Privacy policy

Our full privacy policy and Australian Privacy Principles collection notice are being finalised with our advisers. This page will host the complete policy as soon as it is ready. Until then, the summary below describes how the platform is built to handle data, and you can reach us with any privacy question.

This page is a plain-language overview, not the legal policy itself, and is not legal advice.

What we collect

When you enquire, start a trial, or run your gym on Base Control, we collect:

• Account details, like your name, email, phone, and gym name.
• The information you put into the product, such as your members, classes, schedules and gradings, held on your gym's behalf and scoped to your gym only.
• Payment information, handled by our payment provider Stripe; we don't store full card numbers ourselves.
• Usage and device information needed to keep the service secure and working.

Why we collect it

To set up and support your account, run billing, keep the platform secure, meet our legal obligations, and improve the product. We don't use your members' personal information for advertising, and we never sell it.

Only the service providers we need to run Base Control, under agreements that require them to protect your information, for example our payment processor and infrastructure providers. We share data with authorities only where the law requires it. Each gym's data is kept separate from every other gym on the platform. Sensitive information such as health notes is encrypted, and access to it is recorded. Card payments are processed by Stripe, so card details never touch our systems.

• Your gym's member, class, and payment data is scoped to your gym only.
• Sensitive fields are encrypted at rest, and staff access to health data is logged.
• Payments are handled by Stripe; we do not store card numbers.
• Your gym decides how long member records are kept. We hold the data while your gym is a customer, remove records once they are no longer needed, and delete your gym's data if it leaves the platform. To ask how long your own records are kept, contact your gym.

For more technical detail, see our security page.

Overseas recipients

Your rights

You can ask us to access, correct or delete your personal information, and you can export your gym's data at any time, there's no lock-in. If you have a concern about how we've handled your information, tell us and we'll work to put it right.

Questions about privacy, or want to exercise any of the above? Email team@basecontrol.co and a real person will help. We'll point you to the full policy as soon as it is published.