Privacy Policy

Effective date: 15 October 2026. This version replaces the policy dated 22 October 2025.

This policy explains how Paddle Collective collects, holds, uses and discloses personal information through paddlecollective.com.au, goldcoast.paddlecollective.com.au, our booking system, our online shop, our mobile app, our events and camps, and our communications with you.

Paddle Collective (ABN 67 690 991 729) operates paddlecollective.com.au and goldcoast.paddlecollective.com.au, all sessions and subscriptions in Western Australia and Queensland, all camps and clinics, the online shop and the mailing list.

In this policy "we", "us" and "our" means Paddle Collective. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth), whether or not the Act formally applies to us at a given time.

What we collect

Information you give us when you book, buy, subscribe, register for an event or contact us:

Name, email address, phone number and address
Date of birth where a session, camp or race has an age requirement
Emergency contact name and phone number for camps, races and multi day trips
Signed waiver and release, including your signature
Anything you choose to tell your coach in the "Message for Coaches" field, which may include health, fitness or injury information relevant to your safety on the water
Payment details, which are handled by our payment providers and never stored by us
Ski preference, hire details and gear sizes
Social media handles if you tag or message us
Photos and video taken at sessions, camps and events where you have given media consent on the waiver

Information collected automatically when you use the website or app: IP address, browser and device type, pages visited, time and date of visit, and the approximate region you are visiting from. We use your region to send you to the Perth or Gold Coast version of the site. We do not store that lookup against your name.

Health and fitness information

If you give us information about a medical condition, injury, medication or fitness level, we treat it as sensitive information. By providing it you consent to us using it to keep you safe on the water, sharing it with the coach running your session or camp, and passing it to emergency services or medical staff if you are hurt. We only ask for what we need to run a safe session. You can decline to provide it, but for some activities (camps, crossings, downwind runs) we may not be able to take you if we do not have enough information to manage the risk.

Why we collect it

To run your booking, subscription, hire, purchase or camp and to communicate with you about it, including weather calls, cancellations and changes
To keep you safe, including sharing relevant details with your coach and with emergency services
To hold a signed waiver for insurance and legal purposes
To send you news, session reminders, camp launches and offers where you have subscribed or booked with us, with an unsubscribe link in every email
To run races, events, competitions and giveaways
To operate, secure and improve the website, booking system and app
To comply with the law, manage insurance claims and incident reports, and resolve disputes

We do not sell personal information.

Who we share it with

We use third party providers to run the business. Each one holds only what it needs for its job:

Wix: hosts the website, the booking system, the online shop, member accounts, the mobile app, contact records and form submissions, including signed waivers
Wix Payments and Stripe: process card payments. We do not see or store your card number
MailerLite: sends our newsletter and camp announcements and holds your name, email and which list or group you are in
Xero: holds invoices and payment records for camps, deposits and ski orders
Google Analytics and Meta (Facebook and Instagram) tools: measure how the website performs and let us show ads to people who have visited
An IP geolocation service (currently ipapi.co): receives your IP address only, to work out which state you are visiting from

We also share information with:

Our coaches and staff, for the sessions and camps they run
Emergency services, medical staff and surf lifesaving personnel if you are injured
Our insurer, lawyers and accountants where needed for a claim, dispute or compliance
Partners who help deliver a specific camp or event (for example a ferry operator, accommodation provider or race organiser), limited to what they need for that event
Courts, regulators and law enforcement where the law requires it, including WorkSafe WA or Workplace Health and Safety Queensland for incident reporting

Overseas storage

Wix, MailerLite, Stripe, Google and Meta store data on servers outside Australia, including in the United States, the European Union and Israel. Those providers operate under their own privacy and security frameworks. By using our services you acknowledge that your information will be stored and processed by these providers overseas.

How we protect it

Access to booking, member and health information is limited to the people who need it. Our site owner and administrator accounts are protected with two factor authentication. Coaches have access to the sessions they run, not to the full customer database. We do not keep card numbers. We delete exports of customer data once they have served their purpose. No system is perfectly secure, and if a breach occurs that is likely to cause serious harm we will tell you and, where required, the Office of the Australian Information Commissioner.

How long we keep it

Booking records, signed waivers and incident reports: 7 years, for insurance and legal purposes
Health and fitness notes given for a single session: deleted or de-identified once no longer needed for safety, and in any case within 12 months
Emergency contact details: for the duration of the camp or event they were collected for, then deleted
Marketing contacts: until you unsubscribe or ask us to delete you
Financial records: 7 years, as required by tax law
Website analytics: as set by Google and Meta, in aggregated form

Children

Paddlers under 18 must be booked by a parent or guardian, who signs the waiver on their behalf. We collect only what we need to coach them safely and we do not market directly to children.

Your rights

You can ask us at any time to:

Tell you what personal information we hold about you
Correct anything that is wrong or out of date
Delete your information, subject to the retention periods above
Stop sending you marketing, which you can also do with the unsubscribe link in any email
Withdraw media consent, after which we will stop using new photos or video of you and remove existing ones from our channels where practical

We will respond within 30 days. We may need to confirm your identity first.

If you are booking for someone else, you confirm you have their permission to give us their details.

Cookies

The website uses cookies for essential functions (keeping you logged in, holding your cart, remembering that you have already been redirected to the right region), for analytics, and for advertising through Google and Meta. You can block or delete cookies in your browser; essential functions may stop working if you do.

Complaints

Contact our privacy officer using the details below. We will investigate and reply in writing. If you are not satisfied you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or 1300 363 992.

Changes

We will post any changes on this page and update the effective date. Material changes will be emailed to current members.

Contact

Privacy officer: Reece Baker

Email: reece@paddlecollective.com.au

Phone: 0438 950 866

Paddle Collective, Scarborough, Western Australia