Privacy Policy

Who we are

Pious Strength (ABN 14 811 408 041) is a personal training business operated by Sura Katz, based at Warehouse Fitness in Wollongong, New South Wales.

Because we collect and hold health information, we handle your information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

What we collect

Personal information

• Your name, email address and mobile number
• Your training history, goals and session records
• Your billing history and subscription status
• Messages you send us, and our replies

Health information

Health information is treated as sensitive information under the Privacy Act and is subject to stricter handling. We collect:

• Injuries, medical conditions and physical limitations you disclose
• Any medical clearance you provide before training
• Changes to your health you tell us about while training with us

We collect this because we cannot program safely without it, and because the training agreement requires you to disclose it. You are not obliged to give it to us — but we may be unable to train you if you don't.

Payment information

We do not collect, see or store your card details at any point. Payments are handled entirely by Stripe. We can see your name, email address, subscription plan and whether a payment succeeded or failed. We cannot see your card number.

How we collect it

• Directly from you, in conversation and during sessions
• Through the training agreement you accept at checkout
• Through Stripe, when you sign up for a plan
• By text message and email, when you contact us

We collect information from you directly wherever possible. If someone else refers you to us, we will only hold what you confirm yourself.

Why we use it

• To design and adjust your training program
• To train you safely and decide when to modify or decline a session
• To schedule, confirm and reschedule sessions
• To bill you and manage your subscription
• To meet our tax and record-keeping obligations

We do not use your information for anything else without asking you first.

Who else sees it

Your health information is not shared with anyone. It stays between you and your trainer.

Two service providers necessarily handle some of your personal information:

• Stripe — processes payments and stores your name, email and payment method. Stripe's own privacy policy governs what they do with it.
• Cloudflare — hosts this website. Standard web server logs, including your IP address, are generated when you visit.

This site also loads its fonts from Google's font service, which means your IP address reaches Google when the page loads. No cookies are set by this website, and we run no analytics or tracking of any kind.

We would only disclose your information otherwise where the law requires it, or in a genuine emergency where your life or health is at risk.

Information sent overseas

Stripe and Cloudflare are international companies and may store or process information outside Australia, including in the United States and Europe. Where that happens, it is handled under those providers' own privacy commitments.

Your health information is not sent overseas. It is not stored in either of those systems.

How we keep it safe

Client records are kept on password-protected devices and accounts. Health information is only ever accessed by your trainer.

If a data breach occurs that is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner, as required under the Notifiable Data Breaches scheme.

How long we keep it

We keep your records while you are training with us, and for five years afterwards. That period reflects Australian Taxation Office record-keeping requirements and the possibility of a later claim relating to your training.

After that, records are deleted or destroyed.

Seeing and correcting your information

You can ask us at any time for a copy of what we hold about you, and we will provide it within a reasonable time and at no cost.

If anything is wrong or out of date, tell us and we will correct it. If you believe your health record is inaccurate, please raise it — training decisions are made on the basis of that information.

Making a complaint

If you think your privacy has been mishandled, contact Sura first using the details below. We will respond within 30 days.

If you are not satisfied with our response, you can take the matter to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Changes to this policy

If this policy changes, the version number and date at the top of the page will change with it. Existing clients will be told directly about any change that affects how their health information is handled.