Introduction
At CrossFit United, we are committed to protecting the privacy of our members and visitors to our website. This privacy policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR).
Data Controller
CrossFit United is the data controller of the personal data we collect from you. Our contact details are:
CrossFit United Shop 3/38 Electra St, Bundaberg Central QLD 4670
Types of Data We Collect
We collect personal data from our members and visitors to our website. The types of data we collect may include:
- Name
- Address
- Email address
- Phone number
- Date of birth
- Health and fitness information
- Payment information
How We Use Your Data
We use your personal data to:
- Manage your membership
- Provide you with the services and products you have requested
- Communicate with you about your membership and our services
- Improve our services and products
- Analyse data to better understand our members and visitors
Legal Basis for Processing Your Data
We process your personal data on the following legal bases:
- Consent: We will only process your personal data with your consent. You have the right to withdraw your consent at any time.
- Contract: We will process your personal data to fulfill our contractual obligations with you.
- Legitimate interests: We will process your personal data to pursue our legitimate interests, such as improving our services and products, and analysing data to better understand our members and visitors.
Sharing Your Data
We will not sell, rent, or lease your personal data to third parties. We may share your personal data with the following:
- Our affiliates, subsidiaries, and service providers who provide services to us
- Law enforcement agencies, regulators, or other government entities when required to comply with a legal obligation or court order
International Transfers of Your Data
We may transfer your personal data outside of Australia. If we do, we will ensure that appropriate safeguards are in place to protect your personal data in accordance with the GDPR.
Your Rights
Under the GDPR, you have the following rights:
- Right to access: You have the right to access your personal data.
- Right to rectification: You have the right to have your personal data corrected if it is inaccurate or incomplete.
- Right to erasure: You have the right to have your personal data deleted.
- Right to restrict processing: You have the right to restrict the processing of your personal data.
- Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
- Right to object: You have the right to object to the processing of your personal data.
- Right to withdraw consent: You have the right to withdraw your consent at any time.
Security of Your Data
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, disclosure, or destruction. We regularly review and update our security measures to ensure the safety of your personal data.
Retention of Your Data
We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law.
Changes to Our Privacy Policy
We may update our privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on our website. We encourage you to review our privacy policy periodically.
Contact Us
If you have any questions or concerns about our privacy policy or the way we handle your personal data, please contact us.