1. About this Privacy Policy
This Privacy Policy explains how Mirellique White Works Pty Ltd ("Mirellique White Works", "we", "us" or "our") handles personal information when you visit this website, contact us, enquire about fitness services or otherwise interact with us. We are based at 17 Marrickville Road, Marrickville, NSW 2204, Australia. We aim to handle personal information consistently with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where the EU General Data Protection Regulation (GDPR) or UK GDPR applies to a particular individual or processing activity, this policy also explains the additional rights and safeguards that may apply.
This policy applies only to personal information processed in connection with this website and our related enquiries and services. It does not replace any specific notice that we may provide at the point of collecting information.
2. Privacy administrator and contact
Questions, access requests, correction requests, objections, complaints and other privacy enquiries can be directed to the contact details above. Please provide enough information for us to understand and verify your request without sending unnecessary sensitive information.
3. Personal information we may collect
Depending on how you use the website, we may collect identifiers and contact details such as your name, email address, telephone number and company or organisation name; the contents of messages that you submit through our contact form; service or membership enquiries; records of communications; and technical information that is ordinarily generated when a browser connects to a web server, such as IP address, browser type, device type, operating system, referring page, requested URL, date and time of access and basic security logs.
We do not ask you to provide health information through the general website contact form. If a fitness service later requires health, accessibility or injury information for safety purposes, we will request it separately and provide an appropriate notice and consent mechanism where required. Please do not include medical or other highly sensitive information in the general message field unless we specifically ask for it through a suitable process.
4. How we collect information
We generally collect personal information directly from you when you type it into the website, contact us or communicate with our team. Technical records may be generated automatically by our hosting, network or security systems when the website is requested. We may also receive information from a person acting with your authority, for example where an employer or family member makes a booking enquiry on your behalf.
5. Why we process personal information
We may use personal information to respond to enquiries; provide information about training, memberships, facilities, classes and related services; manage appointments and customer service; maintain records; protect the security, availability and integrity of the website; prevent fraud or misuse; comply with legal obligations; establish, exercise or defend legal claims; improve the clarity and usefulness of our services; and administer requests under privacy law.
GDPR legal bases
Where the GDPR or UK GDPR applies, our legal basis will depend on the context. We may process data because it is necessary to take steps at your request before entering into a contract or to perform a contract; because we have a legitimate interest in answering enquiries, operating and securing our website and managing our business, provided those interests are not overridden by your rights; because processing is necessary to comply with a legal obligation; or because you have given consent where consent is legally required. You may withdraw consent at any time for future processing that depends solely on consent.
6. Data minimisation and purpose limitation
We seek to collect only information that is reasonably necessary for the purpose for which it is requested. We do not use personal information for a materially incompatible purpose unless permitted by law or we provide an additional notice and, where necessary, obtain consent.
7. Disclosure of personal information
We may disclose information to service providers that support website hosting, information technology, security, professional advice, customer administration or communications, but only to the extent reasonably necessary for their role. We may also disclose information where required by law, court order or lawful regulatory request; to protect the rights, safety or property of our customers, staff or others; or in connection with a genuine corporate restructuring, merger, sale or transfer subject to appropriate confidentiality and legal safeguards.
We do not sell personal information. We do not use this website to provide personal information to third-party advertising networks.
8. International transfers
Our primary business is in Australia. Some service providers may store or process information in other countries. Where Australian privacy law requires us to take reasonable steps in relation to an overseas recipient, we will do so. Where the GDPR or UK GDPR applies to a restricted international transfer, we will use a recognised transfer mechanism where required, such as an adequacy decision, standard contractual clauses, the UK International Data Transfer Agreement or another lawful safeguard, together with supplementary measures where appropriate.
9. Retention
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including to respond to an enquiry, maintain appropriate business records, meet tax, accounting, safety and legal obligations, resolve disputes and enforce agreements. Retention periods vary by record type. When information is no longer required, we take reasonable steps to delete, destroy or de-identify it, subject to lawful archival or backup requirements.
10. Security
We use reasonable administrative, technical and organisational safeguards designed to protect personal information against loss, unauthorised access, misuse, interference, alteration or disclosure. These may include access controls, software updates, secure hosting controls, backups and limiting information access to people who need it for legitimate duties. No internet transmission or storage system can be guaranteed to be completely secure, so users should avoid sending unnecessary sensitive information through ordinary web forms.
11. Cookies and local technologies
This website is designed to function without third-party advertising or analytics trackers. Essential browser storage or first-party cookies may be used where technically necessary to provide requested functions, maintain security or remember a preference. More detail is available in our Cookie Policy. If we introduce non-essential cookies in the future, we will update our notices and, where required by law, request consent before those technologies are activated.
12. Your rights under Australian privacy law
Subject to applicable exceptions, you may request access to personal information that we hold about you and request correction if you believe it is inaccurate, out of date, incomplete, irrelevant or misleading. We may need to verify your identity before acting on a request. If we refuse access or correction where the law allows us to do so, we will ordinarily provide reasons and information about available complaint mechanisms.
13. Additional GDPR and UK GDPR rights
Where the GDPR or UK GDPR applies, you may have rights to access personal data; rectify inaccurate data; request erasure; request restriction of processing; object to processing based on legitimate interests; receive certain data in a structured, commonly used and machine-readable format and transmit it to another controller; and withdraw consent where consent is the legal basis. You may also have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not use this website to make such solely automated significant decisions.
These rights are not absolute. Legal exemptions may apply and we may retain information where necessary to establish, exercise or defend legal claims or meet legal obligations.
14. Children and minors
The website provides general information about fitness services and is not intended to solicit personal information directly from young children. Where a service is offered to a minor, appropriate parent or guardian involvement and any required consent will be handled through the relevant service process. If you believe a child has submitted personal information through the general contact form without appropriate authority, please contact us so that we can review the situation.
15. Data breaches
We maintain procedures for assessing suspected data breaches. Where the Australian Notifiable Data Breaches scheme applies and an eligible data breach is likely to result in serious harm, we will take the steps required by law, which may include notifying affected individuals and the Office of the Australian Information Commissioner (OAIC). Where GDPR breach-notification obligations apply, we will also follow the applicable supervisory authority and individual notification requirements.
16. Complaints
Please contact us first if you have a privacy concern so that we can investigate it. We will aim to acknowledge and address complaints within a reasonable period. In Australia, you may be entitled to complain to the OAIC if you remain dissatisfied. Individuals in the EEA or United Kingdom may also have the right to lodge a complaint with the competent data protection supervisory authority in their place of residence, place of work or place of the alleged infringement.
17. Links and third-party services
If the website later links to a third-party site or service, that third party will operate under its own privacy practices. We are not responsible for the privacy content or security practices of an independent third party. You should review the relevant privacy information before providing personal information to another organisation.
18. Changes to this policy
We may update this Privacy Policy to reflect legal, technical or operational changes. The current version published on this website replaces earlier website versions. Material changes may be highlighted where appropriate. This policy was last updated on 8 August 2026.