Privacy policy

Last updated: 3 August 2026

This policy explains what personal information Minzin Muay Thai collects through this website, why it is collected, who it is shared with, and how you can access or correct it. It applies to minzinmuaythai.com and to the personal training services booked through it.

Minzin Muay Thai is a sole-trader personal training business operating in Craigieburn, Victoria, Australia (ABN: TODO-ABN-NUMBER). We handle personal information in line with the Australian Privacy Principles set out in the Privacy Act 1988 (Cth).

What we collect

We only collect what is needed to schedule and deliver a training session. When you book through the form on our contact page, you provide:

• Your name — so Minzin knows who he is meeting
• Your email address — to send your booking confirmation
• Your phone number — to contact you about your session
• Your experience level — so the session can be pitched correctly
• Your chosen program, date and time
• Any health concerns or injuries you choose to tell us about — optional, and used only to keep you safe in training (see below)
• Any optional note you choose to add to your booking

We also record how you said you would like to pay (cash on the day, or online by card), so Minzin knows what to expect.

Member accounts

You can create an optional member account so you do not have to type your details in every time you book. If you do, we store the same details listed above — your name, email address, mobile number, experience level and any health notes — against your account, along with a scrambled version of your password.

We never store your password itself. It is put through a one-way process (hashing) before it is saved, which means nobody — including Minzin — can read it or recover it. That is also why a forgotten password can only be reset, never sent to you.

An account is entirely optional. You can book, cancel and reschedule without one, exactly as before.

Sparring Class interest

The Sparring Class is invite-only. If you register your interest in it, we collect your name, phone number and email address for the single purpose of letting Minzin consider you and contact you if you are accepted. Registering interest does not sign you up to a mailing list and we will not use those details to market anything to you. If you are not offered a place, you are welcome to ask us to delete your details at any time using the contact details below.

We never see or store your card details. If you choose to pay by card, you are taken to a secure checkout page hosted by Stripe, our payment provider. Your card number is entered on Stripe's systems and is never transmitted to, or held by, this website.

To process that payment we pass Stripe your name, email address and the amount due. Stripe handles this information as an independent data controller under its own privacy policy (stripe.com/au/privacy), and it may store and process data outside Australia. We keep only a record of whether a booking was paid, the amount, and Stripe's reference for it — never card numbers.

If you pay cash, no payment information is collected by this website at all.

Health information

The booking form includes an optional field for health concerns or injuries Minzin should be aware of. You do not have to fill it in, and your booking will go through either way — but telling us about an injury, asthma, a heart condition, pregnancy or recent surgery lets Minzin adjust the session so you train safely.

Health information is sensitive information under the Privacy Act 1988 (Cth). By typing it into that field you are consenting to us collecting it for that single purpose. We use it only to plan and safely deliver your training session. It is seen only by Minzin, it is never shared with any third party, never used for marketing, and it is deleted along with the rest of your booking record. You can ask us to correct or delete it at any time using the contact details below.

Anything you tell us about your health in person, or in the general notes field, is treated exactly the same way.

Information collected automatically

Our web host records standard server logs, including IP addresses, browser type and pages requested. These logs are used for security and troubleshooting. This website does not run any analytics or advertising tracking, and we do not set advertising cookies.

How we use it

Information from the booking form is used to:

• Create your session as an event in Minzin's Google Calendar
• Email Minzin the details of your booking
• Send Minzin an SMS alert so a booking is not missed
• Email you a confirmation, including the cancellation deadline and a link you can use to cancel the session yourself
• Send you a confirmation SMS with the address, arrival instructions and that same cancellation link
• Notify you by SMS and email if your session is later cancelled
• Contact you if a session needs to be rescheduled

The confirmation SMS and email are sent once, when you book, and a further message is sent only if the booking is cancelled. These are transactional messages about a session you have booked — they are not marketing, and there is no mailing list to unsubscribe from.

We do not sell your personal information. We do not send marketing emails or add you to a mailing list, and we do not use your details for any purpose other than the ones listed above.

Who it is shared with

Delivering a booking requires a small number of service providers. Each one receives only what it needs:

• Google (Google Calendar API) — your name and session details are stored as a calendar event in Minzin's Google Calendar, and your email address may be attached to the event so you receive Google's reminders. See Google's Privacy Policy.
• Our web host — hosts the website and its email sending, and therefore stores the booking emails in transit.
• ClickSend — sends the booking SMS to Minzin and the confirmation SMS to you. These messages contain your name, phone number and session time. See ClickSend's privacy policy.

We may also disclose information where we are required to by law.

Third-party content on our pages

Some pages load content from other companies, which means your browser contacts them directly and they can see your IP address:

• TikTok — video embeds on the home and training pages. TikTok may set its own cookies and track viewing. See TikTok's privacy policy.
• Google Fonts — the fonts used across the site.
• Cloudflare CDN and unpkg — animation and scrolling libraries.

We have no control over what these companies collect. If that concerns you, browser settings and content blockers can prevent those embeds from loading — the rest of the site will still work.

Where it is stored, and for how long

Booking details live in Minzin's Google Calendar and in his email inbox. Google stores data on servers outside Australia, which means your information may be held overseas. A short-lived technical file on our own server holds your selected time slot for ten minutes while you complete the booking form, and is then deleted automatically.

Our server also keeps a small booking record — your name, email, phone number, chosen program and session time — so that the cancellation link in your confirmation works. It is reachable only through the unique link sent to you, is not published anywhere on this site, and is deleted automatically about two months after your session.

Past sessions are kept as calendar and email records for as long as needed for business and tax purposes, and deleted when no longer required.

If you have a member account, your details are kept on our own server for as long as the account exists, so they are there to fill your next booking in for you. A short summary of each past session — what it was, when it was, and whether it went ahead — is kept with your account so you can see your training history; your health notes and any message you added are not kept in that summary. Ask us to close your account and all of it is deleted.

Security

This website is served over HTTPS, so information you submit is encrypted in transit. Access to the calendar and email accounts holding your details is protected by password and, where available, two-factor authentication. No system is perfectly secure, but we take reasonable steps to protect your information from misuse, loss and unauthorised access.

Member account details and booking records held on our own server are stored outside the publicly reachable part of the site and cannot be requested through a web address. Passwords are stored only in a scrambled (hashed) form, sign-in sessions use protected cookies, and repeated failed sign-in attempts are temporarily blocked.

Accessing, correcting or deleting your information

You can ask us at any time to:

• Tell you what personal information we hold about you
• Correct anything that is wrong or out of date
• Delete your details, where we are not required to keep them
• Close your member account and delete everything held against it

If you have a member account, you can see and correct your own details at any time from your account page — you do not need to ask us.

Email minzinthein786@gmail.com and we will respond within a reasonable period, normally 30 days. There is no charge for this.

Children

This website is not directed at children. Sessions for anyone under 18 must be arranged by a parent or guardian, who provides the contact details and gives consent on the young person's behalf.

Complaints

If you believe your privacy has been mishandled, contact us first at minzinthein786@gmail.com so we can try to put it right. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Changes to this policy

We may update this policy as the business or the website changes. The current version is always the one published on this page, and the "last updated" date at the top will tell you when it last changed.

Contact

See also our Terms of Service.