Privacy Policy
Last updated 11 August 2026
SISU CANBERRA PTY LTD (ABN 80 683 195 084) trading as SiSU Canberra respects your privacy and is committed to protecting your personal information. This policy explains how we collect, use, disclose, store and protect personal information and health information across our website, bookings, memberships, classes, wellness services, psychology and allied health services, programs, communications and in-studio interactions. SiSU handles personal information in accordance with the Privacy Act 1988 (Cth), the Australian Privacy Principles and, where applicable, the Health Records (Privacy and Access) Act 1997 (ACT).
What Information We Collect
Depending on how you interact with SiSU, we may collect information including:
Identity and contact information: name; date of birth; address; telephone number; email address; emergency contact details.
Booking and membership information: classes attended; bookings; cancellations; membership information; class pack purchases; payment history; appointment information; preferences relevant to your services.
Health and wellbeing information. Where necessary to provide a service, we may collect information such as:
- injuries;
- medical conditions;
- physical limitations;
- pregnancy-related information;
- health history;
- medication information;
- fitness and movement information;
- physical or psychological wellbeing information;
- information relevant to your participation in sauna, contrast therapy or other wellness services;
- information relevant to providing psychological or allied health services.
Health information is sensitive information and receives additional privacy protections under Australian privacy law.
Psychology and Clinical Information
Where you receive psychology or another regulated health service through SiSU, we may collect and hold additional clinical information. This may include:
- referral information;
- presenting concerns;
- clinical history;
- assessment information;
- treatment information;
- clinical notes;
- correspondence;
- reports;
- information provided by other health professionals;
- Medicare, insurer or funding information where relevant;
- information provided with your consent by another person or organisation.
Clinical information is handled confidentially and in accordance with applicable privacy legislation, professional obligations and the requirements applying to the relevant practitioner. Psychology records may be subject to additional professional and health-record requirements.
How We Collect Information
We may collect information directly from you when you:
- create an account;
- make a booking;
- purchase a membership or class pack;
- complete a health screening questionnaire;
- attend a class or appointment;
- communicate with us;
- subscribe to our mailing list;
- contact us by telephone, email or social media;
- complete a form;
- participate in a program or workshop.
We may also receive information from third parties where permitted or required by law. For example, information may be received from referring healthcare professionals; insurers; employers or funding bodies; Medicare or other relevant agencies; payment providers; booking platforms; and service providers acting on our behalf.
Where practicable, we will tell you when information is being collected from a third party.
Why We Collect Personal Information
We collect information for purposes including providing our services; processing bookings; administering memberships; processing payments; managing appointments; providing safe and appropriate movement and wellness services; providing psychological and allied health services; communicating with you; responding to enquiries; managing cancellations; maintaining client records; improving our services; managing safety; complying with legal and professional obligations; processing insurance or funding arrangements; managing complaints; preventing fraud or misuse; sending marketing communications where permitted; and understanding how our website and services are used.
We aim to collect only information reasonably necessary for the relevant purpose.
Health Information
Where health information is collected to provide a health service, SiSU will handle that information in accordance with applicable privacy requirements.
Health information will generally only be collected where it is reasonably necessary for the service being provided, or where permitted or required by law.
You may choose not to provide certain information. However, if information is reasonably necessary to safely provide a service, we may be unable to provide that service without it.
Use and Disclosure of Information
We may use or disclose personal information where reasonably necessary for the purposes for which it was collected. This may include disclosure to:
- SiSU employees and contractors;
- instructors and practitioners;
- psychologists and other health professionals;
- administrative staff;
- booking and membership platforms;
- payment processors;
- IT and technology providers;
- insurers;
- professional advisers;
- healthcare providers involved in your care;
- government agencies;
- Medicare or funding bodies where applicable;
- emergency services where appropriate;
- other parties where you have provided consent.
We will not sell your health information. We will not use sensitive health information for unrelated marketing purposes without appropriate authority or consent.
Marketing Communications
If you have provided appropriate consent or where otherwise permitted by law, we may send you SiSU news, class information, special offers, promotions, events, wellness information, membership information and other communications relevant to SiSU services.
You can unsubscribe from marketing communications at any time by using the unsubscribe function in the communication or contacting us.
Unsubscribing from marketing communications will not affect essential service communications such as booking confirmations, appointment reminders or membership administration.
Cookies and Website Information
Our website may collect information about how visitors use the website. This may include IP address; browser type; device information; pages visited; approximate location information; referring website; date and time of visits; and interactions with website content.
We may use cookies, analytics tools and similar technologies to operate, secure and improve our website and understand how visitors use it. Some website services may be provided by third-party technology providers.
