Privacy Policy

Last Updated: January 7, 2026

Introduction

Borough Chambers ("we," "us," or "our") operates a coffee shop (Sidro Chambers) and wellness studio (Borough Wellness) located at 20 Bank Street, Port Fairy, Victoria 3280, Australia. We are committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you:

  • Make bookings at our café or wellness studio

  • Purchase gift vouchers

  • Use our gym facilities

  • Visit our website at boroughchambers.com

  • Interact with us in person, by phone, or email

By using our services or providing us with your personal information, you consent to the collection, use, and disclosure of your information as described in this policy.

What Information We Collect

Personal Information

We may collect the following types of personal information:

  • Contact details: Name, email address, phone number, mailing address

  • Booking information: Reservation details, class registrations, preferred times

  • Payment information: Credit card details, billing address (processed securely through our payment providers)

  • Membership information: Gym membership details, access preferences, attendance records

  • Health and fitness information: Health conditions, fitness goals, injuries, or medical information relevant to your wellness activities (collected with your consent)

  • Gift voucher details: Purchaser and recipient information

  • Communication records: Correspondence with us via email, phone, or in person

  • Website usage data: IP address, browser type, pages visited (if analytics are used)

Sensitive Information

With your explicit consent, we may collect sensitive information including:

  • Health information necessary for safe participation in fitness classes and gym activities

  • Dietary requirements or allergies relevant to café bookings

You are not required to provide sensitive information, but without it, we may be unable to provide certain services safely or appropriately.

How We Collect Information

We collect personal information:

  • Directly from you when you make bookings, purchase products or services, sign up for memberships, or communicate with us

  • Through our booking systems: NowBookIt (for café bookings and gift vouchers) and GymMaster (for gym and wellness studio memberships and bookings)

  • Automatically through cookies and analytics tools when you visit our website (if implemented)

  • In person when you visit our facilities

Collection is Voluntary But Necessary

While providing your personal information is voluntary, certain information is necessary to complete bookings, process payments, and provide services. Without this information, we may be unable to fulfill your requests or provide you with access to our facilities.

How We Use Your Information

We use your personal information for the following purposes:

  • Service delivery: To process and manage your café bookings, wellness class registrations, gym memberships, and facility access

  • Payment processing: To process transactions, issue invoices, and manage billing

  • Gift vouchers: To create, manage, and redeem gift vouchers

  • Communication: To send booking confirmations, reminders, updates about changes to bookings, and respond to your inquiries

  • Safety and health: To ensure you can safely participate in wellness activities and accommodate any dietary requirements

  • Marketing (with your consent): To send promotional offers, newsletters, and information about new classes, menu items, or services

  • Business operations: To manage our facilities, improve our services, analyze usage patterns, and maintain records

  • Legal compliance: To comply with legal obligations and respond to lawful requests

Third-Party Service Providers

We share your personal information with trusted third-party service providers who assist us in operating our business:

NowBookIt

NowBookIt collects booking and payment information when you make café reservations or purchase gift vouchers. NowBookIt is a white-labeled platform where we, as the restaurant, own 100% of customer data. Your data is stored on NowBookIt's secure servers and may be processed through their integrated payment gateways including Stripe.

User Rights with NowBookIt: You may request that we amend or delete your personal information by emailing us with the information you want changed or removed.

GymMaster

GymMaster is our membership management system for the gym and wellness studio, collecting information including name, address, telephone number, email address, location, and login information. GymMaster stores data on secure servers in Australia.

GymMaster does not store credit card information; your card details are encrypted and sent directly to our billing provider. Bank account information for automatic billing is also encrypted and sent directly to the billing provider.

User Rights with GymMaster: You have the right to access, rectify, or request deletion of your personal information by contacting support@gymmaster.com.

