Privacy Policy

Introduction

Performance Hub and its subsidiaries and affiliates (collectively referred to as Performance Hub) are committed to managing personal information in accordance with relevant local privacy and data protection laws which apply to us such as the Australian Privacy Principles under the Privacy Act 1988 (Cth), the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable privacy laws.

This document sets out our policies for managing your personal information and is referred to as our Privacy Policy. In this Privacy Policy, "we" and "us" refers to Performance Hub and "you" refers to any individual about whom we collect personal information.

This Privacy Policy applies to all personal information collected by us, or submitted to us, whether offline or online, including personal information collected or submitted through our website performancehub.co (Website), through our official social media channel pages which we control, as well as through HTML-formatted email messages or SMS messages that we send to you.

Terms Which May Apply

Terms may apply to you and the information we hold about you. For example:

Our Terms and Conditions Agreement which generally applies:

• If you are a Client and have purchased services directly from the Performance Hub, or one of our Partners
• You are a fitness service provider and you have otherwise been given access to our services as an 'end user' because a related company has entered into arrangements with us as a Client which permits you to access our services (End User)

What Information Does Performance Hub Collect About You?

Members of Clients and End Users: If your fitness service provider is a Client or End User of ours, we may collect personal details such as name, email address, phone number, gender, date of birth, and health information like weight, medical history, and fitness metrics when you sign up or interact with your fitness service provider.

We will only collect personal information which is reasonably necessary for your fitness service provider to provide you with products or services. The information we collect will vary depending on the circumstances of collection and the purpose for which we are dealing with you, but will typically include:

• Personal details, such as your name, title, email address, postal address, and phone number
• Biometric details such as a photo of your face
• Gender, date of birth, communication preferences and any additional field or properties that a Client of End User of ours makes available for entry
• Geolocation information, IP addresses, the type of browser and operating system you are using, the third party website from which your visit originated, the domain name of your internet service provider, the search terms you use on our Website, the specific web pages you visit, and the duration of your visits
• Information about your relationship with your fitness service provider such as membership details, and visit history

In some circumstances, we may collect health information about you to allow you and your fitness provider to track your fitness. The types of health information we generally collect includes information relating to:

• Your weight and body measurements
• Your medical history
• Your smoker status
• Whether you are pregnant
• Whether you are on any medication
• Your general fitness, such as heart rate, running times, and weights lifted

Generally, we collect personal information about you from our Clients and End Users where you have provided that information to them for the purpose of obtaining their services or products. Please refer to the privacy policies of your respective fitness service providers for information about how they handle your personal information.

In some circumstances, we may collect personal information directly from you, such as when you make an enquiry about personal information, we hold about you.

We do not collect or hold any credit card details. We partner with trusted payment gateway providers including Stripe to process credit card details. For more information about how our payment gateway partners collect, hold, use disclose and otherwise process your card details we recommend you carefully review their privacy policies and applicable terms and conditions.

Clients and End Users: We collect business-related information including contact details, business name, and services provided when you enquire about or use our services.

The type of personal information that we collect will vary depending on the circumstances of collection and the kind of Service that you request from us, but will typically include business related personal information such as:

• Contact details, such as your name, title, email address, postal address, and phone number
• Professional details, such as your business name, business number, business address and contact details, the services or products you provide, as well as details of your employer, employees, affiliates, business partners, and/or Members
• Any additional personal information you provide to us, or authorise us to collect, as part of your interaction with Performance Hub

Visitors to our websites: The way in which we handle the personal information of visitors to our websites is discussed below.

Other Individuals: We may collect personal information about other individuals who are not our Clients, End Users or a Member. This includes members of the public who participate in events we are involved with; or members who visit the premises of a client; individual service providers and contractors of Performance Hub; and other individuals who interact with Performance Hub on a commercial basis. The kinds of personal information we collect will depend on the capacity in which you are dealing with Performance Hub. Generally, it may include your name, contact details, biometric details such as a photo of your face, and information regarding our or our clients interactions and transactions with you.

What Happens If You Don't Provide Your Personal Information?

