Who We Are
Our website address is: https://www.firmc.com.au.
FIRMC® (Fitness Industry Risk Management Consulting) (“we”, “us”, “our”) is committed to protecting your privacy and handling personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
This Privacy Policy explains how we collect, use, disclose, store, and protect your personal information when you visit our website or interact with us.
What Personal Data We Collect and Why We Collect It
Comments
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address and browser user agent string to help spam detection.
An anonymised string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy. After approval of your comment, your profile picture is visible to the public in the context of your comment.
Media
If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS). Visitors to the website can download and extract any location data from images on the website.
Cookies
If you leave a comment on our site you may opt in to saving your name, email address and website in cookies. These are for your convenience so you do not have to fill in your details again when you leave another comment. These cookies last for one year.
If you have an account and log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out, login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after one day.
Analytics
Our website uses cookies (as mentioned above) and similar technologies to improve functionality and analyse usage.
We may use:
• Google Analytics
• Meta (Facebook) tracking tools
• LinkedIn Insight Tag
• WordPress‑related cookies
• Social media sharing widgets
These tools may collect information such as IP address, device type, and browsing behaviour.
You can manage cookies through your browser settings.
Embedded Content from Other Websites
Articles on this site may include embedded content (e.g., videos, images, articles). Embedded content from other websites behaves in the same way as if the visitor has visited the other website.
These websites may collect data about you, use cookies, embed additional third party tracking, and monitor your interaction with that embedded content, including tracking your interaction if you have an account and are logged in to that website.
Additional Personal Information We Collect
We may also collect:
• Name, email address, phone number
• Business or organisational details
• Information submitted through contact forms
• Information provided during consulting engagements, audits, or training
• Payment or invoicing information
• Any documents or data you voluntarily provide
We only collect information that is reasonably necessary for our business activities.
How We Use Personal Information
We use personal information to:
• Provide consulting, training, and advisory services
• Respond to enquiries and provide customer support
• Manage bookings, registrations, and client relationships
• Send resources, updates, or newsletters (with opt out options)
• Improve our website and services
• Maintain business records and comply with legal obligations
We do not sell personal information.
How Long We Retain Your Data
If you leave a comment, the comment and its metadata are retained indefinitely so we can recognise and approve follow up comments automatically.
For registered users (if any), we store the personal information provided in their user profile. Users can see, edit, or delete their personal information at any time (except username). Administrators can also see and edit that information.
We retain other personal information only as long as necessary for business or legal purposes.
What Rights You Have Over Your Data
You may request:
• An exported file of the personal data we hold about you
• Correction of inaccurate, incomplete, or outdated information
• Erasure of personal data we hold about you (except where retention is required by law)
We may require identity verification before processing requests.
Where We Send Your Data
Visitor comments may be checked through an automated spam detection service.
Disclosure of Personal Information
We may disclose personal information to:
• Service providers (hosting, email, CRM, analytics, payment processors)
• Contractors or consultants assisting with service delivery
• Professional advisers (legal, accounting, insurance)
• Regulatory bodies if required by law
We take reasonable steps to ensure third parties comply with the APPs.
Cross Border Disclosure
Some service providers may store or process data outside Australia (e.g., cloud hosting, email services, analytics platforms).
Where this occurs, we take reasonable steps to ensure overseas recipients comply with the APPs or equivalent safeguards.
Data Security
We take reasonable steps to protect personal information from:
• Misuse, interference, or loss
• Unauthorised access, modification, or disclosure
Security measures include:
• Secure cloud storage
• Access controls and authentication
• Encryption where appropriate
• Staff confidentiality obligations
Official Social Media Buttons
Facebook Like, Recommend, and Share Buttons
We embed a Facebook widget to allow you to see likes/shares/recommends and interact with our pages. This widget may collect your IP address, browser user agent, store and retrieve cookies, embed tracking, and monitor your interaction.
Facebook’s privacy policy: https://www.facebook.com/about/privacy/update
X (former Twitter Tweet) Button
We use a X widget. Requests to X’s servers make your IP address visible to X.
X’s privacy policy: https://x.com/en/privacy
LinkedIn Share Button
We use a LinkedIn Share widget. Requests may track your IP address.
LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy
Complaints
If you have concerns about how we handle your personal information, please contact us.
We will investigate and respond promptly.
If you are not satisfied, you may contact the Office of the Australian Information Commissioner (OAIC).
Contact Us
Please contact us through our website if you have any questions about our privacy policy.
Last updated: 18 March 2026