LEGAL

Privacy Policy

Last updated: May 2026

This Privacy Policy describes how BEjj Lifestyle ("we", "us", or "our"), operated by AleBEjj and accessible at www.bejj.au, collects, uses, discloses and protects personal information provided by users ("you") of our website and services.

By using our website or submitting any form, you consent to the collection and use of your information as described in this policy. If you do not agree, please do not use our services.

1. Information We Collect

We collect information you provide directly to us, including:

• Personal details: First name, last name, age, email address, and phone number
• Physical profile: Height, weight, dominant side, and any injuries or physical limitations
• Training profile: Belt level, years of experience, competition history, training goals, preferred guard style, and focus areas
• Scheduling preferences: Preferred training days, times, location, and timezone
• Account information: Email address and password when you create a member account
• Payment information: Payment is processed securely by Stripe. We do not store credit card numbers or banking details on our servers
• Session and progress data: Training logs, session notes, and progress entries you submit through the dashboard
• Usage data: Pages visited, time spent on site, browser type, and device information collected automatically via standard web analytics

2. How We Use Your Information

We use the information we collect for the following purposes:

• To design and deliver personalised BJJ training programs tailored to your profile and goals
• To process bookings and payments for private coaching sessions
• To communicate with you regarding your booking, training plan, or account
• To send session confirmations, reminders, and follow-up communications
• To provide access to member-only content and the student dashboard
• To power the AI BJJ tutor feature using your training profile as context
• To improve our website, services, and content based on usage patterns
• To comply with legal obligations

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects without your knowledge.

3. Disclosure of Your Information

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

• Service providers: We use trusted third-party services to operate our platform, including Supabase (database and authentication), Stripe (payment processing), and Resend (email delivery). These providers are bound by their own privacy policies and only process your data as necessary to provide their services
• AI services: The AI BJJ tutor feature is powered by Anthropic's Claude API. Your training profile and session context may be sent to Anthropic's API to generate personalised coaching responses. No personally identifiable information beyond what is necessary for coaching context is transmitted
• Legal requirements: We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of BEjj Lifestyle, our users, or the public
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. You will be notified via email or prominent notice on our website

4. Method of Disclosure

Information is disclosed to third-party service providers electronically via secure API connections over HTTPS. All data transmissions between our website and third-party services are encrypted using industry-standard TLS encryption.

We do not disclose your information via physical documents, printed records, or unencrypted channels.

5. Data Storage and Security

We take the security of your personal information seriously. The following measures are in place:

• Encryption at rest and in transit: All data stored in our database (Supabase) is encrypted at rest. All data transmitted between your browser and our servers is encrypted via HTTPS/TLS
• Row Level Security: Our database enforces Row Level Security (RLS) policies ensuring users can only access their own data
• Secure authentication: Passwords are hashed and never stored in plain text. Authentication is handled by Supabase Auth using industry-standard practices
• Payment security: All payment processing is handled by Stripe, which is PCI DSS Level 1 certified. We never store card details on our servers
• Access controls: Access to the database and production systems is restricted to authorised personnel only
• Environment variables: API keys and sensitive credentials are stored as encrypted environment variables and never exposed in source code

While we implement these security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to using commercially reasonable practices to protect your information.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. If you request deletion of your account we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as resolving disputes or complying with legal obligations.

Booking and payment records may be retained for up to 7 years for accounting and tax compliance purposes in accordance with Australian law.

7. Children's Privacy

BEjj Lifestyle provides coaching services specifically designed for children. Where a child under the age of 18 is enrolled in our services, a parent or legal guardian must provide consent and is responsible for the accuracy of the information submitted on the child's behalf.

We do not knowingly collect personal information from children without verifiable parental consent. If you believe we have inadvertently collected information from a child without consent, please contact us immediately and we will delete that information promptly.

8. Your Rights

Under the Australian Privacy Act 1988 and the Australian Privacy Principles, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your personal information
• Withdraw consent for the processing of your information
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au

To exercise any of these rights please contact us using the details below. We will respond to your request within 30 days.

9. Cookies and Tracking

Our website may use cookies and similar tracking technologies to improve your browsing experience and analyse site usage. Cookies are small text files stored on your device. You can control cookie settings through your browser preferences. Disabling cookies may affect the functionality of certain features on the site.

10. Third Party Links

Our website may contain links to third party websites including Facebook, Instagram, and YouTube. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on this page with a revised date. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us: