to protecting your privacy and complying with thePrivacy Act 1988(Cth) (‘Privacy Act’) and other applicable privacy and health records laws and regulations.
3. We offer a complete range of fitness and training services at our gyms, via our websites (including 98gym.com and 98training.com) (‘Websites’) and via our 98 Gym and 98 Training mobile applications (‘Apps’).
What is personal information?
1. ‘Personal information’ is information or an opinion about an identified person, or a person who is reasonably identifiable. In general terms, this includes information or an opinion that personally identifies you directly (eg. your name) or indirectly (eg. your IP address).
2. ‘Personal Information’ also includes ‘sensitive information’ which, in the context of this Policy, includes information or an opinion about your health.
What personal and SENSITIVE information do we collect?
1. The personal information we collect about you depends on the nature of your dealings with us or what you choose to share with us.
2. The personal information we may collect about you includes:a. name;b. address;c. date of birth;d. sex at birth;e. email address;f. phone number;g. location data;h. user activity patterns;i. information about your social media accounts (including usernames and handles);j. credit card or bank account details;k. business name and address (in the case of corporate memberships);l. occupation and employer;m. emergency contact details; andn. images of you (which may include videos and / or photographs).
3. Personal information is also collected when you download, use and/or subscribe to the Apps, use our Websites and Social Media Pages and/or provide documentation to us, including completion of a membership application form, membership agreement and/or health questionnaire.
4. We may also create information that becomes part of the personal information we hold about you, such as your membership number and the products you purchase from us from time to time.
5. Under certain circumstances, we may need to collect sensitive information about you. This might include:
  1. your medical history, including current or previous injuries, whether you are using medication, smoke or are pregnant;
  2. information and records from medical professionals relating to your health; and
  3. information that is necessary to properly advise you about fitness training.
6. If we collect your sensitive information, we will do so only with your consent, if it is necessary to prevent a serious and imminent threat to life or health, or as otherwise required or authorised by law.
How do we collect your personal information?
1. We may collect your personal information directly from you when you:
  1. Interact with us over the phone, in-person or online (including through the Websites and Apps);
  2. participate in surveys or questionnaires;
  3. attend a 98 Gym;
  4. purchase a free trial or join as a member of a 98 Gym;
  5. subscribe to our mailing list;
  6. download, subscribe to and/or use the Apps;
  7. apply to become a franchisee; and
  8. apply for a position with us as an employee or contractor;
2. We may also collect your personal information from third parties or through publicly available sources, for example from Hapana, Ezidebit, Stripe, Mailchimp, Zendesk, SloCoach, Franchise Cloud Solution and the Apple and Google Play stores.
3. We collect your personal information from these third parties so that we can provide the service that you request from us, provide relevant marketing information to you, facilitate payments and class bookings, communicate with you and assess your suitability as a franchisee or employee / contractor.
How do we use your personal information?
1. We use personal and sensitive information for many purposes in connection with our functions and activities, including the following purposes:
2. provide you with information or services that you request from us;
3. deliver to you a more personalised experience and service offering that takes into account your location, access to equipment and resources, and any relevant health or medical issues;
4. engage with you, and facilitate your engagement with other users of our gyms, services and Apps;
5. improve the quality of the services we offer;
6. internal administrative purposes; and
7. marketing and research purposes.
Disclosure of personal information to third parties
1. We may disclose your personal information to third parties in accordance with this Policy in circumstances where you would reasonably expect us to disclose your information.
2. For example, we may disclose your personal information to:
  1. our third-party service providers (for example, our IT providers, payment platforms, administrative platforms);
  2. our third-party business partners (for example, suppliers of health and fitness equipment, apparel, nutrition products);
  3. our marketing providers;
  4. our professional services advisors;
  5. personal trainers who provide services at a 98 Gym;
  6. third parties where it is incidental to a sale of our business; and
  7. the 98 Gym head office, and other franchisees within the 98 Gym network.
3. We may also disclose personal information if there is a legal requirement to do so (eg. under a court order, or if required under legislation), or if an authorised request is made from a law enforcement agency.
Information provided by franchisees and prospective franchisees
1. Personal information may be provided to us by franchisees and prospective franchisees. That personal information is used to evaluate the suitability of the applicants becoming 98 franchisees, and to create an ongoing franchisee record.
2. Prospective franchisees that provide personal information but do not enter into a franchising agreement will be given the opportunity to have the information returned or destroyed.
