Privacy Policy
Elite Surf Lab (“we”, “our”, “us”) is committed to protecting the privacy of the athletes, clients, and individuals (“you”, “your”) whose personal and payment information we collect in the course of our surf coaching services.
This Privacy Policy explains how we collect, use, store, and disclose your personal information, how we protect it, your rights, and how you can contact us about privacy matters.
1. Scope & Legal Basis
We are bound by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs) when dealing with personal information, insofar as the law applies to our business.
If we handle health or medical information, or if other specific laws apply in certain circumstances, additional obligations may arise under New South Wales privacy laws.
2. What Information We Collect
We may collect the following kinds of personal information via physical forms or otherwise:
Contact details: name, address, phone number, email address
Payment information: credit/debit card or bank account details (handled securely via Stripe)
Date of birth, emergency contact information
Medical or health information relevant to surf coaching (e.g. allergies, injuries, fitness level)
Other information necessary to deliver coaching services safely and effectively
3. Why We Collect It
We collect your personal and payment information for purposes including, but not limited to:
Providing surf coaching services to you
Scheduling sessions, communicating with you, and managing your bookings
Processing payments (via Stripe)
Ensuring your safety—monitoring and managing health, medical conditions, and emergency needs
Complying with legal and insurance requirements
Customer service, feedback, and quality improvement
We only collect information that is reasonably necessary for these purposes.
4. How We Collect Information
Primarily via physical forms completed by you (in person).
Occasionally via electronic means (email, online forms) if needed.
From third parties only where you have given consent or it is otherwise permitted by law.
5. Storage & Security
Payment information is processed and stored securely using Stripe, a secure payment platform. We do not store full credit card details ourselves.
Personal and health information is stored in secure physical or electronic form. Access is limited to authorised personnel.
We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification, or disclosure.
We retain your information only as long as necessary for the purposes we collected it, and in accordance with any legal or insurance requirements. Once it is no longer required, we securely destroy or de-identify it.
6. Use and Disclosure
Your information will be used for the purposes described above. We may disclose your information to:
Stripe (for payment processing)
Medical professionals or emergency services if needed (with your consent or as required by law)
Our employees, contractors, or agents who help deliver our services or manage administrative functions, provided they are bound by confidentiality
We will not sell your personal information to third parties for marketing or other unrelated purposes without your express consent.
If required by law, we may disclose information in response to lawful requests (e.g. court orders).
7. Cross-Border Disclosure
If your personal information is transferred outside Australia (for example, as part of Stripe’s operations or cloud storage), we will ensure that such overseas recipients handle your information in a manner consistent with the Privacy Act and the APPs.
8. Your Rights
You have certain rights regarding your personal information:
Access: You may request access to the personal information we hold about you.
Correction: You may request correction of any inaccurate or out-of-date information.
Consent: Where processing is based on your consent, you may withdraw that consent at any time.
Complaint: If you believe we have not handled your information in accordance with this policy or the law, you can contact us. If not satisfied, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).
9. Data Breach Notification
In the event of a data breach likely to result in serious harm, we will comply with the Notifiable Data Breaches (NDB) scheme under the Privacy Act: we will notify affected individuals and the OAIC as required by law.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will publish the updated version on our website (if applicable) and/or make it available upon request.
11. Contact Us
If you have any questions about this Privacy Policy, or wish to access or correct your personal information, please contact:
Elite Surf Lab
Acknowledgement & Consent
By engaging our services, completing our forms, and providing your personal and payment information, you acknowledge that you have read this Privacy Policy, understand how your information will be used and stored, and consent to the practices described herein.