VEESHA YOGA & WELLNESS
Privacy Policy
Veesha Yoga & Wellness respects your privacy. This policy explains how we collect, hold, use and share personal information when you visit our studio or website, make an enquiry, book a class, join a membership, attend an event, use the sauna or healing room, or otherwise interact with us.
1. About this policy
In this policy, “Veesha”, “we”, “us” and “our” mean Veesha Yoga & Wellness, located at Unit 152/150 Palmers Road, Truganina VIC 3029. This policy applies to our website (veesha.com.au), studio, booking and membership services, workshops, events, community programs and direct communications.
We are committed to handling personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and the Health Records Act 2001 (Vic) and its Health Privacy Principles (HPPs).
This policy does not form part of any contract and does not replace any waiver, informed consent, membership terms, collection notice or other notice we may give you for a specific service.
2. The information we collect
Depending on how you interact with Veesha, we may collect:
· identity and contact details, such as your name, date of birth, address, email address, phone number and preferred pronouns;
· account, booking and membership information, including bookings, attendance, waitlists, cancellations, no-shows, membership status, purchases, guest passes and communication preferences;
· payment and transaction information, such as amounts paid, payment status, refunds and limited payment details. Full card details are ordinarily processed by our booking or payment provider rather than stored by Veesha;
· health and safety information, such as injuries, medical conditions, pregnancy, medications, allergies, accessibility needs, movement limitations, wellbeing goals, emergency contact details and responses to waivers or pre-exercise questions;
· records connected with services, such as teacher observations, incident reports, sauna use, personal guidance sessions, sound healing or mindfulness sessions, and requests for modifications or support;
· information about children or young people attending our programs, together with parent or guardian details and consent;
· communications and enquiry information, including emails, texts, social media messages, survey responses, reviews, complaints and feedback;
· photographs, video or audio recordings where you have agreed to their capture or use; and
· technical and website information, such as IP address, device and browser information, pages viewed, referring pages, cookie identifiers and interactions with our website or advertising.
Health and other sensitive information
Health information is sensitive information. We collect it only where it is reasonably necessary for our services and safety, and with your consent unless the law permits or requires collection without consent. Please tell us only information that is relevant to your safe participation or the service you are seeking.
If you do not provide information that is reasonably necessary, we may be unable to safely provide a class, membership, sauna session, event or other service.
3. How we collect information
We may collect personal information:
· directly from you when you complete a form or waiver, create an account, book or attend a class, purchase a membership or pass, contact us, participate in a session, enter a promotion or respond to a survey;
· from a parent, guardian, emergency contact or authorised representative;
· through our website, which is hosted on Squarespace, and our booking and studio management platform, Arketa;
· through third-party channels you choose to use, such as Meta lead forms, Instagram, Facebook, WhatsApp, ClassPass, event platforms or referral partners;
· from our teachers, facilitators and contractors where information is relevant to attendance, safety, an incident, a complaint or service delivery; and
· automatically through cookies, pixels and similar technologies when you use our website or interact with our online advertising.
If someone provides us with information about another person, they must have authority to do so and, where required, make that person aware of this policy.
4. Why we collect and use information
We may collect, hold and use personal information to:
· provide and manage classes, memberships, workshops, events, sauna bookings, personal sessions and other services;
· assess whether a service can be provided safely, offer reasonable modifications and respond to health or safety incidents;
· manage bookings, payments, credits, cancellations, attendance, enquiries, accounts and customer support;
· communicate operational information, including booking confirmations, waitlist updates, timetable changes, class cancellations, membership notices and safety information;
· personalise and improve our services, timetable, website, communications and client experience;
· send news, offers and event information where you have consented or where otherwise permitted by law;
· manage our teachers, contractors, suppliers, insurance, accounting, administration, legal obligations and dispute resolution;
· prevent fraud, misuse, security incidents and breaches of our terms; and
· comply with law, court orders and lawful requests, and establish, exercise or defend legal claims.
We may also use information for a secondary purpose where you would reasonably expect that use and it is related, or for sensitive information directly related, to the original purpose; where you consent; or where otherwise permitted or required by law.
5. When we share information
We may disclose personal information, only as reasonably necessary, to:
· Veesha teachers, facilitators, reception or administration personnel and contractors who need it to provide a service or manage safety;
· service providers that support our website, bookings, payments, customer communications, email or SMS, analytics, advertising, IT, data storage and business administration;
· professional advisers and service partners, such as accountants, lawyers, insurers and technology advisers;
· a parent, guardian, authorised representative or emergency contact where authorised or reasonably necessary for safety;
· emergency services, health practitioners or other persons where necessary to lessen or prevent a serious threat to life, health or safety and the law allows it;
· government agencies, regulators, law enforcement bodies, courts or other parties where required or authorised by law; and
· a purchaser or successor if Veesha undergoes a genuine sale, restructure or transfer, subject to appropriate confidentiality and privacy safeguards.
