# Privacy Policy

Last updated: 26 October 2026

United Training Grounds Pty Ltd (ABN 18 651 050 690), trading as United Training Grounds and United Performance Hub (“UTG”, “we”, “us”), is committed to protecting your personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

This policy explains what we collect, how we use and disclose it, and how you can access or control it.

## 1. Information we collect

Depending on the services you use, we may collect:

- Contact and account details: your name, email address, phone number, date of birth, address and emergency contact.

- Membership and booking details: your membership type, class bookings, attendance and communications with us.

- Payment information: payment and transaction details needed to manage your account. Our payment providers collect and store payment credentials; we do not store full card or bank account numbers.

- Health and fitness information: pre-exercise screening answers, injuries or conditions you tell us about, training prescriptions, activity logs, performance results, nutrition entries and body measurements you choose to share.

- Event information: registration details, wave and division, and race results, including finish, lap and station times.

- Connected-device information: where you choose to use an available integration, the information described in section 6.

- Photos and video: content you provide and images taken at classes or events.

- Website information: pages visited, device and browser information, and cookies.

Health information is sensitive information under Australian privacy law. We collect it with your consent where required and only where reasonably necessary to provide a service you have requested or otherwise permitted by law.

## 2. How we collect information

We collect information directly from you when you create an account, sign up, book, register for an event, complete a screening form, log training or nutrition, connect a supported device, or contact us.

We may also receive information from booking, payment and event services you use, from your authorised coach, and from connected-device providers you have authorised to share information with UTG.

## 3. How we use information

We use personal information to:

- Provide and manage memberships, coaching, training programs, nutrition tracking and event entries.

- Support safe training, including accounting for injuries or conditions you disclose.

- Record progress and allow your authorised coach to review your training and nutrition.

- Process payments and manage accounts.

- Publish event results as described in section 5.

- Communicate about bookings, services, account changes and support requests.

- Send news and offers where permitted, with an option to unsubscribe.

- Maintain the security and reliability of our services.

- Meet legal obligations and handle complaints.

We do not use health information for marketing. Garmin information is subject to the additional limits in section 6.

## 4. Who we share information with

We do not sell personal information.

We disclose information only where reasonably necessary to:

- Authorised UTG coaches and staff, so they can provide the services you request.

- Service providers, including booking and membership systems, payment providers such as Stripe and direct debit providers, email services such as Resend, website hosting such as Squarespace, app hosting such as Replit, and professional advisers such as accountants.

- Other recipients you authorise, or recipients where disclosure is required or permitted by law.

Providers receive only information needed for their role. A provider supporting one part of UTG does not automatically receive information from every other part.

For the planned Garmin integration, Replit is the intended application-hosting provider and would process Garmin information stored or handled by the UTG application. Garmin information will not be included in payment transactions or routine marketing communications. We do not intend to send Garmin activity records to Stripe, Squarespace or Resend for the initial integration.

Before enabling the integration, we will confirm its actual processing arrangements and update this policy to identify any additional providers that receive or process Garmin information.

## 5. Event results, photos and video

Your name, division, finish time and splits collected through event registration and timing systems may appear on public event leaderboards and results pages.

Information imported from Garmin will not automatically be published as an official event result or added to a public leaderboard. Any proposed public use of that information would require a separate assessment of applicable Garmin requirements and your express consent.

Your private health information, including heart-rate information, is not published on event leaderboards. Access is limited to you, authorised coaches and staff, and necessary service providers.

We may use photos and video from classes and events on our website and social media. If you do not want to appear, tell a coach or email us. We will remove content featuring you where reasonably possible.

6. Garmin and other connected devices

Availability and choice

UTG offers Garmin integration to eligible users. Access may initially be limited while we test and progressively release supported features.

Connecting Garmin is optional. You can use your otherwise available UTG services without connecting a Garmin account.

Available features depend on your device, Garmin permissions and the features enabled for your UTG account.

Information received from Garmin

With your authorisation, UTG may receive:

  • A Garmin account identifier, connection permissions and authorisation information needed to maintain your connection.

  • Completed activity type, date and start time.

  • Duration, distance, speed and pace.

  • Available average and maximum heart rate.

  • Lap, split and workout-step information.

UTG uses this information to display your recorded activities and, where a reliable match is available, associate results with the workout prescribed by your coach.

The current integration supports selected running and watch-tracked training sessions. It does not collect broader wellness or women’s health information.

Optional heart-rate and performance details

Where performance details are enabled, UTG will ask for your additional approval before retaining:

  • Timestamped heart-rate readings throughout an activity.

  • Available running cadence.

  • Available heart-rate zone boundaries recorded in the activity file.

  • Supported heart-rate and performance measurements for individual laps, runs, stations and rests.

These details allow you and your authorised coach to review your entire workout and individual sections, including heart-rate graphs, available cadence and time spent in heart-rate zones.

This additional collection applies to activities started after you provide the relevant approval. Previously discarded readings are not automatically recovered or reconstructed.

Availability varies between activities and devices. If Garmin does not provide sufficient readings or trustworthy zone boundaries, UTG will show that information as unavailable rather than inventing measurements or assigning assumed zones.

Heart-rate and zone information supports training review. It is not a medical diagnosis or a substitute for advice from a qualified health professional.

Information sent to Garmin

With your express authorisation, UTG sends selected prescribed workouts to Garmin Connect. This may include the workout name, instructions, scheduled date, step durations or distances, repetitions and supported training targets.

