CELL

Home  /  Privacy

How we handle your information

Privacy policy.

What we collect when you enquire, book or visit, why we collect it, who we share it with, and how it is stored.

Last updated: 29 September 2026

About this policy

Who we are and what this covers.

This policy explains how CELL Performance Lab collects, uses, stores and shares your personal information, including your health information.

CELL Performance Lab is operated by CELL PERFORMANCE LAB TERRIGAL PTY LTD (ABN 14 700 924 429) at 57 Terrigal Drive, Terrigal NSW 2260. In this policy, “CELL”, “we”, “our” and “us” mean CELL PERFORMANCE LAB TERRIGAL PTY LTD.

We provide health and recovery services, so we handle health information. We follow the Privacy Act 1988 (Cth), including the Australian Privacy Principles, and the Health Records and Information Privacy Act 2002 (NSW).

What we collect

We only collect what we need to provide our services safely and effectively and to operate our business.

Contact and account details

  • Name, date of birth, phone number, email address and residential address
  • Emergency contact details
  • Membership, booking and attendance history
  • Payment details (processed by our payment provider; we do not store full card numbers)

Health information

  • Health history, current conditions, medications and injuries
  • Screening answers relating to suitability for therapies, including pregnancy, pacemakers, implants or other relevant medical considerations
  • Assessment notes, protocols and progress reviews
  • Body composition and wellness assessment results, including InBody 970 scan results
  • Information you provide about your response to therapies or services

Health information is considered sensitive information under Australian privacy law. We only collect this information where it is reasonably necessary to provide our services safely and effectively, and with your consent where required.

We collect health information to assess suitability for therapies provided by CELL Performance Lab and to identify any contraindications, risks or precautions that may affect your treatment or participation.

Other information

  • Your health, wellness and performance goals
  • Signed waivers, consent forms and membership agreements
  • Enquiries, feedback and communications you send us
  • Basic website and app usage information

You may make general enquiries anonymously or using a pseudonym. However, we require accurate identification and health information before providing services so we can assess suitability and safety.

How we collect it

Mostly directly from you.

We collect information directly from you when you:

  • Sign up or make bookings through our website or app
  • Complete questionnaires, forms, waivers or health screening documents
  • Complete a complimentary InBody assessment
  • Attend assessments, consultations, scans or therapy sessions
  • Contact us by phone, email, website, social media or in person

We may also collect information when you:

  • Complete an online enquiry form
  • Download resources from our website
  • Register for an event
  • Participate in a promotion
  • Request information about our services

Sometimes we may receive information from another healthcare provider, family member or authorised representative with your consent or where permitted by law.

Where services are provided to a person under 18 years of age, we may collect information from and communicate with a parent, guardian or authorised representative where permitted or required by law.

Why we use it

We do not sell personal information.

We use your information to:

  • Assess your suitability for therapies and services
  • Protect your health and safety during sessions
  • Develop and review your wellness, recovery or performance program
  • Manage appointments, memberships, packages and payments
  • Contact you regarding bookings or account matters
  • Respond appropriately in emergencies
  • Meet legal, regulatory, insurance and record-keeping obligations
  • Improve our services using de-identified information where practical

We only use health information for the purpose for which it was collected, a directly related purpose you would reasonably expect, or where required or authorised by law.

Who we share it with

We only share information where necessary and only to the extent required.

WhoWhy
WellnessLivingBooking, membership and client management services, including the CELL Performance Lab app
Payment providersProcessing payments and direct debits
Doctors and other healthcare practitionersWith your consent, or where permitted by law
Email and SMS service providersAppointment reminders and, where permitted, marketing communications
IT, accounting, legal and business advisersTo support operation of the business under confidentiality obligations
Emergency services, insurers or government authoritiesWhere required by law or necessary to prevent serious harm

Overseas storage

Our booking, membership and client management systems may utilise cloud infrastructure provided by Amazon Web Services (AWS). Information is protected through encrypted storage, secure hosting environments, access controls and backup systems.

Some service providers may store or process information outside Australia. Where this occurs, we take reasonable steps to ensure your personal information is protected in accordance with Australian privacy requirements.

Marketing, photos and the app

Marketing, photos and testimonials.

Marketing communications

Where permitted by law, we may send information about services, events, promotions and educational content that may be relevant to you.

You can opt out at any time by:

  • Clicking the unsubscribe link in emails
  • Following the unsubscribe instructions in SMS messages
  • Contacting us directly

Appointment reminders, booking confirmations and account-related notices are not marketing communications.

Health information and marketing

We do not use your health information, scan results, health history or progress information in marketing materials without your written consent.

Photos, videos and testimonials

We only use your image, name, testimonial or story if you have provided written consent. You may withdraw consent at any time for future use.

Website and app usage

Our website uses cookies and similar technologies to operate effectively and improve user experience.

We use Google Analytics to understand how visitors use our website and to improve our services. Google Analytics may collect information such as:

  • Pages visited
  • Device and browser information
  • Website interactions
  • General geographic location information

This information does not generally identify you personally. You can disable cookies through your browser settings, although some website functionality may be affected.

InBody app

If you choose to use the InBody app, any information collected through that app is subject to InBody’s own privacy policy and practices.

Artificial intelligence and automated systems

CELL Performance Lab may use software tools that assist with administration, communications, client scheduling, reporting and service delivery.

These tools do not make healthcare decisions on our behalf. Any clinical recommendations remain subject to professional review and judgement by qualified practitioners.

Storage, security and retention

How your records are protected, and how long we keep them.

We use a combination of physical, administrative and technical safeguards to protect personal information. These measures include:

  • Password-protected systems
  • Access controls
  • Staff confidentiality obligations
  • Secure cloud-based service providers
  • Encryption technologies
  • Regular software and security updates

We take reasonable steps to protect information against misuse, interference, loss, unauthorised access, modification and disclosure. Paper records are stored securely and, where appropriate, digitised and securely destroyed.

How long we keep records

We retain health records in accordance with applicable legal requirements. Generally, NSW health privacy requirements require health records to be retained:

  • For at least seven years after the last service provided; or
  • Until a person reaches 25 years of age if they were under 18 when last seen

After the required retention period, records are securely destroyed or permanently de-identified.

Data breaches

If a data breach is likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required by law.

Access, correction and complaints

Accessing, correcting and complaining.

Accessing your information

You may request access to personal information we hold about you. We aim to respond within 30 days.

In limited circumstances, we may be entitled to refuse access under applicable law. If that occurs, we will provide written reasons. We may charge a reasonable fee for providing copies of records, but not for making a request.

Correcting information

If any personal information we hold is inaccurate, incomplete or out of date, please let us know and we will take reasonable steps to correct it.

Privacy complaints

If you believe we have not handled your information appropriately, please contact us using the details below. We aim to respond to complaints within 30 days.

If you are not satisfied with our response, you may contact:

Federal

Office of the Australian Information Commissioner

www.oaic.gov.au
1300 363 992

New South Wales

Information and Privacy Commission NSW

www.ipc.nsw.gov.au
1800 472 679

Contact us

Speak to our Privacy Officer.

For privacy enquiries, access requests, corrections or complaints, please contact our Privacy Officer.

CELL Performance Lab, 57 Terrigal Drive, Terrigal NSW 2260

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal obligations or business practices. The current version will always be available on our website and at reception.

Last updated: 29 September 2026  ·  CELL PERFORMANCE LAB TERRIGAL PTY LTD  ·  ABN 14 700 924 429