top of page

  • Resolute Strength & Conditioning ("RSC", "we", "us" or "our") is committed to protecting the privacy of the people we work with. Our coaching services involve information about physical health, injury history, athletic performance, wellbeing and personal circumstances, and many of our athletes are children and adolescents. We take our responsibility to handle that information carefully and securely.

    This policy explains:

    • what personal and sensitive information we collect and why;

    • how we collect, hold, use and disclose it, including through our digital platforms;

    • how we use AI and automated tools;

    • when information may be shared with third-party providers or sent overseas;

    • how we protect it and how long we keep it;

    • how information about athletes under 18 is handled;

    • how you can access or correct your information, or make a complaint.

    Legal status. RSC provides services that assess, maintain and improve physical fitness and health and we hold health information. We therefore handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), even though we operate as a small business. Where the Health Records (Privacy and Access) Act 1997 (ACT) or other law applies to us, we also comply with it.

    This policy applies to people who visit our website, enquire about our services, take part in our programs, buy our products or use our digital resources.

    • Resolute Strength & Conditioning is an Australian sole trader business providing strength and conditioning coaching, athletic development, performance training and related educational services.

    • Operator: Liam Kiley, founder and head coach (ASCA Level 2A accredited)

    • ABN: 84 655 281 357

    • Address: 19 Captain Cook Crescent, Griffith ACT 2603

    • Email: liam@resolutesc.com.au

    • Phone: 0428 554 317

    • Website: https://www.resolutesc.com.au/

    • Liam Kiley is our privacy officer. Contact him about any privacy matter using the details above.

  • We collect information that is reasonably necessary for our functions and activities. Depending on how you deal with us, this may include the following.

    3.1 Identity and contact information

    Full name and preferred name, date of birth and age.

    Email address, telephone number and postal or residential address where needed.

    Emergency contact details, and parent or guardian details for athletes under 18.

    Information about a person other than you (for example an emergency contact). If you give us someone else's details, please make sure they know you have done so.

    3.2 Account, membership and administrative information

    Training platform account details and identifiers.

    Package, subscription and membership details; bookings, attendance and scheduling records.

    Communications, enquiries and support history.

    Records of renewals, suspensions and cancellations.

    3.3 Health, wellbeing and exercise information (sensitive information)

    To coach safely and effectively we may collect:

    injuries, medical conditions and physical limitations;

    pre-exercise screening results (for example the ESSA Pre-Exercise Screening Tool), and medical clearance or professional recommendations;

    sleep, fatigue, soreness, stress, readiness and recovery information, including daily and weekly wellness questionnaires and check-ins;

    exercise history, training tolerance and perceived exertion;

    other health information you choose to share.

    Health information is sensitive information under the Privacy Act. We collect it with your consent (or your parent or guardian's consent for a child) and use it only for purposes connected with safe, appropriate and effective service delivery, or as the law allows.

    3.4 Performance and development information

    Strength and resistance-training results, loads, sets, repetitions and completed workouts.

    Sprint, agility, power, endurance and maximum aerobic speed testing.

    Body mass, height and other anthropometric measurements you agree to provide.

    Training volume, intensity, workload, attendance and participation.

    Training goals, reviews and development plans, and coaching notes.

    3.5 Payment and transaction information

    We collect details of what you purchase, billing arrangements, payment history, invoices, refunds and balances. Payments are processed by third-party providers such as Stripe. We do not store complete payment card details. Those providers handle financial information under their own terms and privacy policies.

    3.6 Photos, video and media

    We may collect training photos and videos, progress photos you provide, testimonials and results. Collecting these for coaching or assessment does not authorise public use. Promotional use is covered in section 12.

    3.7 Website and technical information

    IP address, device and browser information, pages visited, session information, cookies and similar technologies, and analytics data. What we collect depends on the technologies enabled on our website.

  • We usually collect it directly from you or, for children, from a parent or guardian. This happens when you:

    • submit an enquiry or registration form, or contact us by email, phone, message or social media;

    • enrol in a program, buy a service or product, or make a booking or payment;

    • attend a consultation or assessment, complete screening forms or wellness questionnaires;

    • take part in sessions, record workouts or submit testing results in a training app;

    • provide feedback, testimonials or media;

    • use our website or connected digital services.

    We may also receive information from services we use to deliver our programs, such as training apps, scheduling platforms and our athlete management systems. Where practical, we explain the purpose of collection when we collect it.

  • We use personal information for the purposes it was collected for, and for related purposes you would reasonably expect.

    Coaching and athlete development: designing and delivering individual training programs; assessing capabilities and readiness; monitoring performance, training response and recovery; adjusting exercise prescription and workloads; running consultations, check-ins and program reviews; providing educational resources and general nutrition guidance within our professional scope.

