Privacy policy

This policy explains what personal information laralates collects, why we collect it, where it is kept, who can see it, and the choices you have. It covers our website, the laralates Circle email list, laralates events and community walks, and the way we handle health screening and event records.

Who we are

laralates is a Pilates and wellness business based in Melbourne, Victoria, Australia. LARALATES is a registered business name owned and operated by Dilara Cicekdag as a sole trader (ABN 65 878 774 253). In this policy, "laralates", "we" and "us" mean Dilara Cicekdag, trading as LARALATES.

Lara also teaches classes at partner studios. Bookings, memberships and client records at those studios are held by each studio under its own privacy policy, not by laralates.

For any privacy question or request, email laralates98@gmail.com.

At a glance

• Email list: we only email people who have joined the laralates Circle themselves and confirmed their email address. You can unsubscribe at any time.
• Health information: health screening answers are kept separately from our email list and are never used for marketing.
• Past events: coming to a laralates event does not add you to our email list.
• Sharing: we don't sell personal information or share it for anyone else's marketing. We use a small number of service providers, some of which store information outside Australia.
• Your rights: you can ask to see, correct or delete your information, and you can complain if you're unhappy with how it's been handled.

The information we handle

We keep different kinds of information in different places, and each is used only for its own purpose.

1. laralates Circle members

What we collect: your first name and email address; the topics you choose to hear about (Pilates & Coffee, Outdoor Pilates, Wellness Events, Hot Girl Walk Club, Products & Guides, Retreats & Travel Experiences); your suburb and preferred event day, only if you choose to share them; how you joined us; a record of your consent (when you signed up and confirmed, the form you used, and your device's IP address); and whether our emails are opened and links are clicked.

Why: to send the emails you've asked for, and to plan events in places and on days that suit our community.

Where: with our email provider, MailerLite.

2. Event registrations, bookings and payments

What we collect: to register for a laralates event, you give us your name, email address, phone number, date of birth, occupation, Pilates experience and goals, and the event you're attending. We keep a record of the events you've registered for and attended.

Why: to manage your place, contact you about the event, and understand which events people enjoy.

Payments: we're preparing to sell event tickets and products online through Stripe. When online payments start, Stripe will collect your payment details directly, and we won't see or store your full card number. We'll keep a record of what you bought for business and tax purposes.

3. Health screening and participation consent

What we collect: when you register for an event, our pre-exercise screening form asks about your health, such as heart conditions, chest pain, dizziness, asthma, diabetes, recent surgery, other medical conditions, pregnancy and birth history. It also asks for an emergency contact, your consent to hands-on technique corrections, and your signature.

Why: so the instructor can keep you safe, adapt exercises for you, and contact someone if there's an emergency.

Where it's stored: our existing and past event registration and screening records are held in Jotform, which stores them for us in the United States. Some past event records may also be held in our Google Drive or email inbox. We're reviewing those copies and will keep only what we need, in restricted locations.

Our new screening form: we're developing a new event registration and health screening form, which hasn't launched yet. It will include its own health information collection notice and ask for your explicit consent. Before it launches, we'll update this policy to explain where that information is stored.

How it's handled: health information is sensitive information under Australian privacy law, and health information under Victoria's Health Records Act. We collect it only with your consent and use it only for your safety at our events. It's kept separately from our email list and isn't used for marketing. It isn't shared with partner studios or anyone else for their own purposes. The service providers who store it for us are listed below. The only exception is an emergency, where we may share relevant details with emergency services to protect your health or safety.

4. Past event attendees

laralates may contact event attendees about their booking, participation, event-related administration and appropriate follow-up feedback. Attendance at an event does not automatically enrol a person in marketing communications. Promotional emails and event announcements are sent only where valid consent exists.

Coming to a laralates event does not add you to our email list. If you attended an event but haven't joined the Circle yourself, we won't send you marketing emails, including emails asking you to join.

Your registration is kept as an event record only, separate from our email list. If you'd like to hear about future events, you're welcome to join the Circle yourself once our signup form is available.

5. Interest in future retreats

We're exploring international wellness retreats. If you tick "Retreats & Travel Experiences" when you join the Circle, we record only that interest, so we can tell you about retreats if they go ahead. This is not a booking. We don't collect travel, passport or retreat health details. If retreats launch, we'll update this policy before collecting any.

6. Messages

If you contact us by email, Instagram message or through our WhatsApp community, we keep your message and contact details so we can reply. Instagram and WhatsApp are run by Meta, which handles that information under its own privacy policy. Members of our WhatsApp community can see each other's names and phone numbers.

