1. Introduction
At Metafit™, we are committed to protecting the privacy and security of our users. This Privacy Policy outlines how we collect, use, store, and protect your personal information when you use the Metafit™ System and App. By using our services, you agree to the practices described in this policy.
2. Data Collection
As part of the account sign-up process for users of the Metafit™ System, we collect certain personal information, including but not limited to:
- Name
- Email address
- Location
- Other relevant details required for account creation and maintenance
We also collect information when you place an order, fill out a form, or enter information on our website. Additionally, we use third-party services, including Google Analytics and Facebook pixels, to gather information about your usage of our website. This data helps us analyse user behaviour, track marketing effectiveness, and improve our services. The data collected through these tools may include your IP address, browser type, operating system, and other usage data. This information is used in aggregate form and is not linked to any personally identifiable information.
We also utilise Stripe and PayPal as payment processors. When you make a purchase through our website, these third-party services may collect and process your payment information, including credit card details. We do not store your full payment details on our servers. Stripe and PayPal have their own privacy policies and terms of service, which govern the use of your data for payment processing.
The Metafit™ App does not collect any personal data directly from users during their use of the app. However, to ensure proper system functionality, such as preventing fraud, maintaining security, and optimizing performance, the app may store and process your IP address. This IP address is used solely for these operational purposes and is not linked to any other personal data. We do not use IP addresses to track or identify users personally.
3. Data Use and Storage
The data we collect is used solely to:
- Provide, improve, and personalise your experience with the Metafit™ System
- Maintain your account and manage subscriptions
- To send periodic emails regarding your membership, subscription, product orders or other services.
We do not share, sell, or transfer your personal information to any third parties. All data is securely stored within the Metafit™ System and is accessible only by authorised personnel.
4. User Rights
4.1 Account Termination and Data Deletion:
You have the right to terminate your Metafit™ account and request the deletion of your personal data at any time. To do so, please contact our support team at support@metafit-training.com. Upon request, we will delete your account and any associated personal information from our systems.
4.2 Data Access:
You have the right to request a copy of the personal information we hold about you. To request this information, please contact our support team at support@metafit-training.com. We will provide you with a copy of your data in a timely manner.
4.3 Data Adjustment:
You can update or adjust your personal information at any time by accessing your account settings page within the Metafit web system. If you encounter any issues or require assistance, please contact our support team.
5. Security and Confidentiality
We take the security of your personal information seriously. We implement appropriate technical and organisational measures to protect your data from unauthorised access, loss, misuse, or alteration. These measures include encryption, access controls, and regular security audits.
Data Retention Policy
We are committed to retaining your personal information only for as long as necessary to fulfil the purposes for which it was collected, as outlined in this Privacy Policy, or as required by applicable laws and regulations.
Retention Periods
- Account Information: Personal information related to your account, including your name, email address, and subscription details, will be retained for as long as your account is active and for a reasonable period thereafter in case you decide to reactivate your account. We may also retain certain information for legal, audit, or compliance purposes.
- Transaction Data: Information related to your purchases, such as payment details and order history, will be retained for as long as necessary to process your transactions, fulfill our legal obligations, and resolve any disputes.
- Marketing and Communications Data: If you have consented to receive marketing communications from us, we will retain your contact details until you opt out or withdraw your consent. We may also retain records of your communication preferences for compliance purposes.
- Usage Data: Data collected through tools such as Google Analytics and Facebook pixels is generally retained in an aggregated, anonymised format for the purpose of improving our services and marketing efforts. This data is typically stored for a period that allows us to analyse trends and measure performance over time.
Data Deletion
Once the retention period expires, or upon your request for deletion, we will securely delete or anonymise your personal information, ensuring that it cannot be reconstructed or read. In cases where deletion is not possible (for example, if your personal data is stored in backup archives), we will ensure that your data is securely isolated and protected from further processing until deletion is possible.
Legal Obligations
In some instances, we may be required to retain certain information for longer periods due to legal, regulatory, or contractual obligations. In such cases, we will ensure that the retention of your data is in compliance with the applicable laws and that your rights to privacy are upheld.
Furthermore, we manage our data retention practices in accordance with this policy, and we adhere to the specific requirements outlined by relevant data protection laws, including the General Data Protection Regulation (GDPR) for EU users, the California Consumer Privacy Act (CCPA) for California residents and the Australian Privacy Act 1988 as outlined below.
5.1 . GDPR Compliance (European Union Users)
5.1.1 Lawful Basis for Processing:
We collect and process personal data from users in the European Union (EU) only when we have a lawful basis to do so under the General Data Protection Regulation (GDPR). This includes processing that is necessary for the performance of a contract, compliance with a legal obligation, protection of vital interests, consent, and legitimate interests.
5.1.2 User Rights under GDPR:
EU users have specific rights regarding their personal data, including the right to access, rectify, erase, restrict processing, data portability, and the right to object to processing. If you wish to exercise any of these rights, please contact us at support@metafit-training.com.
5.1.3 Data Retention:
Personal data collected from EU users will be retained only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required by law.
5.1.4 International Data Transfers:
If your personal data is transferred outside of the EU, we ensure that such transfers are made in compliance with GDPR requirements, including the use of standard contractual clauses or reliance on an adequacy decision by the European Commission.
5.2 CCPA Compliance (California Users)
5.2.1 Rights under CCPA:
California residents have the right to know what personal information we collect about them, the right to request deletion of their personal data, the right to opt out of the sale of personal information, and the right to non-discrimination for exercising their CCPA rights. To exercise these rights, please contact us at support@metafit-training.com.
