Privacy Policy
Last updated 8 September 2026
src/lib/legal.ts.Who we are
OFFPEAK is operated by [YOUR LEGAL NAME OR COMPANY], ABN [ABN]. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Contact us at [YOUR EMAIL].
What we collect
When you book: your name, email address, and the city you tell us you live in.
When you pay: your payment is processed by Stripe. We never see or store your full card number. Stripe gives us the postcode and country your bank holds for the card, and a code that lets us recognise the same card again without identifying it.
When you sign a gym's conditions of entry: the name you type, the date and time, your IP address, and a copy of the text you agreed to.
When you use the site: basic technical information such as browser type and general location, through our hosting provider.
Why we collect it
- To take your booking and tell the gym you're coming.
- To work out your price, including our repeat-visit and home-city rules.
- To check that the home city you give us matches the city your bank holds for your card, so the service is used by people away from home as intended.
- To send your booking confirmation and door code.
- To handle refunds, questions and problems.
- To meet our legal and tax obligations.
Who we share it with
The gym you book. Your name and email so they can admit you, and your signature if you signed their conditions of entry. They must only use it for that visit and must not add you to a marketing list without your consent.
Stripe, to process payment. Stripe's own privacy policy applies.
Our technical suppliers — hosting, database and email delivery. They store data on our behalf and cannot use it for anything else.
Anyone else only where the law requires it.
We do not sell your information and we do not display advertising.
Where it goes
Some of our suppliers store data outside Australia, including in the United States and Europe. By using OFFPEAK you consent to your information being handled overseas. We take reasonable steps to use suppliers with appropriate protections, but overseas providers may not be bound by Australian privacy law.
How long we keep it
Booking records, including waiver signatures, are kept for seven years, because our repeat-visit rules depend on booking history and because tax and limitation periods require it. Gym enquiry details are kept until you ask us to delete them.
Seeing it or getting rid of it
Email [YOUR EMAIL] and you can:
- ask what we hold about you;
- ask us to correct anything wrong;
- ask us to delete your information, except where we must keep it for tax or legal reasons;
- complain about how we've handled it.
We'll respond within 30 days. If you're not happy with our answer you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
Keeping it safe
We use encrypted connections, restrict access to what's needed, and never store full card numbers. No system is perfectly secure, but if a breach happens that's likely to cause you serious harm we'll tell you and the Commissioner, as the law requires.
Cookies
We use only what's needed to keep you logged in and to make bookings work. We don't use advertising or tracking cookies.
Changes
We'll post any update here with a new date at the top.