EB & FLO WELLNESS

PRIVACY POLICY

Eb and Flo Wellness is operated by Sherri May Rainbow (ABN 96 879 144 648) (“we, us, our”). We are committed to protecting the Personal Information of our members, website visitors and other individuals we deal with. This Privacy Policy explains how we collect, hold, use and disclose Personal Information, and sets out your rights in relation to that information. 

We comply with the Privacy Act 1988 (Cth) (“Privacy Act”) and the Australian Privacy Principles (“APPs”) contained in that Act. Because we provide a health-related service (Pilates) and collect Health Information about our members, we are bound by the Privacy Act regardless of our business size. 

In addition to the Privacy Act, we handle Health Information in accordance with any applicable State or Territory health records legislation. If you are located in Tasmania, your Health Information may also be subject to relevant State legislation. 

1.   WHAT PERSONAL INFORMATION WE COLLECT

1.1   Types of information

We may collect the following types of Personal Information: 

  • Identity and contact information — including your name, email address, phone number and mailing address; 

  • Business information — including your business name and ABN if you have provided these to us; 

  • Account and membership information — including your membership type, booking history, login credentials and account preferences; 

  • Health and medical information — including information about your physical health, fitness levels, pre-existing injuries or conditions and medical clearances, which you provide when signing up for or participating in our Pilates classes; 

  • Financial information — including payment card details (processed securely through our third-party payment processor; we do not store full card details on our own systems), transaction history and billing records; 

  • Technical and usage information — including your IP address, browser type, device information, pages visited on our Website and time of access; and 

  • Correspondence — including emails, enquiries or other communications you send us. 

1.2   Health and Sensitive Information

Health Information is classified as Sensitive Information under the Privacy Act and the APPs. We collect Health Information (including information about injuries, medical conditions and fitness levels) because it is directly relevant to the safe delivery of our Pilates services. We will only collect this information with your consent and will take additional steps to protect it. 

1.3   Children’s information

Our Membership is only open to persons aged 18 years and over (or persons under 18 with parental or guardian consent). If we become aware that we have inadvertently collected Personal Information from a child under 18 without appropriate parental or guardian consent, we will take steps to delete that information promptly. If you are a parent or guardian and believe we hold Personal Information about your child without consent, please contact us at hello.ebandflo@gmail.com. 

1.4   How we collect information

We collect Personal Information: 

  • directly from you when you sign up for a Membership, create an account, book a class, communicate with us or use our Website; 

  • from third-party platforms we use to deliver our services, including YourReformer and our studio booking app, to the extent those platforms share information with us in accordance with their own terms; and 

  • automatically through cookies and similar technologies when you use our Website (see clause 8 below). 

1.5   Dealing with us anonymously

Where it is lawful and practicable to do so, you may deal with us anonymously or using a pseudonym — for example, when making a general enquiry about our services. However, we will usually need to identify you to provide our Membership, deliver our Pilates services safely, process payments or respond to certain requests, and in those cases we cannot deal with you anonymously. 

2.   WHY WE COLLECT AND USE YOUR PERSONAL INFORMATION

We collect and use Personal Information for the following purposes: 

  • to provide, manage and administer your Membership and access to our Digital Pilates Studio; 

  • to process payments and manage billing; 

  • to communicate with you about your Membership, classes, bookings and any changes to our services; 

  • to assess your suitability to participate in our Pilates classes and to keep you safe during participation (Health Information); 

  • to send you service-related communications such as booking confirmations and account notifications; 

  • to send you promotional communications and updates about Eb and Flo Wellness; any commercial electronic message we send will identify us as the sender and include a functional unsubscribe facility, and you may opt out at any time — see clause 6; 

  • to improve our Website and services through analysis of usage data; 

  • to comply with our legal obligations; and 

  • for any other purpose you have consented to or that is otherwise permitted by the APPs. 

3.   DISCLOSURE OF YOUR PERSONAL INFORMATION

3.1   Who we share information with

We may disclose your Personal Information to: 

  • third-party service providers who assist us in operating our business, including our website host, booking platform (studio booking app), digital studio platform (YourReformer) and payment processor — these providers are only given access to information necessary for the services they provide to us; 

  • professional advisers including our lawyers and accountants, where necessary; 

  • law enforcement agencies, courts or other government bodies where required or authorised by law; and 

  • any other third party with your consent. 

3.2   Overseas disclosure

Some of our third-party service providers may be located or store data outside Australia. Where practicable, the countries in which such recipients are likely to be located are [INSERT COUNTRIES - e.g., United States]. Where we disclose your Personal Information to an overseas recipient, we will take reasonable steps to ensure that the recipient handles it in a manner consistent with the APPs. By providing your Personal Information to us, you consent to it being disclosed to overseas recipients in these circumstances. 

3.3   No sale of Personal Information

We do not sell, rent or trade your Personal Information to any third party for their own marketing or commercial purposes. 

