Privacy Policy

Last updated: 22 October 2026.

Who we are

Williams Performance provides online training programs from Queensland, Australia. This policy explains how we handle your personal information, including health information, in line with the Privacy Act 1988 and the Australian Privacy Principles. Contact us at support@williamsperformance.com.au.

What we collect

• Contact details: your name and email address, and your mobile number if you ask your gym to contact you or to check in on you.
• Intake and check-in answers: age, sex, bodyweight, goals, experience, schedule, equipment, preferences and how your training is going, including how you want your next block to feel, how the next few weeks look, how sure you are you'll fit your sessions in, how much you're enjoying your training, exercises you'd like to keep, and what got in the way of any missed sessions (earlier check-ins also asked about sleep, stress, energy and motivation). If you choose to tell us: your postcode, what you used before our program, whether you go to classes at your gym, whether a session with a personal trainer would help, and what's getting in the way when you haven't trained for a while (for example, that you're away).
• How you use the program: the kind of device you signed up on (phone, tablet or computer), whether you use the program from your home screen or in a browser, and when you finish your sessions.
• Health information: your answers to the injury and pre-exercise screening questions at sign-up, your answers to the health questions at each check-in (including any new pain, injury or warning signs and what you tell us about them), when you tell us you're back to normal, and that you've been sick or injured if you tell us that's what's getting in the way (just that, never any details). This is sensitive information.
• Your training records: the weights, reps, times, distances and pace you log, notes you write on exercises, the sets and sessions you tick off, how long your sessions take, how each exercise felt (too easy, about right or too hard), exercises you swap, exercises you'd rather skip, and exercises you ask us to add. Also the choices you make about a session: a lighter day (when you use Program Plus's how-you-feel check, we keep only the lighter or easy day it made, never your answers), the 30-minute version, the cool-downs you finish, and what you pick when a lift has stalled.
• Program Plus: if you have Program Plus, a goal or event you set (such as an event date or a target lift) and the answers you change when you rebuild your program.
• Reviews: if you leave one, what you write and the first name you choose to show.
• Your gym: which gym you train at (or that you don't train at one), and whether you're already a member there.
• How you found us: your answer to "How did you hear about us?", the tag on the flyer or link you used to reach our website, and which client invited you, if one did.
• Enquiries: what you send us by email.
• Payment information: payments are handled by Stripe. We never see or store your card details. We keep your plan, payment status and Stripe customer record.
• Technical information: basic server logs kept by our hosting provider.

We collect this directly from you.

