Privacy Policy

This Privacy Policy applies to My Next Gym (‘we’, ‘us’, ‘our’), which operates the online fitness business directory at mynextgym.com.au (‘the Directory’).

This Policy applies to all personal information we collect from users of the Directory (‘Users’), businesses and individuals managing listings (‘Listing Holders’), and any other individuals who interact with us.

By using the Directory or providing your personal information to us, you consent to the collection, use, and disclosure of your information in accordance with this Policy. If you do not agree with this Policy, you should not use the Directory.

We may update this Policy from time to time. The current version is always available at mynextgym.com.au/privacy. We will notify you of material changes by posting a notice on the Directory.

We may collect the following categories of personal information:

From Users (members of the public using the Directory):

• Name and contact details (if you submit a review, enquiry, or create an account)
• Email address (for account registration, newsletters, or notifications)
• Location data (suburb, postcode, or general region — to provide localised search results)
• Device and browser information, IP address, and usage data (collected automatically via cookies and analytics tools)
• Any other information you voluntarily provide when contacting us

From Listing Holders (gyms, fitness centres, personal trainers):

• Business name, ABN, and registered address
• Contact person name, email address, and phone number
• Business description, services, pricing, and operating hours
• Qualifications, certifications, and accreditation details
• Profile photos or images (where uploaded)
• Billing and payment details (processed securely by our payment provider — we do not store full card details)

We do not intentionally collect sensitive information (as defined in the Privacy Act) such as health, biometric, racial, or religious information. If you believe we have inadvertently collected sensitive information, please contact us immediately.

We collect personal information in the following ways:

• Directly from you when you create an account, submit or claim a listing, complete a contact form, submit a review, or otherwise interact with the Directory
• Automatically when you visit the Directory, via cookies, web beacons, analytics tools (including Google Analytics), and server logs
• From publicly available sources, such as business websites, ASIC registers, or publicly listed contact information, for the purpose of populating Unverified Listings
• From third-party data providers who supply business listing data
• From other users, where they submit information about a business in a review or listing submission

We collect and use personal information only for purposes that are directly related to our functions and activities. These include:

• Providing, operating, and improving the Directory and its features
• Displaying business listings and enabling Users to find gyms and personal trainers
• Creating and managing User accounts and Listing Holder accounts
• Responding to enquiries, complaints, and support requests
• Processing listing subscription payments
• Sending transactional communications (account confirmations, listing updates, payment receipts)
• Sending marketing communications, including newsletters and promotional offers — only where you have opted in or we are otherwise permitted to do so under applicable law
• Conducting analytics to understand how the Directory is used and to improve our services
• Detecting and preventing fraud, abuse, and security incidents
• Complying with our legal obligations

We will not use your personal information for any purpose that is incompatible with the purpose for which it was collected, unless you consent or we are required or authorised by law to do so.

We do not sell, rent, or trade your personal information to third parties. We may disclose your personal information in the following limited circumstances:

• To service providers and contractors who assist us in operating the Directory (for example, web hosting providers, email service providers, analytics providers, payment processors) — these parties are bound by confidentiality obligations and may only use your information to provide services to us
• To other Users, to the extent that your listing information is publicly displayed on the Directory
• To regulatory authorities, law enforcement, or courts where required or authorised by law
• In connection with a business sale, merger, or acquisition — where we will notify affected individuals
• With your express consent

Where we disclose personal information to overseas recipients (for example, cloud hosting providers), we take reasonable steps to ensure those recipients handle your information consistently with the Australian Privacy Principles. By using the Directory, you consent to such overseas disclosure where necessary.

We use cookies, web beacons, and similar tracking technologies to enhance your experience on the Directory. Cookies are small text files placed on your device.

We use the following types of cookies:

• Essential cookies — required for the Directory to function correctly (for example, session management and security)
• Analytics cookies — to understand how Users interact with the Directory (for example, Google Analytics)
• Preference cookies — to remember your settings and preferences
• Marketing cookies — to deliver relevant advertising, where applicable

You can control or disable cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Directory. By continuing to use the Directory after being notified of our cookie use, you consent to our use of cookies as described.

We take reasonable steps to protect the personal information we hold from misuse, interference, loss, and from unauthorised access, modification, or disclosure. Our security measures include:

• Encryption of data in transit using industry-standard TLS/SSL protocols
• Secure storage of data with access controls and authentication
• Regular security assessments and updates
• Restricting access to personal information to authorised personnel only

In the event of a data breach that is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme under the Privacy Act.

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. In general:

• Account and listing information is retained for the duration of your account or listing, and for a reasonable period thereafter for legal and administrative purposes
• Review and user-generated content is retained until removed at your request or at our discretion
• Analytics and log data is typically retained for up to 26 months
• Financial and transaction records are retained for a minimum of 7 years as required by Australian law

When personal information is no longer required, we take reasonable steps to destroy it or ensure it is de-identified.

Under the Australian Privacy Principles, you have the following rights in relation to your personal information:

• Access — you may request access to the personal information we hold about you
• Correction — you may request that we correct personal information that is inaccurate, out of date, incomplete, or misleading
• Opt-out of marketing — you may unsubscribe from marketing communications at any time using the unsubscribe link in any email or by contacting us
• Listing removal — if your personal information appears in an Unverified Listing, you may request its removal or correction
• Complaint — if you believe we have breached the APPs, you may lodge a complaint with us or with the OAIC

To exercise any of these rights, please contact us using the details in Section 12. We will respond to all requests within 30 days. In some circumstances, we may be unable to provide access or require verification of your identity before doing so.

The Directory is not directed at children under the age of 15. We do not knowingly collect personal information from children under 15. If we become aware that we have collected personal information from a child under 15 without verified parental consent, we will take steps to delete that information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

The Directory may contain links to third-party websites, including the websites of listed gyms and personal trainers. We are not responsible for the privacy practices or content of those sites. We encourage you to read the privacy policies of any third-party sites you visit.

If you have any questions about this Privacy Policy, wish to access or correct your personal information, or wish to make a privacy complaint, please contact our Privacy Officer:

If you are not satisfied with our response, you may escalate your complaint to the Office of the Australian Information Commissioner (OAIC):