Policy – Privacy

Marlin Coast Swimming & Fitness
Privacy Policy
Customers and Operations
Bajada Pty Ltd | Last updated: October 2026
1. Our Commitment to Privacy
Marlin Coast Swimming & Fitness (“the Company”) is operated by Bajada Pty Ltd and recognises the importance of protecting your personal information. We are committed to complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy outlines how we collect, use, disclose, and protect the information of our members, customers and their families.
2. Information We Collect
To provide swimming and fitness services, we collect various types of information, including:
  • Contact Details: Name, address, postcode, email, and phone numbers.
  • Identification: Date of birth and gender.
  • Child Details: Your child’s name, age and swimming ability, so we can place them in the right class.
  • Financial Information: Credit card or bank account details for direct debit processing.
  • Health Information: Medical conditions, allergies, or physical limitations that may affect your safety in the water or gym. We only collect this information with your consent.
  • Digital Data: IP addresses or “cookies” when visiting our website.
  • Emergency Contact: Details of a parent, guardian, or next of kin.
3. How We Collect Information
We collect information directly from you when you:
  • Enrol in swim lessons or purchase a membership.
  • Complete a paper or digital registration form.
  • Submit an enquiry or free trial form, including forms on Facebook and Instagram.
  • Use our member portals provided by iClassPro, Xplor Recreation and Gymdesk.
  • Communicate with us via email, phone, or social media.
  • Visit one of our facilities.
4. Use of Third-Party Providers
We utilise specialist third-party providers to manage our operations securely.
  • Xplor Recreation: For member management, bookings, and attendance tracking.
  • iClassPro: For member management, bookings, and attendance tracking.
  • Gymdesk: For member management, bookings, and attendance tracking.
  • WorldPay: For the secure processing of Direct Debit payments.
  • DebitSuccess: For the secure processing of Direct Debit payments.
  • Meta (Facebook and Instagram): For enquiry and free trial forms you submit through these platforms.
Note: We do not store full credit card numbers on our local servers; these are managed by these PCI-compliant providers.
We do not sell your personal information to anyone.
5. Disclosure to Local Councils
As we lease and manage facilities on behalf of various Local Councils, we may be required to share de-identified statistical data (e.g., visitation numbers) with them. We will not share your personal identity with the Council unless required for insurance purposes, injury reporting, or by law.
6. How We Use Your Information
We use your information to:
  • Respond to your enquiry or free trial request and place your child in the right class.
  • Process payments and manage your account.
  • Ensure the safety of participants (health/medical alerts).
  • Communicate facility closures, schedule changes, or emergencies.
  • Send you news and offers (see section 10).
  • Improve our aquatic programs and fitness services.
7. Data Security and Storage
We take reasonable steps to protect your information from unauthorised access or loss.
  • Digital Records: Stored in secure, password-protected cloud environments (Xplor/DebitSuccess, iClassPro/WorldPay, Gymdesk).
  • Physical Records: Any paper forms are kept in locked filing cabinets with restricted staff access.
  • Destruction: We destroy or de-identify information when it is no longer needed for business or legal purposes.
8. Privacy Breach Protocols (Data Breach Policy)
In accordance with the Notifiable Data Breaches (NDB) scheme, we have strict protocols in place:
  1. Assessment: If we suspect a data breach (e.g., unauthorised access to Xplor, iClassPro or Gymdesk, or lost devices), we will conduct a rapid assessment within 30 days.
  2. Containment: We will take immediate steps to limit the breach (e.g., changing passwords, locking accounts).
  3. Notification: If the breach is likely to result in serious harm to you, we will:
    • Notify you directly via your registered email or phone number.
    • Notify the Office of the Australian Information Commissioner (OAIC).
  4. Action: We will provide you with advice on what steps you should take.
9. Access and Correction
You have the right to access the personal information we hold about you. Most information can be updated directly through your Xplor Recreation, Gymdesk or iClassPro member portal. Alternatively, you can contact us (see section 12) to request corrections.
10. Marketing, Photos and Video
  • Marketing: We may send you news and offers about our programs and facilities. You can opt out at any time by using the unsubscribe link in our emails or by contacting us.
  • Photos and Video: We will not use photos or video of your child in our marketing without your permission.
11. Information Stored Overseas
Some of the third-party providers we use, including our booking and membership platforms and Meta, may store or process your information on servers located outside Australia, such as in the United States. We choose providers that take reasonable steps to keep your information secure.
12. Questions and Complaints
If you have a question about this policy or a concern about how we have handled your personal information, please contact us at [email protected]. We will look into your concern and aim to respond within 30 days.
If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or on 1300 363 992.