Garmin Connect may synchronise supported workouts to a compatible device. Device support and synchronisation depend on Garmin.

Sending a workout does not automatically start, stop or save an activity on your watch. Returned results depend on the activity being saved and synchronised through Garmin Connect.

Garmin processes information under its own privacy policy:

https://www.garmin.com/privacy/connect

How UTG uses Garmin information

UTG uses Garmin information to:

  • Maintain your authorised connection.

  • Deliver workouts you choose to send.

  • Display recorded activities and training history.

  • Show available workout and individual-step performance details.

  • Allow your authorised coach to review your training.

  • Compare recorded results with prescribed workouts where the available information supports a reliable comparison.

  • Maintain the security and reliability of the integration.

Garmin information is not automatically published on public leaderboards or used as an official event result.

We do not sell Garmin information, use it for advertising or disclose it for unrelated third-party purposes.

Data minimisation and protection

UTG processes Garmin activity files temporarily to extract the supported information described above. We do not retain the original activity files, GPS routes, precise location history or device metadata as part of the current integration.

Retained detailed lap information, heart-rate samples, cadence and recorded zone boundaries are encrypted at rest. Access is restricted to you, your authorised coach and personnel or service providers who need access to operate, secure or support the service.

Our service-provider and overseas-processing disclosures in sections 4 and 7 also apply to Garmin information.

AI restrictions

UTG does not send Garmin information to AI services.

We do not use Garmin information, or information derived from it, to train, test, evaluate, benchmark or improve AI models.

Any proposed future AI use would require a separate review of Garmin’s contractual requirements, any necessary written permission from Garmin, updated privacy disclosures and appropriate user consent. User consent does not override Garmin’s contractual restrictions.

Disconnecting and withdrawing consent

You can disconnect Garmin through the UTG account controls or Garmin Connect. You may also contact us for assistance.

Disconnecting through UTG disables further transfers through that connection and initiates revocation with Garmin. If Garmin cannot immediately confirm revocation, UTG will indicate that further action or a retry may be required.

We will delete Garmin-imported information and Garmin-derived comparisons from active UTG systems within 30 days of disconnection, unless retention is required by law. This includes retained lap details, heart-rate samples, cadence and zone information.

Any legally required retention will be limited to the necessary information and period.

Residual backup copies may remain until overwritten through the applicable backup-retention cycle. They will not be used for ordinary coaching or other operational purposes, and deletion will be reapplied if a backup is restored.

Independently collected UTG records, including coach prescriptions and manually entered training or nutrition logs, are separate from Garmin imports. Their retention is described in section 8.

Access and export

You can use UTG’s available Garmin data-export controls or contact us to request a copy of the Garmin information we retain about you.

Exports include retained activity and performance information where available. Connection credentials and internal security information are not included.

Garmin branding

Garmin and the Garmin logo are trademarks of Garmin Ltd. or its subsidiaries.

Also update these two sentences in Section 4:

Replace the paragraph beginning “For the planned Garmin integration…” with:

Replit provides application hosting for UTG’s Garmin integration and processes Garmin information handled or stored by the application. Garmin activity records are not included in payment transactions or routine marketing communications and are not sent to Stripe, Squarespace or Resend as part of the current integration.

Replace “Before enabling the integration, we will confirm…” with:

We will keep this policy updated to reflect the providers that receive or process Garmin information and any material changes to those processing arrangements.

Important: This is implementation-aligned draft wording, not legal sign-off. Your complete provider disclosures and backup-retention statements should still be checked for accuracy before publication.## 7. Overseas processing

Some service providers process or store information outside Australia, including in the United States.

We take reasonable steps to ensure overseas recipients protect information consistently with our legal obligations. You can contact us for further information about relevant providers and processing locations.

## 8. Security and retention

We use reasonable technical and organisational safeguards, including access controls and encrypted connections, to protect personal information.

Access is limited to people and providers who need information to perform their authorised role. No online service can guarantee absolute security.

We retain personal information only for as long as reasonably necessary to provide services, maintain required records, resolve disputes, or meet legal, tax and insurance obligations. We then securely delete or de-identify it where appropriate and permitted.

The specific Garmin deletion commitments in section 6 apply to Garmin-imported information and Garmin-derived comparisons. We do not retain that information indefinitely merely because it could be de-identified.

If a data breach is likely to cause serious harm and notification is required by law, we will notify affected individuals and the Office of the Australian Information Commissioner.

## 9. Access, correction, export and deletion

You can contact us to:

- Request access to personal information we hold about you.

- Request correction of inaccurate or incomplete information.

- Request a copy or export of your information, including Garmin information held by UTG, in a reasonably usable format.

- Request deletion of information.

- Withdraw consent to optional processing, including a connected-device integration.

We will respond within 30 days. We may need to verify your identity before acting on a request.

Where we cannot fulfil a request in full, including because a record must be retained by law, we will explain the reason and available next steps.

## 10. Complaints

If you have a privacy concern, contact us using the details below. We will respond within 30 days.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner:

https://www.oaic.gov.au

## 11. Changes to this policy

We may update this policy as our services and obligations change. The latest version will be published on this page with its revision date.

For material changes to connected-device data use or disclosure, we will provide appropriate notice and obtain renewed consent where required before introducing the change.

## Contact us

United Training Grounds Pty Ltd

11–13 Yarra Place

South Melbourne VIC 3205

Australia

Email: Tyler@unitedtraininggrounds.com