Privacy Policy

 

Last updated: 28 July 2026

​

Stefanie Piper Training Pty Ltd, trading as SPT Transformation, ABN 30 644 213 598 (“SPT”, “we”, “us” or “our”), respects your privacy and is committed to managing personal information responsibly.

This Privacy Policy explains how we collect, hold, use and disclose personal information when you interact with our website, contact our team, attend our studios, use our booking systems or purchase our services.

We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles and other applicable privacy laws.

​

1. Personal information we collect

 

The personal information we collect may include:

• your name, date of birth and contact details;

• your address and emergency contact details;

• enquiry, consultation, booking and membership information;

• training preferences, goals and attendance history;

• health, injury, pregnancy, fitness and pre-exercise screening information;

• payment, billing and transaction information;

• communications you have with our team;

• testimonials, reviews, photographs or video where permission has been provided;

• marketing preferences and consent records; and

• technical information such as your IP address, browser, device, pages visited, referral source and interactions with our website.

We only collect information that is reasonably necessary for our business activities and the services we provide.

​

2. Health and sensitive information

 

Health information is sensitive information under Australian privacy law.

We may collect health, injury, pregnancy, fitness or medical information where it is reasonably necessary to assess your suitability for training, modify a service, support your safety or provide the service you have requested.

We will seek your consent where required and will not use health information for direct marketing without your express consent.

You should provide complete and accurate health information and notify us if your circumstances change.

​

3. How we collect information

 

We may collect personal information:

• directly from you through website forms, emails, telephone calls or consultations;

• through membership applications, questionnaires and pre-exercise screening forms;

• when you book or purchase through GymMaster or another booking or payment provider;

• when you attend a class, consultation or studio session;

• when you communicate with us through social media;

• through cookies, pixels, analytics tools and similar technologies; and

• from a parent, guardian, authorised representative or other third party where you have authorised that disclosure or the law permits it.

Where practical, you may interact with us anonymously or using a pseudonym. However, we will generally need accurate identifying and health information to provide memberships, consultations, training and booking services.

​

4. Why we use personal information

 

We may use personal information to:

• respond to enquiries and consultation requests;

• recommend an appropriate training or service pathway;

• manage bookings, memberships and attendance;

• conduct health and fitness screening;

• provide reformer Pilates, personal training, nutrition and related services;

• process payments and administer direct debits;

• communicate timetable, booking, membership and operational updates;

• maintain member safety and studio security;

• manage complaints, disputes and legal obligations;

• improve our website, services and customer experience;

• measure website and advertising performance;

• send marketing communications where permitted; and

• protect our legal rights, members, staff and business.

If you do not provide information we reasonably require, we may be unable to provide certain services or determine whether a service is suitable for you.

​

5. Website cookies, analytics and advertising

 

Our website may use cookies and similar technologies to operate correctly, remember preferences, measure website activity and assess advertising performance.

These technologies may collect information including:

• IP address;

• device and browser information;

• pages viewed;

• time spent on the website;

• referral or campaign source;

• form and booking interactions; and

• advertising conversion activity.

We may use services including Wix, Google Tag Manager, Google Analytics and Google Ads.

Where available, you can manage non-essential cookies through our cookie preferences tool. You may also adjust cookie controls through your browser, although disabling some cookies may affect website functionality.

​

6. Direct marketing

 

We may send you information about services, offers, timetable updates and studio news where:

• you have consented;

• you would reasonably expect us to do so; or

• the law otherwise permits it.

You may unsubscribe at any time using the unsubscribe option in the communication or by contacting us.

We will not use health or other sensitive information for direct marketing without your consent.

Australian privacy guidance requires direct marketing recipients to be given a simple means of opting out, and health information may only be used for direct marketing with consent.

​

7. Who we disclose information to

 

We may disclose personal information where reasonably necessary to:

• our employees, trainers and authorised contractors;

• GymMaster and other membership or booking system providers;

• Wix and website hosting providers;

• payment processors and direct debit providers;

• Google and other analytics or advertising providers;

• email, SMS and communication providers;

• accountants, lawyers, insurers and professional advisers;

• technology, security and data storage providers;

• government, regulatory, law enforcement or emergency authorities where required; and

• another party involved in a proposed or actual sale, transfer or restructure of the business.

We do not sell or rent personal information.

Third parties may have their own privacy policies and terms. We recommend reviewing those policies when using their platforms.

​

8. Overseas processing and disclosure

 

Some of our technology and service providers operate internationally.

Personal information may therefore be processed, stored or accessed in Australia and overseas, including in New Zealand, the United States, Singapore, Germany, Israel, Ireland and other jurisdictions in which our service providers operate.

We take reasonable steps to work with reputable providers and protect personal information in accordance with applicable legal requirements.

GymMaster identifies hosting locations including Australia, the United States, Singapore and Germany, and Google states that information may be processed on servers around the world. Wix also operates through international companies and affiliates.

​

9. Payment information

 

Payments and direct debits may be processed by third-party payment providers.

SPT may receive transaction details, payment status and limited account information, but generally does not receive or retain complete card details where they are processed directly by the payment provider.

You should review the privacy and security terms of the applicable payment provider.

​

10. Photographs, video and testimonials

 

We will only use identifiable photographs, video footage, testimonials or member stories for marketing where appropriate permission has been obtained.

You may withdraw consent for future use by contacting us. Withdrawal will not necessarily require the removal of material that has already been printed, published or lawfully distributed before the withdrawal was received.

​

11. Children and young people

 

Where a person is under 18, we may require consent or involvement from a parent or legal guardian.

A parent or guardian may contact us regarding personal information held about a child where they are legally authorised to do so.

​

12. Security and retention

 

We take reasonable administrative, physical and technical steps to protect personal information against misuse, interference, loss and unauthorised access, modification or disclosure.

These measures may include:

• restricted system access;

• passwords and access controls;

• secure cloud providers;

• staff confidentiality requirements;

• secure storage of paper records; and

• appropriate deletion or de-identification processes.

No internet transmission or electronic storage system is completely secure. You provide information electronically at your own risk, although we will take reasonable steps to protect it once received.

We retain information only for as long as reasonably necessary for our business, legal, safety, insurance and record-keeping obligations.

​

13. Access and correction

 

You may request access to personal information we hold about you or ask us to correct information that is inaccurate, incomplete or out of date.

We may need to verify your identity before processing a request.

In limited circumstances, the law may permit us to refuse access. Where appropriate, we will explain the reason for the refusal.

​

14. Data breaches

 

If a data breach occurs, we will investigate and respond in accordance with applicable law.

Where the Notifiable Data Breaches scheme applies and a breach is likely to result in serious harm, affected individuals and the Office of the Australian Information Commissioner may need to be notified.

​

15. Complaints

 

Questions, access requests, correction requests or privacy complaints may be directed to:

Privacy Contact: Stefanie Kassis
Email: stef@spttransformation.com
Address: Shop 1 & 4, 129 Victoria Avenue, Chatswood NSW 2067

We will acknowledge and investigate complaints within a reasonable period.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner.

​

16. Changes to this policy

 

We may update this Privacy Policy to reflect changes to our business, systems or legal obligations.

The current version will be published on our website with its effective date.