You can decline to provide personal information, but this may prevent us and our clients from providing some or all services. Please contact us with any concerns.

How and Why Does Performance Hub Collect and Use Your Personal Information?

We collect information necessary to carry out our business, manage Client and End User needs, and provide services including software and consulting. Purposes include providing products/services, managing relationships, and processing payments.

Performance Hub also collects and uses personal information for market research purposes and to innovate our delivery of products and services.

We may collect personal information directly from you or indirectly – depending on our relationship with you. For example, Performance Hub generally collects business related personal information directly from you if you are a Client or End User.

However, if you are a Member and in some cases an End User, we collect personal information about you indirectly. For example, Performance Hub generally collects personal information from our Clients or End Users who provide us with the personal information of their Members to allow us to provide our services to them.

Please check the privacy policies of your fitness providers to learn about how they handle, use, disclose or otherwise process the personal information they hold about you.

How Does Performance Hub Interact With You?

You may visit our Website anonymously. We use cookies to collect device and browsing information. Our Website uses Google Analytics and other user experience tools to analyze usage anonymously. If you identify yourself (for example, by providing your contact details in an enquiry), any personal information you provide to Performance Hub will be managed in accordance with this Privacy Policy.

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Specific information about how we use such technologies and how you can refuse certain cookies is set out in our Cookie Policy.

Performance Hub's Website may contain links to third-party websites. Performance Hub is not responsible for the content or privacy practices of websites that are linked to our Website.

In addition to the technologies outlined above, Performance Hub may also collect information on behalf of our clients and their end users when delivering services to fitness facilities. This may include data relating to non-members who access or interact with a client’s premises, for example, through visits to the gym or attendance at events.

Such data may include closed-circuit television (CCTV) footage and associated metadata, including AI-generated anonymised insights (such as movement patterns or occupancy analytics) derived from CCTV systems deployed within a facility. This information is used strictly for service provision purposes, such as enhancing security, improving operational efficiency, or supporting staff-free access solutions.

Please be aware that in these instances, Performance Hub is acting as a service provider to the fitness facility, and the facility is the data controller. We recommend that visitors review the privacy policy of the specific gym, studio, or fitness provider they are visiting to understand how their data may be processed, used, or retained in accordance with that facility’s policies.

If you have questions about how your personal information is handled in relation to a particular fitness facility, we encourage you to contact that provider directly or refer to their published privacy documentation.

Can You Deal With Performance Hub Anonymously?

Performance Hub will provide individuals with the opportunity of remaining anonymous or using a pseudonym in their dealings with us where it is lawful and practicable (for example, when making a general enquiry). Generally, it is not practicable for Performance Hub to deal with individuals anonymously or pseudonymously on an ongoing basis. If we do not collect personal information about you, you may be unable to utilise our services or participate in our events, programs or activities we manage or deliver.

How Does Performance Hub Hold Information?

Performance Hub stores sales-related information using electronic record-keeping methods in secure databases, including those managed by trusted third-party storage providers located in Australia, the United States, the United Kingdom, and Singapore. Personal information collected during sales activities—such as at in-club promotions, industry expos, or demonstration events—may initially be recorded on paper forms before being securely digitised for processing or storage. Once converted, paper-based records are either archived or securely destroyed in accordance with our data handling procedures.

We take reasonable steps to protect your personal information—such as names, contact details, purchase history, and interest in our services—from misuse, interference, loss, and unauthorised access, modification, or disclosure.

Please note that our websites may not use encryption or other secure transmission technologies by default. If you choose to submit personal or sales-related information via our online forms or email, we encourage you to exercise caution when sharing sensitive details over the internet.

Location of Servers and Data Transfers

Performance Hub operates a cloud-based SaaS platform, and as such, we store and process data on servers located in Australia, the United Kingdom, and the United States, and Singapore. If you are accessing the Performance Hub platform or any related services from within Australia, please note that your personal information may be transferred to, stored, and processed by recipients outside of Australia. Similarly, if you access the Performance Hub platform from outside of Australia or the United States—for example, your personal information may be transferred to and processed in countries where we and our trusted partners maintain infrastructure or service relationships.