We use Google Analytics to understand how visitors use our website, such as which pages are viewed and which links are clicked. Google Analytics uses cookies and collects information such as your device, browser, approximate location and the pages you visit. This information is processed by Google, including on servers outside Australia. You can learn how Google uses this information at policies.google.com/technologies/partner-sites, and you can opt out of Google Analytics using the browser add-on at tools.google.com/dlpage/gaoptout.
Third-Party Services
SiSU uses third-party providers to help operate the business. These may include providers of booking and membership management; payment processing; email and SMS; website hosting; website analytics; cloud storage; IT support; client management systems; accounting; and marketing services.
These providers may process information on our behalf. Where appropriate, we take reasonable steps to ensure that third-party providers handle personal information consistently with applicable privacy requirements.
Overseas Disclosure and Storage
Some third-party technology and service providers may store or process information outside Australia. Where personal information is disclosed overseas, SiSU will take reasonable steps to comply with applicable Australian privacy requirements.
Depending on the provider and service involved, information may be stored or processed in countries including the United States or other jurisdictions where technology providers operate.
Where you use a third-party platform directly, that platform may also have its own privacy policy and terms.
Security of Personal Information
SiSU takes reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.
Security measures may include password protection; access controls; secure systems; restricted access to sensitive information; staff confidentiality obligations; secure electronic storage; and physical security measures.
No electronic storage or transmission system can be guaranteed to be completely secure.
Retention of Information
We retain personal information for as long as reasonably necessary to provide services, meet legal and professional obligations, resolve disputes, maintain appropriate records and fulfil legitimate business purposes.
Health and clinical records may be required to be retained for periods prescribed by applicable law or professional requirements.
When information is no longer required, we will take reasonable steps to securely destroy or de-identify it.
Access to Your Information
You may request access to personal information held by SiSU about you. You may also request access to health information or records where applicable under relevant privacy legislation.
Requests should be made in writing to info@sisucanberra.com.au. We may need to verify your identity before providing access.
In some circumstances, access may be refused or limited where permitted by law. Where access is refused, we will generally provide an explanation unless the law prevents us from doing so.
Correcting Your Information
If you believe information held by SiSU is inaccurate, incomplete, out of date or misleading, please contact us. We will take reasonable steps to correct information where appropriate.
You may also request that a statement be attached to your information where permitted by law.
Health Records in the ACT
SiSU recognises that health records are subject to additional obligations under applicable ACT legislation, including the Health Records (Privacy and Access) Act 1997 (ACT).
Where that legislation applies, SiSU will handle health records in accordance with the applicable health privacy principles and access requirements.
Disclosure Without Consent
There may be circumstances where SiSU is permitted or required to use or disclose information without your consent. Examples may include:
- where required by law;
- where necessary to lessen or prevent a serious threat to a person's life, health or safety;
- where required for legal proceedings;
- where required by a court or tribunal;
- where otherwise authorised by applicable privacy legislation;
- where disclosure is necessary for a permitted health situation.
Psychologists and other health professionals may also have specific professional and legal obligations relating to confidentiality and disclosure.
Emergency Situations
If we reasonably believe that disclosure of information is necessary to protect someone's life, health or safety, we may disclose relevant information to emergency services or another appropriate person where permitted by law.
We will only disclose information reasonably necessary for the relevant purpose.
Photography and Video
SiSU may take photographs or videos at the studio, events and classes for promotional, educational and social media purposes. Where an identifiable person is intended to be used in promotional material, we will seek appropriate consent.
You may contact us if you do not wish to appear in promotional photography or video. Clients are not permitted to photograph, film or record other clients or practitioners without their consent.
Children's Information
Where SiSU provides services to children or young people, we may collect information from the child, parent, guardian, referring professional or other appropriate person.
We take additional care when handling information relating to children. Where appropriate, consent will be obtained from a parent or legal guardian.
Complaints About Privacy
If you have a concern about how SiSU has handled your personal information, please contact us first. We will investigate your concern and aim to resolve it promptly and fairly.
Privacy complaints should be directed to the Privacy Officer:
SISU CANBERRA PTY LTD, ABN 80 683 195 084
7/42 Geils Court, Deakin ACT 2600
Phone: (02) 6198 8695
Email: info@sisucanberra.com.au
If you are not satisfied with our response, you may have the right to make a complaint to the relevant privacy regulator. For matters covered by the Privacy Act 1988 (Cth), this may include the Office of the Australian Information Commissioner (OAIC). For applicable ACT health record matters, complaints may also be made to the ACT Health Services Commissioner.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our services, technology, privacy practices or legal obligations. The current version will be published on the SiSU Canberra website.
Contact Us
If you have questions about this Privacy Policy or how SiSU handles your information, please contact:
SISU CANBERRA PTY LTD, ABN 80 683 195 084
7/42 Geils Court, Deakin ACT 2600
Phone: (02) 6198 8695
Email: info@sisucanberra.com.au