    Business administration: managing enrolments and subscriptions; scheduling; processing payments and keeping transaction records; sending service information and reminders; responding to enquiries; keeping records.

    Service improvement: evaluating program effectiveness; improving our platforms; fixing technical issues; developing resources.

    Safety, legal and compliance: managing safety risks and incidents; handling complaints and disputes; protecting our systems; meeting legal obligations.

    We will not use personal information for an unrelated purpose without your consent or another lawful basis.

  • We apply extra care to health information. Access is limited to people who need it for coaching, safety or administration.

    We will not disclose an athlete's health information to sporting organisations, other coaches, schools, parents, guardians or other third parties just because they are connected to the athlete. Disclosure needs a proper basis: consent, the purpose of collection, the athlete's age and capacity, safety, and legal obligations.

    RSC does not diagnose or treat injury or illness. We may suggest you see a qualified health professional. Please give us accurate, current information and tell us promptly about changes that affect safe participation.

  • We coach children and adolescents, including athletes aged 10 to 17. For junior athletes:

    • we collect only what is reasonably necessary, including contact, emergency, health, screening and performance information;

    • we seek consent from the athlete and/or a parent or guardian, considering the athlete's age, maturity and capacity (as a general rule, a person aged 15 or over is presumed able to make their own privacy decisions, though we assess each case);

    • we explain how we use information in age-appropriate language;

    • we take extra care before disclosing or publishing anything about them.

    A parent or guardian does not automatically have access to every piece of a young person's information. We assess requests having regard to the athlete's age and capacity, safety, privacy and the law. Parents will ordinarily have visibility of the programs, payments and logistics for athletes who are young children.

    Media involving junior athletes. We will not publish identifiable images, video, testimonials or achievements of a junior athlete without specific permission from the athlete and a parent or guardian. Enrolling in a program is not permission for promotional use.

  • We use digital systems to run programs and keep athlete records, including HubFit and our custom Resolute Periodisation Calendar. These may store or process athlete profiles, programs, completed workouts, strength and testing records, anthropometric measurements, readiness and wellness responses, schedules, attendance and coaching notes. Information may be synchronised between authorised systems to keep records consistent.

    Calculations and analysis. Our systems calculate and display figures from recorded data, such as estimated strength, training load, test changes, rankings and readiness summaries. These are estimates to assist coaching decisions, not directly measured results or medical assessments.

    Access and security. Records are accessible only to authorised people. Our Calendar requires multi-factor authentication for coach accounts and uses database-level access controls so that data is limited to the responsible coach. No internet-connected system can be guaranteed completely secure.

  • We use some software that works partly or wholly automatically.

    • HubFit AI Program Builder. We may use HubFit's AI tools to help build training programs and personalised nutrition guides. A coach reviews and adjusts outputs before they are given to you.

    • Calculations and dashboards. Our Calendar automatically calculates loads, trends and summaries from your recorded data. These inform, but do not make, coaching decisions.

    • General-purpose AI assistants. We use Claude, ChatGPT and Microsoft Copilot to help with drafting, administration, planning and analysis. We aim to limit the identifiable athlete information we enter into them, and a coach reviews anything they produce before it affects you.

    We do not use AI or other automated tools to make decisions that significantly affect your rights or interests (for example accepting you into, or removing you from, a program) without human involvement. [CONFIRM: if access is suspended automatically when a payment fails, describe that here: "If a scheduled payment fails, access to our training app may be paused automatically until payment is resolved. A coach reviews any ongoing non-payment before a membership is ended."]

    If you would like to know more about the automated tools used with your information, or would like a coach to review an output or decision, contact us.

  • We use third-party providers to run our business. Depending on the service, they may process information for us or under their own terms. They include:

    • Athlete management and coaching: HubFit.

    • Database, hosting and website: Supabase, Netlify, Wix.

    • Scheduling and administration: Calendly, Google Workspace, Microsoft 365 (including OneDrive and Outlook).

    • Payments and subscriptions: Stripe.

    • Forms, communications and automation: Tally, Make, Klaviyo and similar providers where used; and AI assistants (Claude from Anthropic, ChatGPT from OpenAI and Microsoft Copilot).

    • Cloud storage: Google Drive, OneDrive and similar business storage.

    • Social media and content: Instagram, Facebook, YouTube and similar platforms.

    We choose providers with appropriate security and privacy safeguards and share only what is reasonably necessary. Their own privacy policies also apply. Using a provider does not remove our responsibility for your information.

  • Many of our providers host or support their services outside Australia, so your information may be stored or accessed overseas. Depending on the provider, this may include the United States, Europe and Asia-Pacific. Our Supabase database is hosted in Australia, and our Netlify functions run on Netlify's global infrastructure.

    Before disclosing personal information overseas we take reasonable steps to make sure the recipient handles it consistently with the APPs. By giving us your information you understand that, in some cases, overseas recipients may not be subject to Australian privacy law.

