Privacy Policy

Last updated: 13 May 2026

Flow Bouldering (“we”, “us”, “our”) respects your privacy and is committed to handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Who we are

Flow Bouldering operates an indoor climbing gym at 1/5 Cedarbrook Drive, Forest Glen, QLD 4556, Australia, and the website at flowbouldering.com.au.

2. Information we collect

We may collect the following personal information:

  • Identity and contact details: name, email, phone, postal address, date of birth.
  • Emergency contact details: for in-gym safety.
  • Health information: pre-existing injuries or medical conditions you disclose to staff or via our waiver, used only to keep you safe while climbing.
  • Payment information: handled by GymMaster and our payment processors. We do not store full card numbers on our systems.
  • Membership and visit records: including check-ins, class bookings and waiver status (managed via GymMaster).
  • Website usage information: pages visited, device type, approximate location (city level, derived from IP) collected via Google Analytics.
  • CCTV footage: recorded on-site for safety and security and retained only as long as reasonably necessary.

3. How we use your information

We use personal information to:

  • provide gym access, manage your membership and process payments;
  • respond to enquiries you send via our contact form;
  • keep you safe (e.g. emergency contact, medical disclosures);
  • communicate operational updates such as opening hour changes, class cancellations or waiver renewals;
  • send marketing communications where you have opted in (you can opt out at any time using the unsubscribe link in any email);
  • improve the website and our services using aggregated analytics;
  • comply with our legal obligations.

4. Who we share information with

We disclose personal information only to the following categories of third parties, who are bound by their own privacy obligations:

  • GymMaster: our membership and gym-management platform (member sign-up, waivers, bookings, payments).
  • Resend: for transactional email delivery (contact form submissions, booking confirmations).
  • Vercel: our website host.
  • Cloudflare: provides bot protection (Turnstile) on our forms.
  • Google Analytics: for aggregated, anonymised website usage analytics.
  • Payment processors: to process direct debits and card payments via GymMaster.
  • Government or regulatory bodies: where required by law (e.g. lawful subpoena).

Some of these providers may store data overseas (typically the United States or European Union). By using our website and services you consent to this transfer.

5. Cookies and tracking

We use a small number of cookies to make the site work and to understand how it is used. Essential cookies (e.g. for the Cloudflare Turnstile bot check) are always set. Analytics cookies (Google Analytics) only fire if you accept them via the cookie banner. You can clear or block cookies in your browser settings at any time, though some features may stop working.

6. How we protect your information

We use HTTPS across the whole site, restrict staff access to personal information on a need-to-know basis, and rely on reputable processors (GymMaster, Resend, Vercel, Cloudflare, Google) who maintain their own security controls. No system is perfectly secure. If you believe your information has been compromised, please contact us immediately.

7. How long we keep your information

We keep personal information only for as long as it is needed for the purposes set out above, or as required by law. Membership records are typically retained for seven (7) years after your last visit for tax and accounting reasons. CCTV footage is retained on a short rolling window unless required for an incident investigation.

8. Your rights

Under the Australian Privacy Principles you have the right to:

  • access the personal information we hold about you;
  • request correction of inaccurate or out-of-date information;
  • opt out of direct marketing at any time;
  • make a privacy complaint to us, and if unresolved, to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

9. Children

Where a climber is under 18, a parent or guardian must complete the waiver and provide consent for personal and emergency-contact details to be held by us.

10. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent version. Material changes will be flagged on our homepage where appropriate.

11. Contact us

Email info@flowbouldering.com.au or call 0476 165 950 with any privacy questions or requests.

See also our Website Terms of Use and Membership Terms.