Privacy Policy

Information We Collect

We collect personal information that is reasonably necessary to provide our movement classes and related services. The types of information we may collect include:

• Personal identification information: Your full name, email address, and phone number, collected when you register, book a class, or contact us.
• Health information: Medical clearance documentation for Recovery Movement classes. This sensitive information is collected only where required for your safety and is handled with the highest level of care in accordance with the Australian Privacy Principles.
• Booking information: Class preferences, attendance history, and scheduling data collected through our booking system.
• Payment information: Payment details are processed securely through third-party payment providers. We do not store your full card details on our systems.
• Communications: Records of correspondence between you and UNDRGRND Movement, including enquiries, feedback, and support requests.

How We Use Information

We use the personal information we collect for the following purposes:

• Class bookings and schedule management: Processing your bookings, managing class capacity, and maintaining your attendance records.
• Communication: Sending you information about your classes, schedule changes, cancellations, and studio updates. You may opt out of non-essential communications at any time.
• Safety and medical clearance verification: Ensuring that students attending Recovery Movement classes have appropriate medical clearance from their treating practitioner.
• Service improvement: Understanding how our services are used so we can improve the quality and range of programs we offer.
• Legal compliance: Meeting our obligations under Australian law, including tax, financial record-keeping, and child safety requirements.
• Emergency contact: In the event of an injury or medical emergency during a class, we may use your emergency contact information to notify your nominated person.

We will not use your personal information for any purpose that is not described in this policy without first obtaining your consent.

How We Store Information

We take the security of your personal information seriously. The following measures are in place to protect your data:

• Secure digital systems: Personal information is stored in password-protected, encrypted digital systems with access restricted to authorised staff only.
• Limited access: Only staff members who require access to your information to perform their duties are permitted to view it.
• Data retention: We retain your personal information for as long as you are an active client of UNDRGRND Movement. Financial records are retained for a minimum of seven years in accordance with Australian tax law. Health information is retained only for as long as it is required for safety purposes.
• No sale of data: We do not sell, rent, or share your personal information with third parties for marketing purposes.
• Data breach response: In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) in accordance with the Notifiable Data Breaches scheme.

Third Parties

We use a small number of trusted third-party service providers to operate our business. These providers may handle your personal information as part of their service:

• Class Manager: Our booking system, which processes class registrations, attendance records, and related booking data. Class Manager operates under its own privacy policy.
• Email service provider: Used to send you booking confirmations, class reminders, and studio communications.
• Payment processor: Handles secure payment transactions. We use a PCI-DSS compliant payment provider. We do not store your full payment card details.
• Website hosting provider: Hosts the UNDRGRND Movement website and associated files.

All third-party service providers are bound by confidentiality obligations and are required to handle your personal information in accordance with Australian privacy law. We do not permit third parties to use your personal information for their own marketing purposes.

We will not disclose your personal information to any other third party without your consent, except where required by law or to protect the safety of an individual.

Your Rights

Under the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth), you have the following rights in relation to your personal information:

• Right to access: You may request access to the personal information we hold about you. We will respond to access requests within 30 days.
• Right to correction: If you believe that any personal information we hold about you is inaccurate, incomplete, or out of date, you may request that we correct it.
• Right to deletion: You may request that we delete your personal information. We will comply with deletion requests where we are not legally required to retain the information.
• Right to opt out: You may opt out of non-essential communications (such as newsletters or promotional messages) at any time by contacting us or using the unsubscribe link in any marketing email.
• Right to complain: If you believe we have mishandled your personal information, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

To exercise any of your rights, please contact us using the details in Section 7 below.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Post the updated policy on this page with a new "Last Updated" date.
• Notify active clients of material changes via email where appropriate.

Your continued use of UNDRGRND Movement's services after a policy update has been posted constitutes your acceptance of the revised policy. We encourage you to review this page periodically to stay informed about how we protect your information.

If you do not agree with any changes to this policy, you may request deletion of your personal information by contacting us.

Contact for Privacy Concerns

If you have any questions about this Privacy Policy, wish to exercise your rights, or wish to make a privacy complaint, please contact us:

We will respond to all privacy enquiries within 30 days of receipt.

If you are not satisfied with our response to a privacy complaint, you may contact the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992
• Post: GPO Box 5218, Sydney NSW 2001

The OAIC can investigate complaints about the handling of personal information by organisations covered by the Privacy Act 1988.