Privacy Policy - Personal Trainer Coogee

Last updated: 01/08/2026 · Version 1.0

The short version

I collect health and training information so I can coach you properly. I store it in Australia. Nobody sees it but me. I don’t sell it, share it, or use it for advertising. You can get a copy or have it deleted whenever you want, and you don’t have to give me a reason.

The rest of this page is the detail.

1. Who this covers

This policy applies to The Beach Coach (99 675 782 136), based in Coogee, NSW — the website at thebeachcoach.com, the client app at app.thebeachcoach.com, and coaching services delivered in person or online. You can reach me at hello@thebeachcoach.com.

I’m a sole operator. When this policy says “I”, it means one person: Kasia Jamieson. There is no team, no office, and nobody else with access to your records.

Because I provide health services, I’m covered by the Privacy Act 1988 (Cth) and the Australian Privacy Principles regardless of business size. That’s the standard I’ve built to.

2. What I collect, and when

If you just visit the website

Standard server logs — IP address, browser, pages visited. Kept by my hosting provider, used to keep the site running and secure.
Anything you type into a contact or booking form: your name, email, phone, and whatever you tell me about why you’re getting in touch.
Your email address, if you sign up for recipes or the newsletter.

If you book a consultation or become a client

The intake form collects more, because I can’t program safely without it:

Contact details, date of birth, address, emergency contact
Health screening — heart conditions, diabetes, asthma, injuries, medications, other practitioners you’re seeing
Lifestyle information — occupation, sleep, stress, energy, eating habits, exercise history
Your goals and what’s got in the way of them before

If you use the client app

Your name and email (for login — there’s no password to store)
Sessions you log: exercises, weights, reps, and any notes
Movement outside the gym: what you did (swim, surf, walk, pilates and so on), how long, and any note you add
Habits: which habits you’re working on, and the days you tick them off
Weekly check-ins: energy, sleep, stress, how clothes felt, how intuitive food decisions felt, nights to bed roughly on time, one win, and anything else you want to add
Optionally, depending on what you’ve chosen to track: menstrual cycle phase, or symptoms like fatigue, broken sleep, joint stiffness or hot flushes
Coaching notes I write about your programming
Your name and email (for login — there’s no password to store)
Sessions you log: exercises, weights, reps, and any notes
Movement outside the gym: what you did (swim, surf, walk, pilates and so on), how long, and any note you add
Habits: which habits you’re working on, and the days you tick them off
Weekly check-ins: energy, sleep, stress, how clothes felt, how intuitive food decisions felt, nights to bed roughly on time, one win, and anything else you want to add
Optionally, depending on what you’ve chosen to track: menstrual cycle phase, or symptoms like fatigue, broken sleep, joint stiffness or hot flushes
Coaching notes I write about your programming
The app doesn’t ask for your gender. It asks what you’d like to track, and you can turn the cycle and symptom questions off entirely. It also doesn’t count calories, log food, or ask for weight, measurements or photos.
The app never uses your phone’s location. If a place name appears in one of your notes, it’s because you typed it.

3. Health information gets extra protection

Most of what’s above is sensitive information under the Privacy Act — the category with the strictest rules. Practically, that means:

I only collect it with your consent, and only what I actually need to coach you
You give that consent explicitly when you first log into the app, and on the intake form
You can withdraw consent at any time by emailing me. I’ll stop collecting and delete what’s there, though I can’t coach you safely without health screening, so that would end the coaching relationship
I never use it for marketing, and I never disclose it for any purpose other than coaching you

4. Why I collect it

To design programs that don’t injure you
To track whether what we’re doing is working
To spot patterns you might not see yourself — that your energy dips in a particular week, that your sleep improved when your bedtime habit stuck
To notice when you’ve gone quiet, so I can check in
To run the business: bookings, invoices, replying to you
To send you emails you’ve asked for — recipes, newsletters. You can unsubscribe from any of them and it won’t affect your coaching

I don’t use your information to advertise to you, and I don’t build profiles for anyone else’s benefit.

5. Who can see it

Me. That’s the list.

Not other clients. The app is built so your records are locked to your account at the database level — another client can’t see your data even if they went looking, and I’ve tested that specifically.

The services I use to run things can technically access data as part of hosting it. They’re contractually bound not to use it for anything else:

Service	What it holds	Where
Supabase	The app database — everything you log	Sydney, Australia
Vercel	Runs the app itself	Sydney region
HostGator	The website and email	United States
Google Forms / Sheets	Intake forms and check-in responses	United States
MailerLite	Email addresses for newsletters only	European Union / United States
Amelia	Booking details	With the website host

Everything you log in the app stays in Australia. The website, forms and mailing list run on overseas services — that’s normal for small businesses, but you should know it. No health information goes into MailerLite, ever.

Beyond that, I’d only disclose your information if the law required it, or if there were a serious threat to someone’s life or health.

I don’t sell your data. To anyone. There is no version of this business where that changes.

6. Where it’s stored and how it’s protected

App data lives in Supabase’s Sydney region, encrypted in transit and at rest
Access is enforced by database rules, not just by hiding things in the interface
Login is by magic link — there’s no password to leak
The app has no advertising trackers or third-party analytics in it
My own accounts use multi-factor authentication

No system is perfectly secure, and I won’t pretend otherwise. But I’ve kept the amount of data small and the number of places it lives smaller, which is the most useful thing a business this size can do.

7. If something goes wrong

If there’s a data breach likely to cause you serious harm, I’ll tell you and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires. I’ll tell you what happened, what was affected, and what to do about it — as soon as I reasonably can, not after a legal review.

8. Your rights

You can, at any time:

Ask what I hold on you, and get a copy. Free, and I’ll respond within 30 days
Export it yourself — the app has a download section that gives you your sessions, check-ins and habits as spreadsheets
Correct anything wrong
Delete your account and data. There’s a button in the app. It’s real deletion, not a hidden flag
Withdraw consent to health information collection
Unsubscribe from emails without affecting anything else

You don’t have to explain why. Email hello@kasiajamieson.com.

9. How long I keep things

App data: while you’re a client, and for 7 years after we stop working together — unless you ask me to delete it sooner, which I’ll do
Health and intake records: the same period. Health records are commonly kept for 7 years for professional and insurance reasons; if you ask for deletion I’ll tell you plainly what I can delete immediately and what I need to keep, and why
Newsletter subscribers: until you unsubscribe
Enquiries that don’t become coaching: about 12 months

10. Cookies and tracking

The website uses cookies to keep it working and to remember your preferences. You can block them in your browser; some things may stop working properly.

The client app has no advertising cookies and no third-party analytics. It stores a login token so you stay signed in, and keeps your recent sessions on your phone so logging works when the gym wifi doesn’t. That’s it.

11. Children

Coaching and the app are for adults 18 and over. I don’t knowingly collect information from anyone younger. If you think I have, email me and I’ll delete it.

12. Changes

If I change this policy I’ll update the date at the top. If the change is significant — new categories of data, a new service holding it — I’ll tell clients directly rather than quietly editing the page, and ask for consent again where it’s needed.

13. Complaints

Email me first at hello@thebeachcoach.com. I’ll acknowledge within 5 business days and respond within 30 days.

If you’re not satisfied, you can complain to the Office of the Australian Information Commissioner: oaic.gov.au · 1300 363 992. You don’t need my permission, and it’s free.

14. Contact

Kasia Jamieson — The Beach Coach
Coogee, NSW
hello@thebeachcoach.com