PRIVACY POLICY

Last updated: 24/04/2026

​

Three28.Pilates (“we”, “us”, “our”) is committed to protecting your privacy and handling personal information responsibly and transparently. This Privacy Policy explains how we collect, use, store, and protect personal information in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).

​

This policy applies to all services provided by Three28.Pilates, including Reformer Pilates, Infrared Sauna, and Kids Ballet classes, as well as use of our website, booking systems, and communications.

​

By engaging with our services, you agree to the collection and use of information as described in this policy.

We may collect personal information including, but not limited to:

• Full name

• Email address

• Phone number

• Date of birth

• Emergency contact details

• Health and injury information relevant to safe participation (including pregnancy information where disclosed)

• Payment and transaction details

• Booking, attendance, and purchase history

• Communications with us (email, phone, social media or website enquiries)

Kids Ballet (children’s information):

When enrolling a child, we may collect:

• Child’s full name and age/date of birth

• Parent/guardian name and contact details

• Emergency contact information

• Relevant medical information for safe participation

• Attendance and class enrolment records

Membership Verification (partner programmes):

Where required for eligibility or partnered programmes, we may collect:

• Club/organisation membership verification details (e.g., Cabramatta Rugby membership number)

• A photographic identification image/headshot provided for verification purposes

We only collect information that is reasonably necessary for the operation of our business

Personal information may be collected when you:

• Create an account or make a booking

• Purchase a class pack or membership

• Enrol a child in Kids Ballet

• Complete an intake, waiver, consent, or verification form

• Contact us via email, phone, social media, or our website

• Participate in classes or studio activities

• Subscribe to our mailing list or promotions

We use personal information to:

• Provide and manage Reformer Pilates, Infrared Sauna, and Kids Ballet services

• Process bookings, purchases, and payments

• Communicate with you about bookings, schedules, changes, studio updates, and important notices

• Support health and safety during sessions (including appropriate modifications)

• Verify eligibility for specific memberships/offers where required (e.g., Cabramatta Rugby membership verification)

• Improve our services and customer experience

• Comply with legal and regulatory obligations

ID headshots/verification images are used only for verification and security purposes and are not used for marketing unless we have your separate express consent.

We take children’s privacy seriously.

• Personal information relating to children is collected only with the consent of a parent or legal guardian

• Parents or guardians are responsible for providing accurate information on behalf of their child

• Children’s information is not used for marketing purposes and is not shared without permission, except where required by law

Parents may request access to, or correction of, their child’s personal information at any time.

Sensitive information (such as health or injury details) is collected only when voluntarily provided and with consent. This information is used solely to:

• Ensure safe participation in classes

• Provide appropriate instruction or modifications

• Meet insurance and legal requirements

Our studio premises are monitored by closed‑circuit television (CCTV) cameras for safety, security, and incident management purposes.

​

7.1 Location of Cameras

Cameras may operate in common areas such as:

• Reception

• Entrances and exits

• Training areas

Cameras are not installed in private areas such as bathrooms or change rooms.

​

7.2 Use of Footage

CCTV footage:

• Is used solely for security and safety purposes

• Is stored securely

• Is accessed only by authorised personnel

• May be disclosed where required or authorised by law

By entering our studio, you acknowledge and consent to CCTV monitoring in accordance with this Privacy Policy.

To create and manage memberships and comply with third‑party requirements, we may collect:

• A photograph of a valid government‑issued ID (e.g. driver licence or passport); and

• A headshot photograph of you.

This information is collected with your consent.

Where required, your identification and headshot photograph may be collected and used for the purpose of:

• Creating

• Verifying

• Managing

a membership with Cabramatta Rugby League.

Your information may be disclosed to Cabramatta Rugby League only for these purposes.

We take reasonable steps to protect personal information from misuse, loss, unauthorised access, or disclosure, including:

• Secure digital systems and platforms

• Restricted staff access to personal data

• Use of reputable third‑party software with security safeguards

When information is no longer required, it is securely destroyed or de‑identified.

We do not sell, rent, or trade personal information.

Information may be shared with trusted third parties where necessary, including:

• Booking and payment service providers

• Professional advisers (accountants, insurers, legal advisers)

• Government or regulatory authorities where required by law

All third parties are required to handle personal information securely and in accordance with applicable privacy laws.

You may request access to, or correction of, your personal information (or your child’s information) by contacting us. We will respond within a reasonable timeframe and in accordance with Australian Privacy Principles.

Our website may use cookies and similar technologies to improve functionality and user experience. You may disable cookies via your browser settings if you prefer.

​From time to time, we may send updates about classes, services, or studio information. You can opt out of marketing communications at any time by:

• Using the unsubscribe link in emails

• Contacting us directly

We use third-party service providers to help us operate our business and deliver our services. This includes our online booking system provider, Studiobookingonline.com.

Studiobookingonline.com Ltd provides our appointment scheduling and booking platform. When you make a booking or interact with our booking system, your personal information may be processed through Studiobookingonline.com on our behalf.

In this relationship:

• Three28 Pilates acts as the data controller, and

• Studiobookingonline.com acts as a data processor.

Studiobookingonline.com processes personal data strictly in accordance with our instructions and in line with their Privacy Policy and Data Processing Agreement.

This may include processing information such as your name, contact details, booking history, and payment-related information to facilitate bookings, manage appointments, and support our services.

Studiobookingonline.com may store or process data in accordance with applicable data protection laws, including international data transfer requirements.

For more information, please refer to Studiobookingonline.com’s Privacy Policy:

https://www.studiobookings.com/privacy-policy

We may update this Privacy Policy from time to time. The most current version will always be published on our website. Continued use of our services indicates acceptance of any updates.

If you have any questions about this Privacy Policy or how your information is handled, please contact us:

Email: hello@three28pilates.com.au
Website: www.three28pilates.com.au