Other Third Parties

We may also share information with:

  • Payment processors (Stripe, EzyPay) to process transactions securely

  • Analytics providers (if website analytics are implemented) to understand website usage

  • IT service providers for hosting, data storage, and technical support

  • Professional advisors including lawyers and accountants

  • Government authorities when required by law

Data Storage and Security

Your personal information is stored:

  • On secure servers in Australia (GymMaster)

  • Through NowBookIt's secure systems

  • On our internal systems with password protection and encryption

We implement reasonable security measures to protect your information from unauthorized access, modification, or disclosure, including:

  • Encryption of sensitive data during transmission

  • Secure password-protected systems

  • Regular security updates and monitoring

  • Access restrictions for authorized personnel only

However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as:

  • You maintain an active membership or continue to use our services

  • Required to fulfill the purposes outlined in this policy

  • Required by law (including accounting and taxation obligations)

When information is no longer needed, we will take reasonable steps to destroy or de-identify it.

International Data Disclosure

GymMaster stores data on servers in the United States, Singapore, Australia, and Germany. By providing us with your personal information, you consent to the disclosure of your information outside of Australia. We are not required to ensure that overseas recipients handle personal information in compliance with Australian privacy law, and you acknowledge you may not be able to seek redress under the Privacy Act if they engage in practices that contravene the Australian Privacy Principles.

Marketing and Direct Communication

With your consent, we may use your contact information to send:

  • Promotional offers and special deals

  • Information about new menu items, classes, or services

  • Newsletters and updates

You can opt out of marketing communications at any time by:

  • Clicking the "unsubscribe" link in emails

  • Contacting us using the details below

  • Updating your preferences in your account (if applicable)

Your Privacy Rights

Under the Australian Privacy Principles, you have the following rights:

Right to Access

You have the right to request access to your personal information we hold about you. We will respond to your request within a reasonable timeframe and provide access unless an exception applies.

Right to Correction

You have the right to request correction of your personal information if it is inaccurate, out of date, incomplete, irrelevant, or misleading. We will take reasonable steps to correct information upon your request.

If we refuse to correct information, we will provide you with written reasons and information about how to complain. You may also request that we associate a statement with your information noting your belief that it is inaccurate.

Right to Complain

If you believe we have mishandled your personal information, you have the right to lodge a complaint with us (see "Contact Us" section below) or directly with the Office of the Australian Information Commissioner (OAIC) at:

  • Website: www.oaic.gov.au

  • Phone: 1300 363 992

  • Email: enquiries@oaic.gov.au

Right to Use a Pseudonym

Where practicable, you may choose to use a pseudonym or remain anonymous when interacting with us. However, this may limit our ability to provide certain services, particularly for bookings and memberships.

Withdrawing Consent

You may withdraw consent for the collection, use, or disclosure of your personal information at any time by contacting us. Please note that withdrawing consent may affect our ability to provide services to you.

Deletion Requests

While Australian privacy law does not currently provide a general "right to erasure," you may request deletion of your personal information. We will consider such requests on a case-by-case basis, taking into account our legal and operational obligations.

Cookies and Website Analytics

If we implement website analytics (such as Google Analytics), we may collect:

  • IP addresses

  • Browser type and version

  • Pages visited and time spent on pages

  • Referring websites

You can control cookies through your browser settings. Disabling cookies may affect website functionality.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on our website at boroughchambers.com/privacy-policy with the updated "Last Updated" date. We encourage you to review this policy periodically.

Material changes will be highlighted on our website for a reasonable period.

We Don't Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or want to make a complaint about how we've handled your personal information, please contact us:

Borough Chambers
20 Bank Street
Port Fairy, VIC 3280
Australia

Email: hello@boroughchambers.com
Phone: 03 4520 9590

For technical matters related to your data held by our service providers:

  • NowBookIt issues: Contact us at the details above, and we will coordinate with NowBookIt

  • GymMaster issues: support@gymmaster.com or data.officer@gymmaster.com

We will respond to your inquiry or complaint as soon as possible.