Privacy Policy
XTRA Wellness Pty Ltd T/As XTRA Clubs (hereafter referred to as “XTRA”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and disclose personal information from members and users of our website, as well as the steps we take to ensure the security of your personal information.
By accessing the XTRA website and using our services, you agree to the terms and conditions of this Privacy Policy. If you do not agree to the terms and conditions of this Privacy Policy, please do not use the XTRA website or services.
Collection of Personal Information
XTRA collects personal information from members and users of our website in order to provide our services. We collect information such as your name, email address, mailing address, phone number, date of birth, and credit card information. We also collect information about your use of our services, including your activity on our website, your usage of our facilities, and any feedback you provide. Additionally, we may optionally collect images for profile pictures to enhance user experience and account personalization.
Use of Personal Information
XTRA uses personal information to provide our services, process transactions, communicate with members, and improve our services. We may also use personal information to send promotional offers and newsletters. We will only send you promotional offers and newsletters if you have opted-in to receive them.
Disclosure of Personal Information
XTRA does not disclose your personal information to third parties except as required by law or as necessary to provide our services. We may disclose personal information to our service providers, such as payment processors, email service providers, and customer support providers. We require our service providers to protect the confidentiality and security of your personal information.
Security of Personal Information
XTRA takes the security of your personal information seriously and has implemented reasonable physical, technical, and administrative measures to protect your personal information from unauthorized access, use, disclosure, or modification. However, no method of transmission over the internet or method of electronic storage is 100% secure, and we cannot guarantee the absolute security of your personal information.
Access and Correction of Personal Information
You have the right to access and correct your personal information held by XTRA. You may do so by logging into your account on our app or website or by contacting us at the contact information provided below.
Data Retention
XTRA retains personal information only for as long as it is needed for the purposes described in this Privacy Policy, or for as long as we are required to keep it by law. When a retention period ends, the information is deleted or de-identified. Account and profile information — including your name, contact details, date of birth and profile photo — is kept while your account is active, and is deleted or de-identified within 30 days of your account being closed, except where we are required to retain it. XTRA does not store full credit card numbers. Card details are held by our payment processor under its own security standards. We retain transaction records showing the amount, date, product and the last four digits of the card for 7 years, to meet Australian taxation and financial record-keeping obligations. Club entry and door access records are retained for 180 days. Session and facility usage logs are retained for 30 days. Login and account security events are retained for 180 days. Each of these is automatically deleted at the end of that period. Where you grant location permission, your device’s location is used within the app to confirm you are at a club. We do not store a history of your location. We do not retain camera images from QR code scanning. If you opt out of marketing, we retain a minimal record of your opt-out so that we can continue to honour it. Support correspondence is retained for 2 years from your last contact with us. Information held in encrypted system backups may persist for up to 35 days after it is deleted from our live systems, after which it is overwritten on a rolling cycle.
Data Deletion
You can request deletion of your XTRA account and the personal information we hold about you at any time, free of charge. To delete your account in the XTRA Clubs app: open the app and sign in, tap Account, then Your Details, then Delete account, and confirm by tapping Delete Account Data. To request deletion by email: send a request to privacy@xtraclubs.au from the email address associated with your account. If you contact us from a different address, we may ask you to verify your identity before we act on the request.
Changes to this Privacy Policy
XTRA may update this Privacy Policy from time to time. We will post the updated Privacy Policy on our website and will notify you of any material changes. We encourage you to review the Privacy Policy periodically.
Contact Us
If you have any questions or concerns about this Privacy Policy or the way XTRA collects, uses, or discloses your personal information, please contact us at support@xtraclubs.au