Misfit Muscle Club Privacy Policy
Effective date: 31 October 2026
This Privacy Policy explains how Grace Elizabeth Sutcliffe trading as Misfit Muscle Club (ABN 65 641 709 068) ("Misfit Muscle Club", "MMC", "we", "us" or "our") collects, holds, uses and discloses your personal information.
Who we are and how to contact us
We are a vegan fitness and nutrition coaching business based in Victoria, Australia. This policy applies to our website https://www.misfitmuscleclub.com (the "Site"), our coaching services, and our social media channels.
We handle your personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where it applies to you, we also respect the EU General Data Protection Regulation (GDPR).
This policy does not cover other websites or platforms, even if we talk to you there. If you comment, message or post on Instagram, Facebook, TikTok, YouTube or similar, that information is also governed by that platform's own privacy policy.
For any privacy question, request or complaint, email us at misfitmuscleclub@gmail.com.
Our role in your privacy
If you are a client, subscriber, customer or just a visitor to the Site, this policy applies to you. We decide how and why your information is processed. We do not sell or rent your personal information to anyone, ever.
Your responsibilities
Please read this policy alongside our Website Terms and Conditions. If you give us information about another person, you confirm you have the right to do that and to allow us to handle it under this policy.
When and how we collect information
From the moment you visit the Site we may collect information. Sometimes you give it to us directly (filling in a form, signing up, chatting to us). Sometimes it is collected automatically. We may collect information when you:
apply for, enquire about or purchase a coaching package, program, plan, recipe resource or other product
book or attend a consultation call
complete an intake form, health or goals questionnaire, check-in or progress report
sign up to our newsletter, lead magnets or mailing list
send us an email or direct message, or interact with us on social media
enter a giveaway, promotion or survey, or take part in an event or challenge
accept cookies and similar tracking technologies on any device you use to interact with us
voluntarily send us information for any other reason
Types of information we collect
General information
Contact details (name, email, phone number, address)
Payment and billing information (processed by our payment providers; see below)
Details of the products and services you buy or enquire about
Communications between you and us
Information about your use of the Site, such as pages viewed, links clicked, time on page, IP address, browser type, device, operating system, time zone and approximate location
Health and other sensitive information
To coach you safely and well, we may ask for information that the Privacy Act classes as sensitive, including:
health and medical information relevant to your training and nutrition (such as injuries, medical conditions, medications, allergies and intolerances, and relevant history)
body measurements, weight, progress photos, training and nutrition logs, and wellness data (such as sleep, stress and energy)
dietary information, including vegan or other dietary choices, and relevant lifestyle information
We only collect sensitive information with your consent and only where it is reasonably needed to deliver our services. You can choose not to provide it, but we may not be able to coach you safely or effectively without it.
Progress photos are never shared publicly or used in our marketing without your separate, written permission.
How we use and disclose your information
We only use your information for the purpose we collected it, or a related purpose you would reasonably expect, including to:
operate and improve the Site and our services
provide your coaching, programs, nutrition plans, resources and support
tailor training and nutrition to your goals, health and circumstances
process payments, keep purchase records and handle invoicing and tax
communicate with you, including check-ins, scheduling and customer support
detect and prevent fraud and monitor compliance with our Terms and Conditions
run market research and ask for feedback or testimonials (with your permission)
send you newsletters, offers, events and other marketing (with your consent)
run promotions and giveaways, including contacting winners
We may disclose your information:
as required or authorised by law
with your consent
to service providers and platforms that help us deliver our services (see below)
to our professional advisers, such as accountants, insurers and lawyers
to your other health professionals, only if you ask us to or agree
Third-party services, analytics and marketing
We use trusted third-party providers to run our business. They only get the information they need to do their job. These may include:
Coaching and client management platform: Kahunas, which holds client accounts, check-ins, plans and messages
Payment processors: PayAdvantage/PayPal, which process payments. We do not see or store your full card details
Email and newsletter tools: Flodesk/Gmail, used to send emails, newsletters and updates
Website hosting and forms: Squarespace
Video and call tools: Loom/Zoom, used for consultations and sessions
Analytics and advertising: Google Analytics and Meta (Facebook and Instagram) tools
Google Analytics. We use Google Analytics to understand how people use the Site. This may include display advertising and remarketing, which means you may see our ads elsewhere online based on your past visits. You can opt out using Google's opt-out tools.
Social media insights. We use Facebook and Instagram Insights and similar tools to understand how people interact with our pages and profiles. You can control ads you see on those platforms in their ad settings.
Cookies. The Site uses cookies and similar technologies (the data kind, not the vegan baked kind). They help the Site work, show us how it is used, and support advertising. You can block or delete cookies in your browser settings, but some parts of the Site may not work properly.
Web beacons. Our emails may use web beacons (tiny images) to show us whether an email was opened and links were clicked, and to see your IP address and email or browser type. We use this to improve our emails.
Marketing. We will only send you marketing with your consent. You can opt out any time by clicking "unsubscribe" in any email, or by emailing us.
Your rights
You can exercise any of these rights at any time by emailing misfitmuscleclub@gmail.com.
Access. You can ask for a copy of the personal information we hold about you. We will respond within 30 days. We may refuse access where the law allows (for example, where it would affect another person's privacy), and if so we will tell you why.
Correction. If information we hold about you is inaccurate, out of date or incomplete, tell us and we will correct it.
Deletion. You can ask us to delete your information. We will do so unless we are legally required to keep it (for example, financial records for tax purposes).
Withdrawing consent. You can withdraw consent to marketing or to the handling of sensitive information at any time. Withdrawing consent may limit our ability to provide some services.
Profiling. We may use your information to work out which products and services are relevant to you (for example, tailoring emails based on your behaviour). We do not make significant automated decisions about you.
Not providing information. You can choose not to give us personal information. If you do, we may not be able to provide certain products or services, but you can still browse the Site.
Making a complaint
If you have a concern about how we have handled your information, email us at misfitmuscleclub@gmail.com. We will investigate and respond as quickly as we can. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
Security, storage and retention
Security. We take reasonable steps to protect your information from misuse, loss and unauthorised access. This includes password-protected accounts, limiting access to people who need it, storing data with reputable third-party providers, and using PCI DSS compliant payment providers. We do not store your payment card details. No system is perfect, and we cannot guarantee the security of information you send us over the internet.
Where we store data. We aim to use service providers based in Australia. Some of our providers (including analytics, email, coaching and payment platforms) may store or process information overseas, including in the United States and other countries. Where we share information outside Australia, we take reasonable steps to make sure the provider protects it to a similar standard.
How long we keep data. We keep information for as long as we need it for the purpose it was collected, and as long as the law requires. Purchase records are kept for invoicing and tax purposes. Client health and coaching records are kept for a reasonable period after your coaching ends, in case of follow-up, disputes or legal requirements. When we no longer need information, we delete it or de-identify it.
Data breaches. If a data breach is likely to cause you serious harm, we will notify you and the OAIC as required by the Notifiable Data Breaches scheme.
Age of consent
By using the Site you confirm that you are at least 18 years old, or the age of majority in your state or territory. The Site and our services are not intended for people under that age, and we do not knowingly collect information from them.
Governing law
This Privacy Policy and your use of the Site are governed by the laws of Victoria, Australia.
Updates to this policy
We may update this policy from time to time to reflect changes to our practices, the law or our services. The current version is always on the Site with the effective date shown at the top, so check back now and then.