Our Privacy Policy

In this policy, “we”, “us”, “our” and “Return Pilates” mean MPC Pilates Pty Ltd ACN 649 741 542 as trustee for the MPC Pilates Unit Trust (ABN 14 253 027 321), trading as Return Pilates, and our related bodies corporate. You can contact us about privacy any time at info@returnpilates.com.au or at Level 1, 293 Wattletree Road, Malvern East VIC 3145.

We are committed to protecting your privacy. This policy applies to personal information we collect through our studios, our website at www.returnpilates.com.au, our app, our booking platform, and our other services and content (together, our “platform and services”). It works alongside our Terms and Conditions and our Participant Waiver and Release.

By giving us your personal information, you agree we may collect, use and disclose it as set out in this policy and in any collection notice we give you. We may update this policy from time to time by publishing the new version on our website, and for significant changes we will let you know through your account or by email.

2. The information we collect

“Personal information” means information or an opinion about an identified or reasonably identifiable individual. The types we collect depend on how you interact with us, and may include:

• your name, contact details (address, email, phone) and date of birth;
• emergency contact details;
• booking, attendance, membership and purchase history;
• payment information (card payments are processed securely by our payment provider; we do not store full card numbers ourselves);
• health information you choose to give us so we can support you safely (see clause 3);
• images and recordings in which you may appear (see clause 4);
• communications and feedback you send us; and
• technical information such as your device, IP address and how you use our website (see clause 9).

If you give us personal information about someone else (for example an emergency contact), please make sure they are aware of this policy.

3. Health and sensitive information

Some of the information we collect is “sensitive information”, including health information. Because we want you to move safely, we may collect health information such as injuries, medical conditions, pregnancy and post-natal details, medical clearances, and notes from the initial 45-minute private session we hold for younger participants.

We collect health information with your consent and only where it is reasonably necessary to deliver our services safely. We use it to tailor and adjust your participation, to decide whether an activity is suitable, and to respond in an emergency. We treat it as confidential: it is accessed only by authorised Return Pilates team members who need it to support you, and we do not disclose it to anyone else without your consent, except where the law requires or permits.

We handle health information in line with the Health Records Act 2001 (Vic) and the Health Privacy Principles, as well as the Australian Privacy Principles. If you choose not to give us relevant health information, we may not be able to let you take part in some activities where it would not be safe to do so.

4. Photos, video and marketing images

We sometimes take photographs, film or record at our studios for promotion, marketing and education. Recordings usually focus on instructors and the overall class, but your image, voice or reflection may be incidentally captured. We may use these images in our website, social media, advertising and other content. The full terms of this are set out in our Participant Waiver and Release.

If you would prefer not to be filmed or photographed, please let our team know in writing before the relevant class, and we will use reasonable endeavours to accommodate you, including by directing where you position yourself. You can also ask us to remove an image of you from our own channels, and we will do what we reasonably can.

5. Why we collect, hold, use and disclose your information

We collect, hold, use and disclose personal information to run our business and look after you, including to:

• provide our services and support, and manage your bookings, memberships and account;
• keep you safe and tailor your participation;
• process payments and manage fees;
• personalise your experience and improve our services and platform;
• send you service messages (such as booking confirmations and waitlist alerts);
• with your consent, send you marketing about our classes, offers and news (see clause 6);
• verify your identity, investigate complaints, and look into any suspected breach of our terms or unlawful activity; and
• meet our legal obligations, and for any other purpose we tell you about when we collect the information.

6. Direct marketing and your choices

With your consent, we may send you marketing by email, SMS or through your account, in line with the Spam Act 2003 (Cth) and the Australian Privacy Principles. Every marketing message identifies us and includes a simple way to unsubscribe. You can opt out at any time using the unsubscribe option in any message, or by emailing info@returnpilates.com.au, and we will action it promptly.

Opting out of marketing will not stop the service messages you need, such as booking confirmations, waitlist alerts and payment notices.

7. Who we share your information with

We may disclose your personal information to:

• our team and related bodies corporate, to run our business and support you;
• trusted service providers who help us operate, currently including Mindbody (booking), Mindbody Payments and Stripe (payments), HighLevel (customer and marketing platform), WordPress and Kinsta (website and hosting), and Google and Meta (analytics and advertising);
• professional advisers and, where relevant, the physiotherapy team we train with, only with your consent;
• a buyer or potential buyer if we restructure, merge or sell our business; and
• government, regulators, law enforcement or others where required or permitted by law, or to protect our systems or prevent illegal activity.

We require our service providers to protect your information and to use it only for the purposes we engage them for. We do not sell your personal information. Our providers may change from time to time, and the list above reflects those we use at the date of this policy.

8. Sending information overseas

Several of our service providers, including those named in clause 7, store or process information in the United States. Where we disclose your information overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles, except where we are compelled to disclose under local laws. By using our platform and services, you acknowledge that your information may be stored or processed overseas in this way.

9. Cookies, analytics and online advertising

When you use our website or services, we may collect technical information such as your device and browser type, IP address, the date and time of your visit, the pages you view, and general location, including through cookies. This helps us understand how our website is used and improve it.

We may also work with third parties such as Google and Meta to show you relevant advertising based on your visits to our website. This uses cookies and similar technology and does not, on its own, identify you. You can opt out through the Network Advertising Initiative opt-out page and your Google and Meta ad settings, and by managing cookies in your browser. We handle this in line with applicable privacy laws.

10. Storing and securing your information

We take reasonable steps to protect your personal information from misuse, interference, loss, and unauthorised access, modification or disclosure, including by using trusted providers with appropriate security and by limiting access within our team. While we work hard to keep your information safe, no system can be guaranteed completely secure, and we cannot promise absolute security of information transmitted to or through our platform and services.

11. How long we keep your information

We keep personal information only for as long as we need it for the purposes in this policy, or as required by law. When we no longer need it, we take reasonable steps to destroy or de-identify it. Health information is kept in line with the Health Records Act 2001 (Vic).

12. Data breaches

We have steps in place to identify and respond to data breaches. If a breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme, and the Health Complaints Commissioner where the Health Records Act applies.

13. Children and younger participants

Where a participant is under 16, we collect their personal information (including health information for the initial 45-minute private session) with the consent of a parent or legal guardian, and we handle it with the same care described in this policy. A parent or guardian may contact us to access or correct their child’s information.

14. Accessing and correcting your information

You can ask to see the personal information we hold about you, and ask us to correct it if it is wrong, by contacting info@returnpilates.com.au. We will respond within a reasonable time. For your security we may need to verify your identity first. In the limited cases where we cannot give access or make a correction, we will explain why.

15. Complaints and contact

If you have a question or concern about how we have handled your personal information, please contact us at info@returnpilates.com.au. We will look into it and aim to resolve it promptly and fairly, and we will let you know the outcome.

If you are not satisfied, you can contact the Office of the Australian Information Commissioner (oaic.gov.au) or, for health information in Victoria, the Health Complaints Commissioner (hcc.vic.gov.au).

Every visit. Every need. Every body.

Return Pilates | MPC Pilates Pty Ltd as trustee for the MPC Pilates Unit Trust | info@returnpilates.com.au