01
Scope and commitment
This policy applies to personal information handled by Darius Partridge in connection with operational technology, business consulting, online presence and branding, fitness coaching, and Enhanced Training.
I follow the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), the Notifiable Data Breaches scheme, and other applicable privacy or health-information requirements where they apply. Where an exemption may be available, I aim to use the APPs as a minimum practical standard.
02
Information I may collect
- Identity and contact information: name, email, phone number, business, role, social handle, address, and communication preferences.
- Enquiry and relationship information: messages, meeting notes, proposals, contracts, feedback, support history, and correspondence.
- Business-client information: business plans, operational information, staff or customer information supplied for an engagement, system details, analytics, access records, and commercially confidential material.
- Fitness and health information: goals, training history, injuries, health limitations, lifestyle factors, measurements, progress records, photographs, and other information you choose to provide for coaching.
- Transaction and administration information: invoices, payment status, and records required for accounting, tax, insurance, or dispute management. Full payment-card details are handled by payment providers rather than stored directly by me.
- Website information: IP address, device and browser details, referring pages, pages viewed, approximate location, cookies, analytics events, and security logs.
I generally collect information directly from you. I may also receive it from an authorised representative, a business client, a service provider, publicly available sources, or another person where you have consented or collection is otherwise permitted.
03
Why information is used
- To respond to enquiries, assess fit, provide quotes, and manage client relationships.
- To deliver consulting, website, branding, operational technology, and fitness services.
- To personalise coaching, monitor progress, identify relevant limitations, and support safe program decisions.
- To operate, secure, measure, and improve websites, services, communications, and client systems.
- To invoice, keep business records, enforce agreements, manage risk, and meet legal obligations.
- To send marketing only where consent exists or it is otherwise permitted, with a clear way to unsubscribe.
I do not sell personal information. I do not use sensitive fitness or health information for unrelated advertising.
04
Business-client data protection
When a business client gives me access to its systems or personal information, I treat that information as confidential and use it only to deliver the agreed work, comply with law, protect security, or follow documented client instructions.
- Access is limited to what is reasonably necessary for the engagement and removed when no longer required.
- Client credentials should be shared through an agreed secure method, not ordinary website forms or unencrypted messages.
- Client data is not combined with unrelated client data or used to build unrelated marketing lists.
- Contractors or specialist providers receive access only where necessary and are expected to maintain confidentiality and appropriate safeguards.
- At the end of an engagement, client data is returned, deleted, or retained only where agreed or legally required.
- Suspected security incidents affecting client data are escalated promptly and managed with the client.
05
Fitness-coaching and health information
Health information is sensitive information. I collect it only when it is reasonably necessary for coaching and with your consent, unless another lawful basis applies.
- You should provide accurate information about relevant injuries, conditions, limitations, and professional advice.
- Information is used to tailor training, communicate with you, monitor progress, and manage foreseeable coaching risks.
- I do not disclose health information to employers, family members, other clients, or marketers without consent unless required or authorised by law, or necessary to address a serious threat to health or safety.
- Fitness coaching is not medical diagnosis or treatment. Where appropriate, I may recommend that you seek advice from a qualified health professional.
- Progress photographs, testimonials, and identifiable results are not published without separate, specific consent that can be withdrawn for future use.
- Services for a minor require consent and appropriate involvement from a parent or legal guardian.
06
Service providers, disclosure, and overseas processing
I may use trusted providers for website hosting, forms, email, scheduling, cloud storage, analytics, accounting, payments, communications, and professional advice. They receive only the information reasonably required for their role.
Some providers may store or process information outside Australia, including in the United States or other countries where their infrastructure or support teams operate. Provider locations can change. I take reasonable steps when selecting and configuring providers, but overseas recipients may be subject to different laws. You can request the current categories of providers by emailing me.
Information may also be disclosed where you consent, where required or authorised by law, to prevent or investigate suspected wrongdoing, or to reduce a serious threat to health, safety, or security.
07
Security and data breaches
I use safeguards appropriate to the sensitivity and context of the information, including access controls, multi-factor authentication where available, secure service providers, device and software updates, backups, confidentiality controls, and secure deletion practices.
No system is completely secure. If a suspected breach occurs, I will act to contain it, assess the affected information and likely harm, remediate risks, document the response, and notify affected people and the Office of the Australian Information Commissioner where required by the Notifiable Data Breaches scheme.
08
Retention and deletion
I keep personal information only for as long as reasonably needed for the purpose collected, an active client relationship, legal and accounting obligations, insurance, security, or dispute management. Retention is reviewed against the sensitivity of the information and the risk of keeping it.
- Unsuccessful or inactive enquiries are generally reviewed for deletion after 24 months.
- Core consulting, coaching, contract, invoice, and consent records may be retained for up to seven years after the relationship ends, or longer where law or an active dispute requires it.
- Temporary access credentials and working copies are removed as soon as they are no longer needed.
- Health information, progress media, and client-supplied personal data are deleted or de-identified earlier where there is no continuing need to retain them.
09
Access, correction, consent, and choices
You may ask to access or correct personal information I hold about you, withdraw consent where processing depends on consent, opt out of marketing, or request deletion where retention is not legally or operationally required. I may need to verify your identity before acting.
I will respond within a reasonable period, generally within 30 days. If a request cannot be completed, I will explain why where required and outline available complaint options.
10
Questions and privacy complaints
Book a private discussion through my 30-minute meeting calendar. Please avoid placing sensitive details in the booking note; we can discuss your concern and the outcome you are seeking privately. I will acknowledge and investigate the matter, usually responding within 30 days.
If you are not satisfied and the Privacy Act applies, you may contact the Office of the Australian Information Commissioner.
This policy may be updated when services, providers, or legal requirements change. Material changes will be reflected by a revised effective date.