3. We may make enquiries and check accuracy of information of prospective franchisees and that may include the disclosure of certain personal information in accordance with section 6 above.
information provided by employees
1. Any employment application provided to us will be used solely for the purpose of analysing suitability for a position available.
2. Personal information will only form part of an employee record if application is successful. Personal information of unsuccessful applicants will remain on file to be revisited should suitable opportunities arise in the future, but if requested applications may be returned or destroyed.
3. Personal information about employees will only be disclosed by us if required by law to authorised government agencies (eg. Australian Taxation Office) or as otherwise agreed by the employee.
Transfer of personal information overseas
1. Some of the third-party service providers we disclose personal information to may be based in or have servers located outside of Australia, including in the United States, Russia and Sri Lanka.
2. Where we disclose your personal information to third parties overseas, we will take reasonable steps to ensure data security and appropriate privacy practices are maintained.
How do we protect your personal information?
1. We will take reasonable steps to ensure that the personal information that we hold about you is kept confidential and secure, including by:
2. having a robust physical security of our premises and databases / records;
3. taking measures to restrict access only to personnel who need that personal information to effectively provide services to you; and
4. having technological measures in place (for example, anti-virus software, fire walls).
Online activity
1. Location data
  1. We may collect general location data which may be obtained from your internet browser and/or mobile device. Location data is used to improve our services, provide you with a more customised service, and provide you with offers or advertising that is relevant to your general location. We do not use location data to identify you, just to improve your experience on our Websites and Apps. If you do not wish to provide us with location data, you can amend the settings on your internet browser and mobile device.
2. Push notifications
  1. You can manage the type of push notifications you receive from us by modifying the settings within the Apps. You may also set your mobile device settings to not allow push notifications from us.
3. Cookies
  1. Our Websites may use cookies. A cookie is a small file of letters and numbers the website puts on your device if you allow it. These cookies recognise when your device has visited our Websites before, so we can distinguish you from other users of the Websites. This improves your experience and our Websites.
  2. We do not use cookies to identify you, just to improve your experience on our Websites. If you do not wish to use the cookies, you can amend the settings on your internet browser so it will not automatically download cookies. However, if you remove or block cookies on your computer, please be aware that your browsing experience and our Websites’ functionality may be affected.
4. Website analytics
  1. Our Websites uses Google Analytics to help us better understand visitor traffic, so we can improve our services. Although this data is mostly anonymous, it is possible that under certain circumstances, we may connect it to you.
Direct Marketing
1. We may send you direct marketing communications and information about our services, opportunities, or events that we consider may be of interest to you if you have requested or consented to receive such communications. These communications may be sent in various forms, including SMS and email, in accordance with applicable marketing laws, such as theAustralian Spam Act 2003(Cth).
2. You consent to us sending you those direct marketing communications by any of those methods. If you indicate a preference for a method of communication, we will endeavour to use that method whenever practical to do so.
3. You may opt-out of receiving marketing communications from us at any time by following the instructions to “unsubscribe” set out in the relevant communication or contacting us using the details set out in section 20 below.
4. In addition, we may also use your personal information or disclose your personal information to third parties for the purposes of advertising, including online behavioural advertising, website personalisation, and to provide targeted or retargeted advertising content to you (including through third party websites).
Retention of personal information
1. We will not keep your personal information for longer than we need to.
2. In most cases, this means that we will only retain your personal information for the duration of your relationship with us unless we are required to retain your personal information to comply with applicable laws, for example record-keeping obligations.
How to access and correct your personal information
1. We will endeavour to keep your personal information accurate, complete and up to date.
2. If you wish to access and/or correct the personal information we hold about you, you should make a request by contacting us via one of the methods set out in section 20 below and we will usually respond within 2 days.
3. We may / may not provide the information requested, depending upon legal circumstances. If we decide not to correct or provide you with access to your personal information, we will give you our reasons for our decision.
Links to third party sites
1. The Websites and Apps may contain links to websites operated by third parties.
2. If you access a third party website through our Websites or Apps, personal information may be collected by that third party website.
3. We make no representations or warranties in relation to the privacy practices of any third party provider or website and we are not responsible for the privacy policies or the content of any third party provider or website.
4. Third party providers / websites are responsible for informing you about their own privacy practices and we encourage you to read their privacy policies.
Social media
1. We encourage everyone to engage with our social media pages (eg. Instagram, TikTok, Facebook, Twitter, YouTube) as we like to hear from our members, customers, friends and staff.
2. However, it is your responsibility to protect your privacy and personal information when using our social media pages. You should not include any of your personal information, or the personal information of others, in posts, stories or comments.
