Privacy Policy

Applies to: Vladswim Pty Ltd (“Vladswim”, “we”, “us”, “our”) and the website at https://vladswim.com.au (the “Site”), related apps, and in-venue services.

We respect your privacy. This Policy explains how we collect, use, disclose and protect personal information and how you can access and correct it.

We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If you’re in the European Economic Area or UK, we also describe additional rights under the GDPR/UK GDPR. For California residents, we include CCPA/CPRA disclosures.

1) Who we are & how to contact us

Entity: Vladswim Pty Ltd

Postal address: PO BOX 252, Matraville, NSW 2036, Australia

Email: info@vladswim.com.au

Phone: +61413754977

If you have questions or complaints about this Policy or our privacy practices, please contact us using the details above.

2) What information we collect

Information you provide

Account & contact: name, email, phone, address, emergency contact.

Participant details: date of birth, guardian details for children, swim skill level, class history.

Health/safety (sensitive information): medical conditions, allergies, injury notes or accessibility needs relevant to lessons, programs or events (collected with your consent or a parent/guardian’s consent).

Transactions: bookings, memberships, purchases, payment method (tokenised by our payment processor), billing address.

Media consent: photographs, video or testimonials if you opt in.

Competition/event entries: race registrations, times, categories.

Communications: emails, forms, feedback, enquiries.

Information we collect automatically

Usage & device data: IP address, device identifiers, browser, pages viewed, session duration, referring URLs.

Cookies & similar tech: for essential site functions, analytics, preferences and advertising (see Section 8).

Information from third parties

Booking/CRM providers (if you use our scheduling platform).

Payment processors (limited payment and fraud-prevention data).

Event partners/coaches/venues (attendance and performance information where relevant).

We do not require or want unnecessary sensitive information.

3) Why we collect personal information (purposes)

We use your information to:

Provide services: run lessons, squads, clinics, events and customer support.

Manage accounts & bookings: registrations, schedules, attendance, waitlists, cancellations.

Safety & duty of care: consider relevant health information and emergency contacts.

Process payments & prevent fraud.

Communicate: service emails, class updates, safety notices, and (with your choice) marketing.

Improve our services & Site: analytics, troubleshooting, testing.

Legal & compliance: record-keeping, responding to lawful requests, managing disputes.

Direct marketing: We send marketing in accordance with the Spam Act 2003 (Cth) and with your consent/opt-out options. You can unsubscribe at any time.

4) Legal bases (EEA/UK visitors)

Where GDPR/UK GDPR applies, we rely on:

Contract performance (to deliver bookings/memberships).

Legitimate interests (service improvement, security, limited direct marketing).

Consent (health details, media use, certain cookies/marketing).

Legal obligations (accounting, safety reporting).

You may withdraw consent at any time (this won’t affect prior lawful processing).

5) Disclosing your information

We share information where necessary with:

Service providers/processors: booking & CRM platforms, email/SMS tools, cloud hosting, IT support, analytics, customer support, and payment processors.

Coaches, staff and venue partners for class/event delivery and safety.

Event organisers & timing providers for competitions you enter.

Authorities or advisers where required by law, to protect safety, or to manage claims.

Business transactions: if we reorganise, merge or sell assets, subject to suitable safeguards.

We do not sell your personal information.

6) International transfers

Some providers may process data outside Australia (e.g., EEA/UK/US/Asia). We take reasonable steps to ensure overseas recipients comply with privacy standards substantially similar to the APPs or that appropriate safeguards (e.g., Standard Contractual Clauses) are in place.

7) Retention

We keep personal information only as long as needed for the purposes above or as required by law (e.g., tax and safety records). Typical periods:

Account/booking records: up to 7 years after your last interaction.

Incident & safety records: as required by applicable law.

Marketing preferences: until you opt out or the data is no longer needed.
When no longer required, we take reasonable steps to de-identify or securely destroy information.

8) Cookies, analytics & tracking

We use cookies and similar technologies to:

Be functional: sign-in, session management, security.

Remember preferences: e.g., saved classes or settings.

Measure performance: aggregated analytics (e.g., page views, conversions).

Marketing: only with consent where required.

You can manage cookies via our cookie banner and your browser settings. Blocking some cookies may affect how the Site works.

9) Children and young people

We often provide services to children and young people.

We collect child participant information from a parent or legal guardian and rely on their consent.

Health and emergency information is collected strictly for safety and duty-of-care purposes.

Media (photos/videos) featuring a child are only captured/used with the parent/guardian’s consent and may be withdrawn prospectively.

If you believe a child provided personal information without appropriate consent, contact us promptly.

10) Payment processing

Payments are processed by our third-party payment processor. We do not store full card numbers; our processor provides us with a token and status. Your use of payment services is subject to the provider’s privacy terms.

11) Your choices & rights under Australian law (APPs)

You may request access to and correction of your personal information. We will respond within a reasonable time. We may need to verify your identity and, where lawful, charge a reasonable fee for access.

If GDPR/UK GDPR applies

You may have the right to access, rectify, erase, restrict or object to processing, and data portability. You also have rights regarding automated decision-making (we don’t use automated decisions that have legal or similarly significant effects).

If CCPA/CPRA applies (California)

You may have the right to know (request specific pieces or categories), delete, correct, and opt out of the sale/sharing of personal information (we do not sell). We honour limit use of sensitive information requests where applicable. We will not discriminate against you for exercising your rights.

Exercising your rights:
Email info@vladswim.com.au with your request. We’ll verify your identity (and, for children, verify parental authority) and respond within required timeframes.

12) Security

We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure, including access controls, encryption in transit where feasible, secure hosting and staff training. No system is perfect; please contact us immediately if you suspect any security issue.

13) Data breach

If a data breach is likely to cause serious harm, we will assess and, where required, notify affected individuals and the Office of the Australian Information Commissioner (OAIC) and any other relevant regulator in line with applicable laws.

14) Third-party links

Our Site may link to third-party sites (e.g., booking, payment, social). Their privacy practices are their own; please review their policies.

15) Changes to this Policy

We may update this Policy to reflect changes in our practices or laws. The “Last updated” date shows the latest version. Significant changes will be highlighted on the Site and, where appropriate, notified to you.

16) Complaints

If you believe we’ve breached privacy laws, please contact us first at info@vladswim.com.au. We’ll investigate and respond. If you’re not satisfied, you can contact the OAIC (oaic.gov.au) or your local data protection authority.