Privacy Policy

1. Who we are

This Privacy Policy explains how T Facilty Services Pty Ltd (ABN 65 690 011 011), trading as Breathation (“Breathation”, “we”, “us”, “our”), collects, holds, uses, discloses and protects your personal information. Our studio is at 1A/7 The Esplanade, Maroochydore (Cotton Tree), Queensland 4558.

We are bound by the Privacy Act 1988 (Cth) and the thirteen Australian Privacy Principles (APPs). Because we provide a health-related service and collect health information, we treat ourselves as fully covered by the Act and apply the higher standard it sets for sensitive information.

We take your privacy seriously. A breathwork session asks you to be honest about your body, your history and sometimes your emotional state. That trust is the point of the practice, and we protect the information it produces accordingly.

2. What this policy covers

This policy applies to information we collect:

• through this website, breathation.com, and through the Momence app, which we use for booking classes and hiring the studio
• when you book, attend, cancel or enquire about a class, workshop, private session or event
• when you complete our health declaration and waiver
• when you hire our space or enquire about hiring it
• when you email, call, message or DM us, including through social media
• when you subscribe to our mailing list
• when you visit the studio in person

3. What information we collect

3.1 Personal information

Information that identifies you or could reasonably identify you:

• name, preferred name and pronouns (pronouns are optional)
• email address and phone number
• postal or billing address, where required for payment
• date of birth or age confirmation, where we need to verify your age
• emergency contact name and phone number
• your booking, attendance and cancellation history
• payment records (see 3.4 on what we do not hold)
• correspondence between us
• for facilitators hiring the space: business name, ABN, insurance details, certificate of currency, qualifications and references

3.2 Sensitive information, including health information

The Privacy Act treats health information as sensitive information, which attracts stronger protection. Through our health declaration, and sometimes in conversation before or after a session, we may collect information about:

• current or past cardiovascular conditions, including high or low blood pressure
• pregnancy, and stage of pregnancy
• epilepsy, seizure history or fainting history
• asthma and other respiratory conditions
• glaucoma, retinal detachment or recent eye surgery
• recent surgery or physical injury
• diagnosed psychiatric conditions, including psychosis, bipolar disorder, schizophrenia and PTSD
• current medications relevant to the practice
• history of aneurysm or stroke, and osteoporosis
• any other condition you choose to tell us about so we can support you safely

We collect this because breathwork is not suitable for everyone, and knowing your circumstances is how our facilitator keeps you safe in the room. We collect the minimum we reasonably need for that purpose.

We will only collect sensitive information with your consent. You may decline to provide it, but if you do we may not be able to let you take part, because we would be unable to assess whether it is safe for you. That is a safety decision, not a commercial one.

3.3 Information collected automatically

When you use our website we may collect technical information including your IP address, browser type and version, device type, operating system, referring website, pages viewed, time on page and the date and time of your visit. See section 9.

3.4 Payment information: what we do not hold

We do not store your full card number, expiry date or CVC, and we never see them in full. Payments are processed by Stripe via Momence, which is PCI-DSS compliant. We receive only a transaction record: amount, date, outcome and a masked reference such as the last four digits.

3.5 Images and recordings

We may photograph or film in the studio for marketing. We will always ask for your express, separate consent before capturing or publishing any image in which you are identifiable, and you may refuse or withdraw that consent at any time without it affecting your booking. If you change your mind, email us and we will remove the image from any channel we control as soon as reasonably practicable.

This applies equally to images you send us or post yourself: if you tag us or share a photo of yourself in the studio, we will still ask you before we reuse it. The content licence in clause 7.4 of our Website Terms & Conditions does not override this.

3.6 Information about other people

If you give us someone else’s personal information, such as an emergency contact or a person you are buying a gift voucher for, you confirm you have their permission and have told them about this policy.

4. How we collect your information

We collect information directly from you wherever possible: through our website forms, our booking platform, the health declaration, email, phone, social media messages and in person at the studio. We may also collect information from our booking and payments platform (Momence), our payment processor, a person acting on your behalf with your authority, and publicly available sources where we are verifying a facilitator’s business or insurance details.

If we receive personal information we did not ask for and did not need, we will destroy or de-identify it as soon as it is lawful and reasonable to do so.