5.2.2 Categories of Personal Information Collected:
We collect categories of personal information as defined in the California Consumer Privacy Act (CCPA), which may include identifiers (such as name and email address), commercial information (such as records of products or services purchased), and internet activity (such as browsing history on our website).
5.2.3 No Sale of Personal Information:
We do not sell personal information of California residents to third parties. In the event this policy changes, we will update this clause and provide the necessary opt-out mechanisms in accordance with CCPA requirements.
5.2.4 Verification of Requests:
For your security, we will verify your identity before processing any requests related to your personal data under CCPA.
5.3 Australian Privacy Act 1988 Compliance (Australian Users)
5.3.1 Collection of Personal Information
In accordance with the Australian Privacy Act 1988, we are committed to protecting the privacy of our Australian users. We collect personal information only when it is reasonably necessary for our business functions and activities. The types of personal information we may collect include, but are not limited to, your name, email address, location, and other details relevant to account creation, maintenance, and the services we provide.
5.3.2 Use and Disclosure of Personal Information
Your personal information will be used only for the purposes for which it was collected, such as providing and improving our services, managing your account, and communicating with you. We may also use your information for related purposes that would be reasonably expected by you, such as marketing communications (where you have consented to receive them). We do not share, sell, or disclose your personal information to third parties, except where required or permitted by law, or with your consent.
5.3.3 User Rights under the Australian Privacy Act
Australian users have specific rights regarding their personal information under the Australian Privacy Act 1988, including the right to:
- Access Your Personal Information: You may request access to the personal information we hold about you. We will provide you with a copy of your data in a timely manner.
- Correction of Personal Information: If you believe that any personal information we hold about you is inaccurate, out-of-date, incomplete, or misleading, you may request correction of the information. We will take reasonable steps to correct the data.
- Complaints: If you believe we have breached the Australian Privacy Principles or mishandled your personal information, you may lodge a complaint with us. We take privacy complaints seriously and will address your concerns promptly.
5.3.4 Data Retention and Security
We will retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. We implement appropriate technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, or alteration. These measures include encryption, access controls, and regular security audits.
5.3.5 International Data Transfers
If your personal information is transferred outside of Australia, we will take reasonable steps to ensure that the overseas recipient does not breach the Australian Privacy Principles, unless the transfer is necessary for the performance of our services, or you have consented to the transfer.
6. Data Protection
6.1 Data Minimisation:
We collect and process only the personal data that is necessary for the purposes outlined in our terms and conditions and this privacy policy. We strive to ensure that the data we collect is accurate, up-to-date, and limited to what is necessary for the intended purpose.
6.2 Security Measures:
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration. These measures include encryption, access controls, and regular security audits.
6.3 Data Breach Notification:
In the unlikely event of a data breach that may compromise the security of personal data, we will promptly notify affected users and relevant regulatory authorities as required by law.
6.4 Data Processing Agreements:
If we engage third-party service providers to process personal data on our behalf, we ensure that they are bound by data processing agreements that comply with GDPR, CCPA, and other relevant regulations.
6.5 Children's Privacy
Our services and products are not intended for children under the age of 18. We do not knowingly collect or solicit personal information from anyone under the age of 18. If we become aware that we have inadvertently collected personal information from a child under 18 without verification of parental consent, we will take steps to delete that information promptly. If you believe that we might have any information from or about a child under 18, please contact us at support@metafit-training.com.
7 Cookies and Tracking Technologies
7.1 Use of Cookies
The Metafit™ System and App may use cookies and similar tracking technologies to enhance your user experience, analyse site usage, and assist in our marketing efforts. These technologies may include, but are not limited to:
- Google Analytics: This service helps us understand how visitors interact with our website by collecting and analysing data about user behaviour. Google Analytics uses cookies to track information such as your IP address, browser type, and pages visited. This data is used in aggregate form for statistical purposes and to improve our website's performance.
- Facebook Pixel: This tool allows us to track the effectiveness of our advertising campaigns on Facebook. The Facebook Pixel collects data about your interactions with our website, which may include information such as your IP address, browser type, and user actions (e.g., page visits). This data helps us deliver relevant ads to you on Facebook and measure the success of our campaigns.
7.4 Third-Party Cookies
Some cookies may be placed by third parties on our behalf to provide services such as analytics or advertising. For example, Google Analytics and Facebook Pixel use cookies to collect and report information about your interactions with our website. These third-party cookies are subject to the respective privacy policies of Google and Facebook.
7.3 Managing Cookies
You can manage or disable cookies through your web browser's settings. Please note that disabling cookies may affect your ability to use certain features of our website and app. You can also manage cookie preferences on our website through a cookie consent tool, where available. Additionally, you can opt out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on, and manage your preferences for Facebook ads through your Facebook account settings.
8. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. Any changes will become effective immediately upon posting the revised policy on our website. We will notify users of any significant changes through the Metafit™ App or via email.
9. Contact Us
If you have any questions or concerns about our privacy practices, or if you wish to exercise your rights under GDPR, CCPA, the Australian Privacy Act 1988, or other applicable privacy laws, please contact us using the information below:
- Email: support@metafit-training.com
- Postal Address: 20 Jones Road, Cannonvale, Queensland Australia 4802
- Phone Number: +61 0412 990 602
For any inquiries related to the collection or processing of personal information from children under the age of 18, please contact us at support@metafit-training.com.
Last updated 20-08-2024