Transfers Outside of Your Country of Residence (EEA, UK, or Australia)

If you reside in the European Economic Area (EEA), the United Kingdom, or Australia, please be aware that the countries listed above may not have data protection laws that are as comprehensive or protective as those in your home jurisdiction. Nevertheless, Performance Hub takes appropriate supplementary measures to safeguard your personal information. This includes the implementation of Standard Contractual Clauses (SCCs), approved data transfer agreements, or other lawful mechanisms in accordance with applicable privacy regulations. To learn more about how we protect your data during international transfers, or to request a copy of our data transfer safeguards, please contact our Privacy Officer using the contact details outlined below.

How Long Will Your Personal Information Be Kept?

We will only retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law (for example, for tax, accounting, or other legal and regulatory obligations). The retention periods we apply take into account:

• Legal and regulatory requirements and guidance
• Limitation periods for taking legal action
• Our ability to defend against legal claims or complaints
• Accepted good practices
• The operational needs of our business

In some cases, applicable laws may require us to retain certain records for up to seven years after you cease being a customer of Performance Hub, to protect against potential legal claims.

When we no longer have a legitimate business need or legal obligation to retain your personal information, we will take reasonable steps to destroy, delete, or de-identify it. If immediate deletion is not possible (for example, if your data is stored in secure backup archives), we will isolate and securely store your information until deletion becomes feasible.

How Does Performance Hub Use and Disclose Personal Information?

Clients and End Users: The purposes for which we may use and disclose your personal information will depend on the services we are providing you. For example, if you have engaged us to deliver a service, we may disclose information about you to service providers where this is relevant to our services.

Members of Clients: If you are Member of one of our Clients or an End User we will use and disclose your personal information in order to where this is reasonably necessary for, and relevant to, the delivery of our services to our Clients and End Users.

Disclosure to contractors and other service providers: Performance Hub may disclose information to third parties we engage in order to provide our services, including contractors and service providers used for data processing, data analysis, customer satisfaction surveys, information technology services and support, website maintenance/development, printing, archiving, mail-outs, and market research.

Personal information may also be shared between related and affiliated companies of Performance Hub, located in Australia and overseas (discussed below).

Third parties to whom we have disclosed your personal information may contact you directly to let you know they have collected your personal information and to give you information about their privacy policies.

Use and disclosure for administration and management: Performance Hub will also use and disclose personal information for a range of administrative, management and operational purposes. This includes:

• Administering billing and payments and debt recovery
• Planning, managing, monitoring and evaluating our services
• Quality improvement activities
• Statistical analysis and reporting
• Training staff, contractors and other workers
• Risk management and management of legal liabilities and claims (for example, liaising with insurers and legal representatives)
• Responding to enquiries and complaints regarding our services
• Obtaining advice from consultants and other professional advisers
• Responding to subpoenas and other legal orders and obligations

Other uses and disclosures: We may use and disclose your personal information for other purposes explained at the time of collection or otherwise as set out in this Privacy Policy.

Does Performance Hub Disclose Your Personal Information Overseas?

Performance Hub works with customers, suppliers, resellers, service providers, sponsors and commercial interests across the globe. It is likely that your personal information will be disclosed to overseas recipients including to service providers who may handle, process or store your personal information on our behalf.

The recipients of such information may be located in Australia, United States of America, Canada, New Zealand, Philippines, and the European Economic Area. We generally collect personal information about you in the jurisdiction in which the Performance Hub affiliate you are dealing with is located.

It is likely that your personal information will be transferred outside of the jurisdiction it was collected.

We only ever disclose your personal information outside the jurisdiction it was collected where we are permitted to do so under applicable privacy laws. Generally this means we will take reasonable steps to ensure your personal information is treated securely and in accordance with applicable privacy laws, including, where relevant, by entering into EU standard contractual clauses (or equivalent measures) with the party outside the European Economic Area. The EU standard contractual clauses are available here.