7. Our website

Our website, laralates.com.au, is hosted by Cloudflare Pages. When you visit, your browser connects to Cloudflare, to Google Fonts for the site's fonts, and to Cloudflare's cdnjs service for its animations. Each receives technical details such as your IP address and browser type, in order to deliver the page.

We use Cloudflare Web Analytics to see how the site is used and how quickly it loads. We see only combined figures, such as page views, visits, referring websites, and visitors' country, browser, operating system and device type. According to Cloudflare, Web Analytics doesn't use cookies or other browser storage, doesn't fingerprint visitors, and discards IP addresses at its nearest data centre without storing them in its databases or logs.

Our own website code doesn't set cookies, run advertising pixels or collect information through forms. When our Circle signup form is added to the website, it will be provided by MailerLite. MailerLite says its forms can store small cookies or browser storage items, for example to remember that a form has already been shown or submitted.

8. Photos and video

We occasionally capture photos and videos at laralates events to share moments from our community on our website, social media and promotional channels.

If you'd prefer not to be photographed or filmed, please let us know before or during the event, and we'll make reasonable efforts to respect your preference.

You can also contact us at laralates98@gmail.com to request the removal of identifiable photos or videos from channels we control, where reasonably possible.

Your choices and consent

Each kind of consent is separate, and saying yes to one never means yes to another.

How Circle email consent works

When you sign up, we send you one email asking you to confirm your email address. You'll only receive Circle emails after you confirm.

MailerLite records when you signed up and confirmed, the form you used and your device's IP address, as a record of your consent.

Every Circle email identifies laralates, gives our contact details and includes a working unsubscribe link. Unsubscribing is free, needs no login or reason, and takes effect within 5 working days at most. When you unsubscribe, MailerLite keeps your email address marked as unsubscribed so you aren't emailed again by mistake, unless you ask us to delete it.

Who we share information with

We don't sell, rent or trade personal information, and we don't give it to partner studios, sponsors or any other business for their own marketing.

We use a few service providers to run laralates. They handle information on our behalf, only to provide their service to us. Apart from them, we disclose personal information only when you agree, when the law requires it, or when it's needed to lessen a serious threat to someone's life, health or safety.

Information stored outside Australia

Our service providers store information outside Australia. The table shows where each says it stores data, and where else it may be processed or accessed.

When we use overseas providers, Australian privacy law requires us to take reasonable steps to make sure they handle your information consistently with the Australian Privacy Principles. If our providers or their locations change, we'll update this section.

How we look after your information

We take reasonable steps to protect personal information from misuse, loss and unauthorised access, and to keep it accurate and up to date. Health information is kept separate from our email list and marketing records. No online service can be completely secure, so we can't guarantee the security of information sent to or held by these services.

If a data breach is likely to cause you serious harm, we will notify you and the Office of the Australian Information Commissioner, as the law requires.

How long we keep it

We keep personal information only as long as we need it, or as long as the law requires.

• Health screening and participation records: for the period required by Victorian health records law where it applies. That's generally at least seven years after your last session, or until you turn 25 if you were under 18 when you attended, whichever is longer.
• Event attendance records: reviewed after three years, and kept longer only if we need them for legal, insurance or business reasons.
• Payment and financial records: for as long as tax law requires, which is generally five years.
• General enquiries: reviewed after 12 months.
• Circle members who unsubscribe: we keep your email address and the date you unsubscribed, so you aren't emailed again by mistake.

When we no longer need information and the law doesn't require us to keep it, we delete it or remove anything that identifies you.

Seeing, correcting or deleting your information

You can ask us to:

• show you the personal information we hold about you, including health information
• correct anything that's wrong, out of date or incomplete
• delete your information

Email laralates98@gmail.com. We may need to confirm your identity first, and there's no charge to make a request. We'll respond to general privacy requests within 30 days. For health information, we'll respond to a request to see it within 45 days, and to a request to correct it within 30 days.

We can't always delete everything straight away. We may need to keep some records, such as health screening records or tax records, for as long as the law requires. If we can't do what you ask, we'll explain why in writing and tell you how to complain.

Questions and complaints

Please email laralates98@gmail.com with any question or concern, and we'll respond within 30 days. If you're not satisfied with our response, you can contact:

• the Office of the Australian Information Commissioner, on 1300 363 992, about personal information
• the Health Complaints Commissioner in Victoria, on 1300 582 113, about health information
• the Australian Communications and Media Authority about unwanted marketing emails

Changes to this policy

We'll update this policy when our practices change, for example when online payments start or if retreats launch. The latest version will always be on this page, with its version number and date.

Contact

LARALATES · Dilara Cicekdag, sole trader · ABN 65 878 774 253
Melbourne, Victoria, Australia
laralates98@gmail.com