4.   HOW WE PROTECT YOUR PERSONAL INFORMATION

We take reasonable steps to protect the Personal Information we hold from misuse, interference, loss, and unauthorised access, modification or disclosure. These steps include: 

  • using secure, password-protected systems to store member and account information; 

  • using third-party payment processors that handle financial information through secure, encrypted channels (we do not store full card numbers on our own systems); 

  • limiting access to Personal Information to staff and contractors who need it to perform their duties; and 

  • using reasonable technical and organisational measures to protect our Website and systems. 

We cannot, however, guarantee the absolute security of any information transmitted over the internet. While we take reasonable precautions, you transmit information to us at your own risk. 

Data breaches

If we become aware of a data breach that is likely to result in serious harm to any individual whose Personal Information we hold, we will assess the breach and, where required, notify affected individuals and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act. We will take reasonable steps to contain the breach and mitigate any resulting harm. 

5.   RETENTION OF PERSONAL INFORMATION

We retain Personal Information for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements. When Personal Information is no longer required, we will take reasonable steps to destroy or de-identify it securely. 

Health Information we collect in connection with your participation in our Pilates classes will generally be retained for a minimum of seven (7) years after the last service we provide to you, consistent with recommended practice for health service providers. 

6.   MARKETING COMMUNICATIONS

With your consent, we may use your contact information to send you information about our services, promotions and updates. You may opt out of receiving marketing communications at any time by: 

  • clicking the “unsubscribe” link in any marketing email we send you; or 

  • contacting us at hello.ebandflo@gmail.com. 

We will process opt-out requests promptly. Please note that even if you opt out of marketing communications, we may still send you service-related communications (such as booking confirmations and account notifications). 

7.   YOUR RIGHTS

7.1   Access

You have the right to request access to the Personal Information we hold about you. We will provide access to your information within a reasonable time, subject to any applicable exceptions under the Privacy Act. We may charge a reasonable fee for providing access in some cases. 

7.2   Correction

If you believe that any Personal Information we hold about you is inaccurate, incomplete or out of date, you may ask us to correct it. We will correct information promptly if we agree it is inaccurate, or if we do not agree, we will note your request against the relevant record. 

7.3   Accuracy of your information

We take reasonable steps to ensure that the Personal Information we collect, use and disclose is accurate, up to date, complete and relevant, having regard to the purpose for which it is held. If your details change, please let us know so we can update our records. 

7.4   How to make a request

To make an access or correction request, please contact us at hello.ebandflo@gmail.com. We will respond to your request within 30 days. 

8.   COOKIES AND WEBSITE ANALYTICS

Our Website may use cookies and similar tracking technologies to enhance your browsing experience and collect usage information. Cookies are small data files stored on your device. We may use: 

  • essential cookies — necessary for the Website to function correctly; 

  • analytics cookies — to help us understand how visitors use our Website (for example, which pages are most popular); and 

  • functionality cookies — to remember your preferences and settings. 

You can set your browser to refuse cookies or to alert you when cookies are being sent. However, some parts of our Website may not function correctly if you disable cookies. 

9.   COMPLAINTS

If you believe we have handled your Personal Information in a manner that is inconsistent with the Privacy Act or the APPs, we encourage you to contact us in the first instance so that we can seek to resolve your concern. 

Please send any privacy complaint in writing to hello.ebandflo@gmail.com. We will acknowledge your complaint within five (5) Business Days and aim to respond substantively within 30 days. 

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992. 

10.   CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, our services or applicable law. We will post any updated Policy on our Website. The date at the bottom of this page shows when the Policy was last updated. We encourage you to review this Policy periodically. 

11.   CONTACT US

Eb and Flo Wellness

Sherri May Rainbow 

ABN 96 879 144 648 

Email: hello.ebandflo@gmail.com

Website: https://www.ebandflowellness.com.au/

Tasmania, Australia 

DEFINITIONS

APPs means the Australian Privacy Principles set out in Schedule 1 of the Privacy Act 1988 (Cth).  

Business Day means a day that is not a Saturday, Sunday or public holiday in Tasmania, Australia. 

Health Information has the meaning given in the Privacy Act 1988 (Cth), and includes information about an individual’s physical or mental health, disabilities, health services received and any other health-related information.  

Personal Information has the meaning given in the Privacy Act 1988 (Cth), and means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not the information or opinion is true and whether or not recorded in a material form. 

Privacy Act means the Privacy Act 1988 (Cth). 

Sensitive Information has the meaning given in the Privacy Act 1988 (Cth), and includes Health Information, racial or ethnic origin, political opinions, religious beliefs, sexual orientation and criminal record information.  

We, us, our means Sherri May Rainbow trading as Eb and Flo Wellness (ABN 96 879 144 648) and includes any of our employees, agents, partners and contractors.  

Website means https://www.ebandflowellness.com.au/ and all pages, content and services available on it. 

Last updated: 16 July 2026