Why we collect and use it

• To build your program, deliver it, and build each new block from how the last one went.
• For a trainer to review your program whenever our safety checks flag something.
• To run your subscription, take payment, and contact you about your program and account.
• To keep our service safe, answer your questions, and meet our legal obligations.
• If you answer the sign-up questions but don't finish signing up, to email you about finishing, using the goal and training answers you gave us (never your health answers): one automatic email a couple of hours later (never overnight), and at most one more from us personally (an email, or a text if you've given us your number for that). That's the most you'll get, and each one has a way to stop them.
• If you start at a partner gym's front desk with your first name and email, to email you a link to set up your program and, if you don't finish setting up, up to two reminders (about a day later and 3 days later, or one of them from us personally instead), each with a way to stop them.
• To count, for each partner gym, how many people who train there sign up, start a free trial, keep paying, cancel or come back, how many were already members or have joined since, and how many keep training and how often (from the sessions you log). A partner gym is only ever told totals, never your name or anything else that identifies you, and any total from 1 to 4 is shown as "under 5", unless you ask us to pass your details on (next).
• If you ask your gym for a tour or a call, from your program or when you sign up, to send that gym your name, mobile, email, whether you're a member there and the times you picked, and to email you a copy. We only send it when you tick the box, each time, and never anything about your health, your program or your payments. It shows on the gym's own page until they've dealt with it, and for 30 days after. The gym can then tell us what happened (for example, that you came for a tour or joined). If you asked for a tour or a call, or said you were thinking of joining, your program may also ask whether you joined. We use those answers only to count, as above.
• If you ask one of your gym's personal trainers to contact you from your program, to send that trainer your first name, your mobile, your email if you choose to be contacted by email, what you want help with and how and when to contact you, and to email you a copy. We only send it when you tick the box, each time, and never anything about your health, your program or your payments. The trainer isn't part of Williams Performance. They can tell us what happened (for example, that you booked a session), which we use only to count, as above.
• If you train at a partner gym and tick the box to let them check in on you, and you then go 12 days without a session, to send that gym your first name, mobile, email and how long it's been since your last session, so their team can check in on you. If you tell us you're sick, injured, away or busy, we hold off for 2 weeks. We never send anything about your health, your program or your payments. You can turn it off any time under Account in your program. The gym can tell us what happened (for example, that they reached you).
• To understand and improve our service: for example, which questions on the sign-up form people stop at, where our members live, what keeps them training, and when they train. We use totals for this, not anyone's name. To count how many people visit our website and how far they get through the sign-up form, your browser tells us when you first open our website in a browser tab and each time a step of the form is reached, with only the kind of device and roughly where you came from (a partner gym's code, a flyer, an invitation or another link): never your name, your answers, a cookie or anything else that identifies you. If you came through one of our QR codes or links, its tag (the same for everyone who uses that code) and that visit's random number (below) go with it too.
• To see which flyers, links and invitations bring people to us, and to give clients the free month they earn for inviting a friend. When a friend you invited makes their first payment, we tell you that a friend has joined, but not who.
• If you leave a review and choose to share it, to show it on our website with your first name. If you keep it private, only we see it. You can change your choice any time from the link in your review email.
• We may ask for your feedback. Your answers are used to improve the service and aren't published without your permission.

We do not sell your information. Apart from asking for a review (one email, and one reminder a week later if you haven't left one, each with an unsubscribe link), we don't send you marketing emails unless you've asked to hear from us. If you have Program Plus, you also get a progress report by email at the end of each month of training, made from your training records, and you can turn it off with the link in it.

Health information and your consent

We collect health information only with your consent, and only to build a safe program. You give it by ticking the separate health-information consent box on the intake form, which also covers the monthly check-ins, and we record when you gave it. The intake includes the standard pre-exercise screening questions (APSS Stage 1). You can withdraw your consent by emailing us, but we may then be unable to provide the service.

Our programs are for people who are fit and healthy. If you answer Yes to the injury question or to a screening question, you can't sign up yet, and we don't keep the answers you gave.

AI and automated decisions

Your answers about your training, your check-in answers and your training records are sent to an AI service (Anthropic) so it can help draft your program. Your health answers aren't sent. Your name, email address and phone number are left out, and before anything you've typed is sent, we remove names, email addresses and phone numbers from it where our software can find them. It is generated and sent automatically without a personal check, unless our automatic safety checks flag something, in which case a trainer reviews it first.

Some decisions are made automatically by set rules: for example, if you answer Yes to the injury question or a screening question, you can't sign up until you're cleared, if a check-in reports new pain, an injury or warning signs, your program pauses until you tell us you're back to normal (for warning signs, your sessions are hidden until a doctor has checked you), and if you come back after 7 days or more with nothing logged, your next sessions start a little lighter (you can skip that). If you think one of these decisions is wrong, email us and a person will look at it.

Who we share it with, including overseas

Apart from your gym, when you ask us to contact it for you (above), we share information only with the services we use to run Williams Performance. Some are located, or store data, outside Australia, including in the United States.

• Anthropic: the AI service that helps draft programs (your training answers, check-ins and training records; never your health answers; your name, email address and phone number are left out, and removed from anything typed where our software can find them).
• Netlify: hosting, storage of your records and backups, and our enquiry form.
• Stripe: payments.
• Resend: sends our emails. Emails carry your name, email address, your private program link, and whatever the email is about. Some emails to us (for example, a program ready for review, or a check-in reporting an injury) include health information.
• Google Workspace: our business email, which receives those emails to us and any email you send us.
• Google Fonts: our website loads its fonts from Google, which means your browser's IP address is sent to Google when you open a page.