There are other circumstances where we may disclose your personal information to an overseas recipient. For example, you have provided your consent or we are otherwise permitted to do so under the Australian Privacy Principles or other relevant laws.

Your Privacy Rights by Region

In some regions (like the European Economic Area and the United Kingdom), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure of your personal information, (iii) to restrict the processing of your personal information; and (iv) if applicable, to data portability. In certain circumstances, you may also have the right to object to the processing of your personal information. To make such a request, please use the contact details provided below. We will consider and act upon any request in accordance with applicable data protection laws.

If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time. Please note however that this will not affect the lawfulness of the processing before its withdrawal.

If you are resident in the European Economic Area or the United Kingdom and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority.

Residents in the European Economic Area

If the GDPR applies to you, you have the following additional and specific rights in relation to your personal information (where applicable):

• Access: you have the right to request a copy of any personal information we hold about you. Any request for access to or a copy of your personal information must in writing and we will endeavour to respond within a reasonable period and in any event within one month (in compliance with the GDPR)
• Rectification: you have the right to the rectification of your personal data, if you consider that it is inaccurate
• Deletion: you have the right to request that we delete personal information that we process about you, except we are not obliged to do so if we need to retain such personal information in order to comply with a legal obligation or to establish, exercise or defend legal claims
• Restriction: you have the right to erasure of your personal information, if you consider that we do not have the right to hold it
• Portability: you have the right to ask us to transfer a copy of your personal information to you or to another service provider or third party where technically feasible
• Objection: you have the right to object to your personal information being processed for a particular purpose or to request that we stop using your information
• Complaint: If you are unhappy with our treatment of your personal information, and you have contacted us as set out below, you have the right to lodge a complaint with the local data protection authority

If you have consented to our processing of your personal information, you have the right to withdraw, at any time, any consent that you have previously given to us for use of your personal information. In certain circumstances even if you withdraw your consent we may still be able to process your personal information if required or permitted by law or for the purpose of exercising or defending our legal rights or meeting our legal and regulatory obligations.

For more information about your rights under the General Data Protection Regulation (GDPR), you can visit the European Data Protection Board at https://edpb.europa.eu/ or the UK Information Commissioner's Office (ICO) at https://ico.org.uk/.

California Privacy Rights (CCPA)

California privacy laws, including the California Consumer Privacy Act (“CCPA”), require that we provide California residents information about how we use their personal information, and this section is intended to satisfy that requirement.

Under the CCPA, “personal information” is any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household.

California law grants California residents certain rights and imposes restrictions on particular business practices as set forth below.

Right to Opt-out/in:   California residents have the right to opt-out of our sale of their personal information and personal information about California residents who we know are younger than 16 years old cannot be sold without opt-in consent.

Right to Non-Discrimination, and Incentives:   The CCPA prohibits discrimination against California residents for exercising their rights under the CCPA and imposes requirements on any financial incentives offered to California residents related to their personal information. We do not currently offer any financial incentive programs.

Verifiable Requests to Delete, and Requests to Know:   Subject to certain exceptions, California residents have the right to make the following requests:

• California residents have the right to request deletion of their personal information that we have collected about them, subject to certain exemptions, and to have such personal information deleted, except where necessary for any of a list of exempt purposes;
• California residents have the right to request a copy of the specific pieces of personal information that we have collected about them in the prior 12 months and to have this delivered, free of charge, electronically in a portable and, to the extent technically feasible, readily useable format that allows the individual to transmit this information to another entity without hindrance;
• California residents have the right to request that we provide them certain information about how we have handled their personal information in the prior 12 months.

For more details about your rights under the California Consumer Privacy Act (CCPA), or to learn more about consumer privacy in California, you can visit the California Privacy Protection Agency website at https://cppa.ca.gov/.

Australian Privacy Rights (Privacy Act 1988)

Performance Hub is committed to protecting your privacy in accordance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). This section sets out how we collect, use, disclose, and protect your personal information, and your rights as an Australian resident.