  • We may like to recognise achievements and promote our services using photos, videos, testimonials and results. We will ask for your consent (or a parent or guardian's consent, together with the athlete's, for juniors) separately from enrolment. Consent is optional, and you can say no without affecting your training.

    You can withdraw consent for future use at any time by contacting us. We will take reasonable steps to remove content under our control, but content already shared or republished by others may not be removable. Results and testimonials we publish will be genuine and not misleading.

  • Our website may use cookies and similar technologies to operate, remember preferences, analyse traffic, support embedded content and measure marketing effectiveness. Some are run by third parties. You can manage cookies through your browser and any consent controls on our site. Blocking some cookies may affect how the site works. Where the law requires consent for tracking, we will ask for it.

  • We may disclose personal information where reasonably necessary and legally permitted to:

    • deliver the services you requested and manage your account;

    • process payments and bookings;

    • provide technical and administrative support and secure our systems;

    • obtain professional advice (for example legal, accounting, insurance);

    • respond to lawful requests, or to prevent a serious threat to life, health or safety;

    • report concerns about a child's safety where the law permits or requires.

    We do not sell personal information. We do not give confidential athlete information to unrelated third parties for their own marketing. We will consider disclosure to other coaches, sporting organisations or healthcare professionals only in line with consent, the purpose of collection and the law.

  • We take reasonable steps to protect personal information from misuse, interference, loss and unauthorised access, modification or disclosure. Depending on the system, our measures include:

    • password-protected accounts and multi-factor authentication;

    • role-based permissions and database row-level access controls;

    • encryption in transit and appropriate encryption at rest;

    • restricted administrative credentials, with integration keys and tokens stored securely and rotated when needed;

    • access logging, monitoring and vulnerability remediation;

    • backups and recovery arrangements.

    We review these measures as our systems and the sensitivity of the information change. No system or electronic communication is completely secure, and we cannot promise our systems are immune from attack.

  • We follow a documented Data Breach Response and Notification Policy, published on our website. If an eligible data breach occurs under the Notifiable Data Breaches scheme, we will assess it promptly, notify the Office of the Australian Information Commissioner (OAIC) and affected individuals where required, and take steps to reduce harm. We take particular care with incidents involving health information or junior athletes. Report suspected incidents using the details in section 23.

  • We keep personal information only as long as needed for the purpose it was collected, our legal obligations and legitimate business needs. In particular:

    • health, screening and coaching records: 7 years after we last provided a service to an adult; and, for a person who was under 18 when the information was collected, until they turn 25;

    • financial and transaction records: at least 5 years;

    • marketing contacts: until you unsubscribe or ask us to delete them;

    • website analytics: according to the retention settings of the analytics provider.

    When information is no longer needed and we are not required to keep it, we securely destroy or de-identify it. Backups may hold deleted information for a short, limited time.

  • You can ask us for:

    • access to the personal information we hold about you;

    • correction of inaccurate, incomplete or out-of-date information;

    • information about how we handle your information;

    • deletion where appropriate and lawful;

    • withdrawal of consent where we rely on it.

    We may ask you to verify your identity. We respond within a reasonable time, generally within 30 days. We will not charge for making a request or for correcting information; we may charge a reasonable fee to give access. If we refuse a request, we will explain why and how to complain. Requests relating to junior athletes may require us to consider the athlete's capacity, parental authority, safety and the law.

  • We may send information about programs, services, resources and promotions. We send marketing with consent or as the law allows, in line with the Spam Act 2003 (Cth), and every marketing message includes a way to unsubscribe. Opting out of marketing does not stop essential messages about your sessions, payments or account.

  • You can browse our website and make general enquiries without identifying yourself. We usually cannot coach you anonymously or under a pseudonym because we need to know who you are to deliver safe, tailored services. If we receive personal information we did not ask for and could not have collected, we will destroy or de-identify it where lawful and practical.

  • If you have a concern about how we handle your information, contact us. We will acknowledge your complaint promptly, investigate, decide on any corrective action and tell you the outcome, ordinarily within 30 days.

    If you are not satisfied, you can complain to the Office of the Australian Information Commissioner: www.oaic.gov.au, 1300 363 992. If your complaint concerns health records held in the ACT, you may also contact the ACT Human Rights Commission.

  • We update this policy when our business, systems, providers or the law change. The current version is on our website with its revision date. Where a change needs your notice or consent under the law, we will take appropriate steps. Changes do not retrospectively give consent for uses that require separate permission.

sign up to embrace the journey, pursue greatness and prevail in success.

links & resources

getting started

contact us

logistics 

terms & conditions

privacy policy

our story

training readiness questionnaire

frequently asked questions

about us

resources usage policy

our squad

returns policy

testimonials

logo_transparent_background1.png

PRIVACY POLICIES

bottom of page