3. Information posted to our social media pages is recorded and used for the purpose of administering pages and addressing any comments made.
4. We are not responsible for the privacy practices or content of social media pages.
Delete Your Account
1. If you no longer wish to use our Services, you can delete your account from 98 Training. To do so, navigate to the “Delete Profile” option in the Settings section of our mobile application. If you prefer, you can also contact us via our support email, and we will assist you in deleting your account and associated data.
2. Please note that deleting your account will remove all your information from our system, and it will no longer be visible to other users, including your past participation within the Services. Once deleted, your data cannot be recovered.
CCTV
1. To ensure the safety of our members, we may undertake surveillance within 98 Gyms using CCTV. The CCTV system may record videos and images, as well as the time and date the videos / images were taken.
2. We will only operate CCTV cameras on the gym floor and office areas, and surveillance footage can be accessed only by authorised staff.
Users from the European Union and Switzerland
This section of the Policy applies only if you use our Websites, Apps or services from a country that is part of the European Union, Switzerland or the United Kingdom (‘EU’).
1. Controller of Personal Information
  1. To the extent we are subject to the laws of the EU when processing information that relates to an identified or identifiable individual (‘personal data’), we are a data controller with respect to your personal data.
2. Legal Basis for Data Processing
  1. We process your personal data for the purposes set out in this Policy. Our legal basis for processing personal data includes processing that is:
  2. necessary for the performance of the contract between us and you (eg. to register you as a member of the Gym, or resolve billing or customer service inquiries related to your membership or products you have purchased);
  3. necessary to comply with legal requirements (eg. to comply with applicable accounting rules or to make mandatory disclosures to law enforcement);
  4. necessary for our legitimate interests (eg. to manage our relationship with you and to improve the Apps, Websites and services we provide).
  5. Where legally required and we have no other valid legal basis to process your personal data, we will obtain your consent (eg. to provide you with marketing information or share information with third parties as described above), which you may withdraw at any time by contacting us as set out in section 20 below.
  6. In some instances, you may be required to provide us with personal data for processing as described above, in order for us to be able to provide you all of our services, and for you to use all the features of the Apps and Websites.
3. International Transfers of Personal Data
  1. Personal data we collect will be transferred to Australia, the United States, Russia and Sri Lanka. Our employees and some of the third parties to whom we disclose personal data (as set out above) may be located in Australia, the United States, Russia, Sri Lanka, and other countries outside of the EU which may not provide the same level of data protection as your home country.
  2. However, we will take appropriate steps to ensure that recipients of your personal data are bound to duties of confidentiality and we implement measures to ensure that any transferred personal data remains protected and secure.
4. Data Retention
  1. We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
  2. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the relevant data, the potential risk of harm from unauthorised use or disclosure of the data, the purposes for which we process your data and whether we can achieve those purposes through other means, and the applicable legal requirements.
5. Your Rights
  1. You may be entitled, in accordance with applicable law, to object to or request the restriction of processing of your personal data. You may also be entitled to request access to, rectification, erasure and portability of your own personal data. Requests should be submitted by contacting us as set out in section 20 section below.
  2. If you are aware of changes or inaccuracies in your data, you should inform us of such changes so we can update or correct our records.
  3. You may lodge a complaint with a data protection authority if you consider that our processing of your personal data violates applicable law.
Changes to PRIVACY POLICY
1. We may amend, modify or otherwise update this Policy at any time and we will use our reasonable efforts to notify you of those changes.
2. We may give such notice by posting the updated Policy on our Websites, using reasonable efforts to draw them to your attention.
Inquiries and complaints
1. For complaints about how we handle, processes or manage your personal information, please contact us by email or post using the details below. Please note we may require proof of your identity and full details of your request before we can process your complaint.
2. Please allow up to 5 days for us to respond to your complaint.
3. It will not always be possible to resolve a complaint to everyone’s satisfaction. If you are not satisfied with our response to a complaint, you have the right to contact the Office of Australian Information Commissioner (at www.oaic.gov.au/) to lodge a complaint.
4. We may give such notice by posting the updated Policy on our Websites,using reasonable efforts to draw them to your attention.
How to contact us
1. If you have any questions or concerns in relation to our handling of your personal information or this Policy, you can contact us for assistance as follows:
  - Email: info@98training.com
  - Post: 98 Riley Street, Darlinghurst NSW 2010 Australia
  - This Privacy Policy was last updated on October 6th 2023.