5. Why we collect, hold, use and disclose your information

1. take, confirm, manage, reschedule and cancel your bookings
2. assess whether it is safe for you to take part in a session, and adapt the session to support you
3. respond to emergencies, including contacting your emergency contact or emergency services
4. process payments, refunds and credits
5. manage class passes, memberships, packs and vouchers
6. send transactional messages such as confirmations, reminders, receipts and schedule changes
7. send marketing communications, where you have consented (section 8)
8. manage space hire bookings, verify hirer insurance and administer hire agreements
9. improve our classes, our website and the studio experience
10. maintain our business records and accounts
11. meet our legal, tax, insurance and record-keeping obligations
12. resolve complaints and disputes, and establish or defend legal claims

We will not use or disclose your information for another purpose unless you would reasonably expect it, you have consented, or we are permitted or required to by law. For sensitive information the test is stricter: the secondary purpose must be directly related to the original one and one you would reasonably expect.

6. Who we share your information with

We do not sell your personal information. Ever. We do not trade or rent mailing lists. We may share your information with:

Independent facilitators who hire our space are separate businesses, responsible for their own privacy compliance and their own participants’ information. When you book directly with a hirer, you are giving your information to them, not to us.

7. Overseas disclosure

Some of the providers above store or process data outside Australia, likely including the United States and possibly the European Union or United Kingdom.

Before disclosing personal information overseas, we take reasonable steps to ensure the recipient does not breach the Australian Privacy Principles, including choosing established providers with published privacy and security commitments and contractual data protection terms. By providing your information and using our booking services, you acknowledge that these disclosures occur.

8. Marketing communications

We will only send you marketing emails or SMS where you have expressly consented (for example, by ticking an unticked opt-in box), or where consent can reasonably be inferred from an existing relationship and the message is about services you would expect.

Every marketing message identifies Breathation and contains a working unsubscribe link. We action unsubscribe requests within five business days, as the Spam Act 2003 (Cth) requires, and usually far faster. Transactional messages (confirmations, reminders, receipts, schedule changes, safety information) are not marketing.

We will never use your health information to target marketing to you. To opt out, use the unsubscribe link or email hello@breathation.com with “Unsubscribe” in the subject line.

9. Cookies, analytics and tracking

You can block or delete cookies in your browser settings. Blocking strictly necessary cookies may break booking. Our booking platform and embedded content (maps, video, the Momence widget) may set their own cookies under their own policies. The Momence timetable also loads a font from Google Fonts, so Google receives your IP address when it shows.

10. How we store and protect your information

• password protection and, where available, multi-factor authentication on all platforms
• access limited to people who need it: health declarations are visible only to the facilitator teaching your session and studio management
• encrypted connections (HTTPS) across the website and booking platform
• reputable third-party providers with their own security programs
• secure storage and destruction of any paper records
• regular review of who has access to what

No method of transmission or storage is completely secure, but we take reasonable steps proportionate to the sensitivity of what we hold. If a data breach is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner under the Notifiable Data Breaches scheme.

11. How long we keep your information

When we no longer need information and are not required to keep it, we destroy or de-identify it.

12. Accessing and correcting your information

You can ask for access to the personal information we hold about you, and ask us to correct it if it is wrong, out of date, incomplete, irrelevant or misleading. Email hello@breathation.com with “Privacy request” in the subject line. We may ask you to verify your identity first; this protects you.

We will respond within 30 days. Access is free, though we may charge a reasonable cost-recovery fee for unusually large requests, and will always tell you the amount first. If we refuse, we will tell you why in writing and how to complain.

13. Anonymity and pseudonyms

Where lawful and practicable, you may deal with us anonymously or under a pseudonym, for example when making a general enquiry. It is not practicable for bookings, health declarations, payments or space hire: we need to know who is in the room, and how to reach someone if something goes wrong.

14. Automated decision-making

Breathation does not use automated decision-making to make decisions that could significantly affect your rights or interests. Health declarations that raise a question are always reviewed by a person, never declined automatically.

15. Children and young people

We do not knowingly collect personal information from anyone under 18 without the consent of a parent or guardian. If you believe we have, contact us and we will delete it.

16. Links to other websites

Our site links to third-party sites, including our booking platform and social media. We are not responsible for their privacy practices. Please read their policies before giving them your information.

17. Complaints

If you think we have breached the Australian Privacy Principles or mishandled your information, please tell us first. Most issues are resolved quickly and directly. Email hello@breathation.com with “Privacy complaint” in the subject line, or write to us at 1A/7 The Esplanade, Maroochydore QLD 4558.

We will acknowledge your complaint within 5 business days and respond in full within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner: online at oaic.gov.au/privacy/privacy-complaints, by phone on 1300 363 992, or by post to GPO Box 5288, Sydney NSW 2001.

18. Changes to this policy

We may update this policy from time to time. The current version is always on this page, with the “last updated” date at the top. If a change materially affects how we handle your information, we will take reasonable steps to tell you, by email or a notice on the website.

19. Contact us

Breathation
1A/7 The Esplanade, Maroochydore (Cotton Tree) QLD 4558
hello@breathation.com