We take reasonable steps to make sure these providers handle your information in line with Australian privacy law. Information held overseas may be accessible to authorities there under local laws.

Cookies and your device

Your program page keeps a copy of your program and what you've logged on the phone or computer you open it on, so it works with no signal at the gym. If you open it on someone else's device, tap Remove from this device under Account in your program when you're done. The sign-up form also saves your answers on your device as you go (for up to 7 days, and deleted once you send them), so you don't lose them if you're interrupted. It never saves your health answers or the boxes you tick, and on a shared sign-up device, like a tablet at a gym's front desk, it saves nothing at all. The monthly check-in also keeps your answers on your device until you send them (for up to 14 days), apart from the health questions, and Remove from this device deletes them too. If you reach our website through one of our flyers, a gym's QR code or a client's invite link, your browser remembers that for up to 30 days, so it can be included if you sign up. Your browser also makes a random number for that visit. With it, we see the steps of the visit: which of our pages you open (the home page, the sample program and the sign-up form), whether you scroll to our prices, how far you get through the sign-up form, how long you spend on a page, and whether you start, with the code's tag and the kind of device (phone, tablet or computer). That's how we see how many people each flyer or QR code brings and where people stop. The number isn't a cookie, and nothing that identifies you goes with it: not your name, your answers or your IP address. On a shared device, like a gym's desk tablet, it's kept for that browser tab only. If you send the sign-up questions, the number is kept with your sign-up, so we can see how you found us and how your visit went, and it's deleted with the rest of your data. A visit that never signs up is deleted after 13 months. We count every other visit the same way, once per browser tab, with only the kind of device, roughly where you came from and the kind of website that sent you (for example a search engine, a social media site or an email, never the address itself). On our public pages we also count, the same way, which pages are opened, which of our buttons, links and questions are tapped, how far down a page people scroll and roughly how long they stay. On the sign-up form we count only our own buttons, never your answers. We don't run advertising or analytics trackers on our website, and we don't set cookies on clients' devices. Our marketing emails (offers and tips, never your program emails) may tell us whether they were opened and which link was clicked, so we can see which emails are useful; the unsubscribe link in each one stops them. The only cookies are sign-in cookies: one on our own trainer's phone, and one for a partner gym's staff when they sign in to their club's page.

Security

We take reasonable steps to protect your information. Your program link is a long private web address, our records are stored with our hosting provider, and our admin area is protected by a password and two-step verification. If your link is shared or leaked, email us and we'll replace it with a new one straight away. No system is perfectly secure, so please keep your link private.

How long we keep it

• If you answer the intake questions but never pay, we delete those answers automatically after 90 days.
• If you start at a partner gym's front desk but never finish signing up, we delete your name, email and answers automatically after 90 days.
• Otherwise we keep your records while you are a client and for 2 years after your subscription ends or your one-off program finishes, and then delete them automatically.
• Weekly backups are kept for 8 weeks, so a deleted record is fully gone from backups within 8 weeks.
• Payment and tax records are kept by Stripe and by us for 7 years, as the law requires.
• Copies of emails already sent stay in the recipient's inbox and in our email provider's logs for their own retention period.

You can ask us to delete your information sooner, subject to those legal record-keeping requirements.

Your rights

You can ask to see, correct or delete your information at any time by emailing support@williamsperformance.com.au. We can send you a copy of everything we hold about you, correct your answers, or delete your records. We may ask you to confirm who you are, and we will respond within 30 days.

Data breaches

If a data breach is likely to cause you serious harm, we will assess it promptly, take steps to contain it, and tell you and the Office of the Australian Information Commissioner, as the law requires.

Children

Our programs are for people aged 18 and over. We don't knowingly collect information from anyone under 18, and if we find we have, we delete it.

Complaints

If you have a privacy concern, email support@williamsperformance.com.au. We will reply within 5 business days and aim to resolve it within 30 days. If you're not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We may update this policy from time to time. We'll email current clients about any significant change, and the date at the top shows when it last changed.