Privacy Policy

Last updated: 30 August 2026
Effective: 30 August 2026
Policy version: 2026-08-30

1. Who we are

Minimalist Strength is operated by Jacqueline Elizabeth Martinez, ABN 32 499 106 002, trading as Minimalist Strength (we, us or our). We are a sole-owner online health and fitness consulting business based in New South Wales, Australia, delivering assessments, private consultations, personalised strategies and ongoing review to clients worldwide.

This policy explains how we handle personal information and health information when you use our website, complete an assessment, make an enquiry, apply for coaching, book a consultation or work with us.

2. Our privacy commitment

We comply with the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs) and the Notifiable Data Breaches scheme, and, where applicable, the Health Records and Information Privacy Act 2002 (NSW) and the NSW Health Privacy Principles.

We handle personal and health information openly, fairly and only for lawful, necessary purposes. We obtain consent for sensitive health information, provide a collection notice where information is collected, allow access and correction, protect records, control disclosures, and respond to complaints and data breaches.

Because we offer services globally, we check overseas privacy requirements before deliberately targeting a country. The GDPR may apply where an Australian business offers services to people in the European Union or monitors their behaviour.

3. Information we collect

Identity and contact details

Name, email address, telephone number, country or time zone and communication preferences.

Applications, bookings and transactions

Enquiry and application answers, appointment history, service records and transaction information. We do not collect or store full payment card details through this website. Where payments are taken, they are handled by a payment provider, not stored by us.

Health and coaching information

Age, goals, exercise and training history, injuries, conditions, symptoms, medications, mobility, nutrition and lifestyle, sleep, stress, assessment answers and scores, progress measures and consultation notes, where necessary for safe service delivery. Health information is sensitive information and is collected only with your consent.

Communications and feedback

Emails, messages, complaints, testimonials and support records.

Technical information

IP address, browser and device details, cookies, analytics and website usage data.

We usually collect information directly from you through the website, our forms, consultations, email and the service platforms we use. We only request information reasonably necessary for the service, and marketing consent is always separate and optional.

4. Why we collect and use information

• to operate our online assessments and calculate and deliver your result;
• to respond to enquiries and assess whether our services are suitable for you;
• to arrange and manage consultations, appointments and coaching services;
• to design, deliver and adjust personalised strength, fitness and lifestyle strategies safely;
• to communicate with you about your bookings, progress, payments and services;
• to maintain business, safety and client records;
• to improve our website, services and client experience;
• to send marketing communications only where you have given separate consent;
• to prevent misuse, fraud or security incidents; and
• to comply with legal, regulatory, insurance and professional obligations, and to establish, exercise or defend legal claims.

We do not use health information for unrelated marketing, and we do not treat acceptance of this policy or submission of an assessment as consent to marketing.

5. Consent

Before you submit identifiable health or fitness information, we ask you to tick a required consent box. We record that consent, the version of this policy in force and the time consent was given.

Marketing consent is a separate, optional tick box. It is never required to receive an assessment result, submit an application or enquire about a service. You can withdraw marketing consent or unsubscribe at any time without affecting necessary service communications.

6. Service providers we use

We share only what is necessary with contracted providers that help us operate the business. The current providers and their roles are:

• website hosting and application platform (Lovable) — serves the website and runs our server-side form handling;
• database and authentication (Supabase) — stores assessment, application and enquiry records, and secures our private administrator area;
• email delivery (Lovable's managed transactional email service, sending from notify.minimaliststrength.com.au) — sends your results, confirmations and our internal notifications;
• booking and calendar (Google Calendar appointment scheduling) — used to book consultations;
• website analytics (Google Analytics 4) — measures aggregate website traffic and page views;
• accounting, legal, insurance and professional advisers; and
• technology support and security providers.

We do not sell personal information, and we do not disclose health information for third-party marketing.

We may also disclose information with your consent, where required or authorised by law, where reasonably necessary to prevent a serious threat to health or safety where the law permits, or to obtain professional advice or handle a legal or insurance claim.

7. Overseas processing

Some of the providers listed above store or process information outside Australia, including in the United States and other countries where their infrastructure is located. Where a provider processes information overseas we take reasonable steps to use reputable providers with appropriate contractual and security controls, and we complete a provider and country review before adopting new high-risk processing.

8. Security

We take reasonable steps to protect personal and health information, including:

• serving the website and submitting all forms over encrypted HTTPS/TLS connections;
• using reputable cloud providers that encrypt stored data at rest;
• storing assessment, application and enquiry records in an access-controlled database, with row-level security so that records can only be read by an authenticated administrator account;
• restricting administrator access to Jacqueline and specifically authorised providers, and reviewing access periodically;
• protecting administrator accounts with strong, unique passwords and multi-factor authentication where the provider supports it;
• keeping devices, operating systems and applications updated, encrypted and locked, and avoiding downloading health data to unmanaged devices;
• limiting the health details included in internal notification emails, and linking instead to the secure administrator area; and
• maintaining backups, an incident-response plan and a breach register.

No internet transmission or storage system is completely secure, so absolute security cannot be guaranteed.

9. Cookies and analytics

Our website uses Google Analytics 4 to understand aggregate website traffic and improve performance. This uses cookies and similar technologies and collects information such as IP address, browser and device details and pages viewed. We also record basic campaign attribution (for example UTM parameters and referral sources) with form submissions so we know where an enquiry came from. You may be able to control cookies through your browser settings, although disabling them may affect website functionality.

10. Retention and disposal

We retain information only for as long as reasonably necessary. For NSW private health-service records we retain adult records for seven years after the last health service, and records collected while a client is under 18 until that person turns 25. At the end of the applicable period we securely delete or destroy records and keep a disposal record, unless another lawful retention reason applies. Most financial and tax records are kept for at least five years.

11. Access, correction and withdrawing consent

You may ask what personal information we hold about you, request access to it, and ask us to correct information that is inaccurate, incomplete or out of date. We will verify your identity, acknowledge your request promptly and respond within a reasonable period. If we refuse access or correction where the law permits, we will explain the reason and the complaint options available to you.

You can withdraw marketing consent or unsubscribe at any time, and you may ask us questions about consent, use, disclosure, retention or overseas processing.

12. Complaints

Send privacy questions, access or correction requests, or complaints to contact@minimaliststrength.com.au with enough detail for us to identify the issue.

We will acknowledge your complaint, log it, investigate the relevant systems and providers, and respond in writing within a reasonable time, aiming for 30 days where practicable. We record the outcome and any corrective action and review complaints for systemic improvements.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner. For NSW health information matters, the NSW Information and Privacy Commission or the Health Care Complaints Commission may also be relevant, depending on the complaint.

13. Changes to this policy

We review this policy annually and whenever our systems or the law change. The current version is always published on this page with its version number and effective date.