You have the right to:

• Request access to the personal information we hold about you;
• Request correction of your personal information if it is inaccurate, out-of-date, incomplete, irrelevant or misleading;
• Make a complaint if you believe we have not handled your personal information in accordance with the APPs;
• Request that we limit the use or disclosure of your information in specific circumstances, such as for direct marketing purposes.

We may be required by law to retain certain personal information for a period of time (e.g. for tax or legal reasons). Where no legal requirement applies, we will take reasonable steps to de-identify or securely destroy your personal information once it is no longer needed for the purpose for which it was collected.

If you would like to learn more about your rights under the Australian Privacy Act or the role of the Office of the Australian Information Commissioner (OAIC), you can visit https://www.oaic.gov.au/privacy.

Canadian Privacy Rights (PIPEDA)

If you are a Canadian resident, your personal information is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to access and correct your personal information, and to withdraw consent subject to legal or contractual restrictions. Complaints may be directed to the Office of the Privacy Commissioner of Canada at https://www.priv.gc.ca/.

Japanese Privacy Rights (APPI)

If you are located in Japan, we process your personal information in accordance with the Act on the Protection of Personal Information (APPI). Where required, we obtain your consent prior to collecting or transferring sensitive data. You may request access to, correction of, or deletion of your personal information, and may withdraw consent at any time.

For additional details on data protection rights under Japan’s Act on the Protection of Personal Information (APPI), you can refer to guidance provided by the Personal Information Protection Commission (PPC) at https://www.ppc.go.jp/en/.

Other Jurisdictions

Residents of jurisdictions not specifically listed above may also have rights under applicable local data protection laws. If you reside in a region with data privacy legislation (such as Brazil, South Korea, South Africa, or other U.S. states), you may be entitled to rights similar to those described above, including access, correction, deletion, objection to processing, and data portability. Please contact us at if you would like to exercise your rights or have questions about how your personal information is handled in your region.

To make a request to exercise any of these rights (where applicable) in relation to your personal information, please contact us using the contact details below. We will consider and act upon any request in accordance with applicable data protection laws.

How Can You Access or Seek Correction of Your Personal Information?

You are entitled to access your personal information held by Performance Hub on request. To request access to your personal information please contact our Privacy Officer using the contact details set out below.

We will take reasonable steps to ensure that the personal information we collect, use or disclose is accurate, complete and up-to-date. You can help us to do this by letting us know if you notice errors or discrepancies in information we hold about you and letting us know if your personal details change.

However, if you consider any personal information we hold about you is inaccurate, out-of-date, incomplete, irrelevant or misleading you are entitled to request correction of the information. After receiving a request from you, we will take reasonable steps to correct your information.

We may decline your request to access or correct your personal information in certain circumstances in accordance with the Australian Privacy Principles. If we do refuse your request, we will provide you with a reason for our decision and, in the case of a request for correction, we will include a statement with your personal information about the requested correction.

Contacting Us About a Privacy Matter

You may contact Performance Hub at any time if you have any questions or concerns about this Privacy Policy or about the way in which your personal information has been handled.

You may contact our Privacy Officer by emailing privacy@performancehub.io with the subject line: [ATTN: PRIVACY RIGHTS]

The Privacy Officer will first consider your complaint to determine whether there are simple or immediate steps which can be taken to resolve the complaint. We will generally respond to your complaint within a week.

If your complaint requires more detailed consideration or investigation, we will acknowledge receipt of your complaint within a week and endeavour to complete our investigation into your complaint promptly. We may ask you to provide further information about your complaint and the outcome you are seeking. We will then typically gather relevant facts, locate and review relevant documents and speak with individuals involved.

In most cases, we will investigate and respond to a complaint within 3 months of the complaint. If the matter is more complex or our investigation may take longer, we will let you know.

How Changes Are Made to This Privacy Policy?

Performance Hub may amend this Privacy Policy from time to time, with or without notice to you. We recommend that you visit our website regularly to keep up to date with any changes. We also try to let you know about major changes to our Privacy Policy (for example by putting a notice up on our website or within our SaaS).