We do not sell or rent client lists or health information. We do not disclose sensitive information for third-party marketing without consent.
6. Service providers and overseas processing
Our website is hosted by Squarespace and our booking and studio management services are provided through Arketa. We may also use payment processors, email and SMS providers, cloud storage, Meta services, Google services, analytics tools and other business software. These providers have their own privacy terms and may collect information directly from you.
Some providers store or process information outside Australia. The countries may vary as providers change their infrastructure, but are likely to include the United States. Where we disclose personal information to an overseas recipient, we take reasonable steps required by applicable law to protect the information. Overseas privacy laws may differ from Australian law.
7. Marketing and communications
We may send marketing by email, SMS or other channels where you have consented, or where the law otherwise permits it. We do not use health information for direct marketing unless you have specifically consented to that use.
You can opt out at any time by using the unsubscribe link, replying STOP where available, or contacting hello@veesha.com.au. We will action a valid electronic unsubscribe request within five business days. Opting out of marketing does not stop service messages that are necessary for bookings, memberships, safety or transactions.
8. Cookies, analytics and online advertising
Our website and service providers may use cookies, tracking pixels and similar technologies for site functionality, security, analytics, remembering preferences and measuring or personalising advertising. If enabled, these tools may include Squarespace analytics, Google services and Meta advertising tools. They may collect identifiers, IP address, device information, pages visited and interactions with our website or advertisements.
You can manage cookies through your browser or device settings and use the privacy and advertising controls offered by the relevant provider. Blocking some cookies may affect website functions. You may also contact us to object to the use of your personal information for targeted direct marketing.
9. Photographs, video and testimonials
We may invite clients to appear in photographs, videos, audio recordings, testimonials or social media content. We will seek consent before using identifiable client content for promotion. You may decline without affecting your access to our services. You may withdraw consent for future use by contacting us, although we may not be able to retrieve material already lawfully published or shared.
For children and young people, we seek permission from a parent or guardian and, where appropriate, the young person.
10. Children and young people
A parent or guardian should create accounts, complete forms and provide required consents for a child or young person who is not able to provide informed consent themselves. We may collect the child’s identity, age, attendance and relevant health or safety information to provide the program safely.
If we become aware that personal information has been provided without the required authority, we will take reasonable steps to address it, which may include deleting the information where lawful.
11. Security
We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Measures may include access restrictions, password and account controls, multi-factor authentication where available, confidentiality obligations, secure service providers, staff awareness and incident-response procedures.
No internet transmission or storage system is completely secure. Please protect your account credentials and contact us promptly if you suspect unauthorised access.
12. Retention and disposal
We retain personal information only for as long as it is needed for the purpose for which it was collected, to provide services, meet legal and insurance requirements, resolve disputes or protect legitimate business interests.
Where Veesha is a health service provider for the relevant record, Victorian law generally requires health information to be retained for at least seven years after the last health service, or for a person who was under 18 when last provided the service, until they reach 25. Other records are retained for the periods required by applicable tax, corporate, employment, consumer and limitation laws.
When information is no longer required, we take reasonable steps to securely destroy it or permanently de-identify it, unless the law requires or permits continued retention. Copies may remain in secure backups until they are overwritten in the ordinary course.
13. Accessing or correcting your information
You may ask to access personal information or health information we hold about you, or ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. You may also ask us to transfer health information to another health service provider where the law provides that right.
Send your request to hello@veesha.com.au. We may need to verify your identity and clarify the scope of the request. There is no fee to make a request or to request correction. A reasonable access fee may apply where permitted by law; if so, we will explain it before proceeding.
We will respond within a reasonable period. In limited circumstances, the law allows us to refuse access or correction. If we refuse, we will generally provide written reasons and information about complaint options, unless it would be unreasonable or unlawful to do so.
14. Anonymity and pseudonyms
Where lawful and practicable, you may make a general enquiry or interact with us without identifying yourself or by using a pseudonym. We will usually need accurate identity and contact information for bookings, memberships, payments, emergency management, services involving health information and requests to access records.
15. Data incidents
If we become aware of a suspected privacy or data-security incident, we will assess and respond to it. Where the Notifiable Data Breaches scheme or another law applies, we will notify affected individuals and the relevant regulator when required.
16. Privacy questions and complaints
If you have a privacy question or believe we have mishandled your information, please contact us and describe your concern. We will acknowledge a complaint within seven business days and aim to provide a substantive response within 30 days, although complex matters may take longer.
Privacy contact: Studio Manager, Veesha Yoga & Wellness
Email: hello@veesha.com.au
Phone: 0450 956 051
Address: Unit 152/150 Palmers Road, Truganina VIC 3029
If you are not satisfied with our response, you may contact the regulator relevant to your concern:
17. Changes to this policy
We may update this policy when our services, systems or legal obligations change. The current version will be published on our website with its effective date. If a change materially affects how we handle information already collected, we will take reasonable steps to notify affected people where appropriate.
Move. Breathe. Belong.