1. About this policy
This Privacy Policy applies to the Swinburne Boxing Club Member Portal and related account, membership, booking, attendance, payment, and training features.
System Operator: Lam Wee Liang, on behalf of Swinburne Boxing Club
Contact: trunkskid5439@gmail.com
2. Information the system may collect
Depending on the features you use, the system may collect or receive:
- name, email address, phone number, and date of birth
- emergency contact information
- profile photos
- membership and package information, including Monthly, Walk-in, PT, Rental, and Free Trial information where applicable
- class bookings, PT bookings, attendance, and booking history
- payment requests and payment receipt images
- notification preferences and push-notification subscriptions
- Health & Waiver information that you submit for training and safety administration
- account, authentication, login, verification, password-reset, and other security information
3. How information is used
Information may be used for the following purposes:
- creating and managing member accounts
- administering memberships, packages, package requests, and payment verification
- managing class and PT bookings, capacity, schedules, attendance, and training history
- administering Rental and Free Trial features where applicable
- sending operational class, PT, membership, booking, security, and account notifications
- administering Health & Waiver submissions and training-safety requirements
- preventing fraud, abuse, unauthorised access, and account misuse
- maintaining, troubleshooting, and improving the system
- responding to support requests, disputes, and legitimate recordkeeping needs
4. Service providers and storage
The system may use Cloudflare Workers, Cloudflare D1, and private Cloudflare R2 storage to operate the portal. Profile photos and payment receipt images may be stored as private R2 objects, with authenticated application routes used instead of public bucket URLs.
Google authentication may be used when you choose it. Email and notification providers configured by the application may also process information needed to deliver account or operational messages. Provider configuration details and secrets are not published here.
Authorised Admin and Coach access is limited according to the permissions required for their work. Reasonable technical and organisational measures are used to protect data, but no online system can guarantee absolute security.
5. Retention
Information may be retained for as long as needed to provide the service and maintain legitimate business, safety, accounting, dispute-resolution, legal, and historical records. Temporary authentication, password-reset, verification, and similar security records may be removed after they expire or are no longer needed.
Retention periods can vary by record type and operational need. The system does not promise that all data is stored only in Malaysia; service providers may process data in other locations as required to provide their services.
6. Your choices and requests
Subject to applicable law, you may contact the System Operator to request access to or correction of personal information. Identity verification may be required before a request is handled.
You may also ask about deletion. A deletion request may be limited where information is needed for legitimate business, safety, accounting, dispute-resolution, legal, or historical retention.
7. Notifications and marketing
The system may send operational notifications about classes, PT sessions, bookings, memberships, payments, account security, and related service activity. Reminder delivery can depend on network, browser, device, or push-notification availability.
Personal information is not sold for advertising.
8. Changes and contact
This policy may be updated when the system, services, or legal requirements change. The effective date above identifies the current version shown on this page.
Questions or requests can be sent to trunkskid5439@gmail.com.