Privacy policy

Rank My Fitness operates the Rank My PT and Rank My Gym directories. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs). This policy explains what we collect, why, and the choices you have.

1. What we collect (APP 3)

• Account data: email address, mobile number, display name, password hash.
• Listing data you publish: business name, suburb, pricing, specialisations, opening hours, photos and contact details you choose to display.
• Review content: your rating, written review, and any owner response.
• Billing data: subscription plan, status and period. Card numbers are handled by our payment provider and never stored by us.
• Technical data: IP address, device and browser information, and security/audit logs of administrative actions.

We collect only what is reasonably necessary to run the directories. We do not collect sensitive information (including health information) and ask that you do not include it in reviews or listings.

2. Why we collect it (APP 6)

• To create and secure your account and verify you are a real person.
• To publish listings and reviews and calculate transparent rankings.
• To administer subscriptions and module entitlements.
• To moderate content, prevent fake or abusive reviews, and meet legal obligations.
• To send service emails. Marketing emails are sent only with your opt-in consent and every one has an unsubscribe link.

3. Public information

Published listings and published reviews are visible to anyone on the internet and may be indexed by search engines. Your email and phone number are shown only if you switch them on in your listing. Reviews display your chosen display name, not your email or mobile.

4. Disclosure and overseas storage (APPs 6 and 8)

We disclose personal information only to service providers who help us operate the platform — hosting and database, email delivery, and payment processing — and where required by Australian law. Some providers store data outside Australia, including in the United States. We take reasonable steps to ensure they handle your information consistently with the APPs. We never sell personal information.

5. Security (APP 11)

• Encryption in transit (TLS) and at rest.
• Row-level database security so each account can only reach its own records; administrative access is role-restricted and logged.
• Passwords are salted and hashed; leaked-password screening is enabled.
• Least-privilege access for staff and periodic access reviews.

We destroy or de-identify personal information when it is no longer needed. If we suffer an eligible data breach likely to cause serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

6. Access, correction and deletion (APPs 12 and 13)

You can update most details yourself in your dashboard. You may also request access to, or correction or deletion of, your personal information from your dashboard's privacy section or by emailing privacy@rankmyfitness.com.au. We respond within 30 days. Where we must retain certain records (for example to resolve a review dispute or meet tax obligations), we will tell you why.

7. Cookies

We use only essential cookies and local storage to keep you signed in and remember your preferences. We do not run third-party advertising trackers.

8. Complaints

Email privacy@rankmyfitness.com.au and we will acknowledge within 5 business days. If you are not satisfied with our response, you can complain to the OAIC at oaic.gov.au or 1300 363 992.