LMN METHOD
Back to site

Privacy

How we handle
your details.

Plain English, and it describes what actually happens to your information, whether you send an enquiry through the booking form or go on to train with Lachlan. Not a template. Last updated 13 August 2026.

Who we are

LMN Method is the training business of Lachlan Nantes, a sole trader operating on the Gold Coast, Queensland (ABN 91 257 993 884). In this policy, "we", "us" and "our" mean Lachlan Nantes trading as LMN Method. This policy explains how we handle personal information collected through the booking form on this website, and the record we keep of you if you go on to train with Lachlan.

We have chosen to follow the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth) in full, and to treat this form's data to that standard, even where a small business might not strictly be required to. Coaching can touch on a person's health, and we would rather hold that information carefully than argue we do not have to.

You do not have to use the form

You can make a first contact without giving us anything through this site at all. If you would rather stay anonymous to begin with, message the @lmn.method Instagram account instead, and share only what you are comfortable with. The booking form simply makes it easier for Lachlan to get back to you.

What we collect

Only what the booking form asks for:

We collect this information directly from you, when you fill in and send the form. We do not buy it, and we do not collect it from anyone else.

There are no tracking pixels, no advertising cookies and no analytics on this site. We do not build a profile of you, and nothing is shared with data brokers or advertisers.

If you choose not to give your name and at least one contact detail, Lachlan has no way to reply, so the form cannot be sent. Everything else is optional.

Please keep health information out of the form

The "what do you want out of training" box is deliberately labelled to discourage medical detail, and we ask that you keep it to your goals. Health information is sensitive information under the Privacy Act, and the simplest way to protect it is for us not to hold it. If you have an injury or a condition that affects your training, raise it with Lachlan directly when you speak, not through this form.

If you do include sensitive information in that note anyway, you are consenting to us handling it for the sole purpose of responding to your enquiry. It is included in the email to Lachlan and is not stored in any database (see below), so in practice it lives only in his inbox.

Why we collect it, and what we do with it

The only purpose is to respond to your enquiry and arrange training. Your details are emailed to Lachlan so he can get back to you. That is the entire purpose.

We do not use your details for direct marketing. Enquiring does not add you to a mailing list, and you will not receive newsletters or promotions as a result. We will not use or disclose your information for any purpose unrelated to answering your enquiry unless you would clearly expect it, we have your consent, or we are required or authorised by law.

If you become a training client

If you go on to train with Lachlan, he keeps a separate record of you: your name, phone and/or email, a status (enquiry, trial, active, lapsed or stopped), which weekly sessions you hold, any one off sessions, cancellations and no shows, your attendance history, and your session pack totals. It also holds the date the record was created, the date the status last changed, the date any session pack started, and, if you first came through the booking form, a reference number for that enquiry. Two more are the database's own bookkeeping, and they come out in the export like everything else: a record number, and an "archived" marker that nothing in the app currently sets. That is the whole of it, column for column: eleven columns in all, and it is exactly what comes out if Lachlan exports his data.

There is no notes box, no goals box and no injuries box in that record. The only free text it holds is your name and the contact details you gave. If Lachlan needs to remember something about your training, it stays in his head or is said to you directly, never written against your name.

That is put precisely rather than more strongly, and the difference is worth stating. The name field is an ordinary text box, so whatever is typed into it is what gets stored, and it appears in every export and in Lachlan's phone contacts. It holds a name because that is what it is for and that is what it is used for. Apart from those three fields, there is no other box in the client record, on any page of the app Lachlan uses, for anything to be written in. The booking form at the top of this site has four boxes you type into: your name, your mobile, your email, and that optional note. The note is the only one of the four that is never stored, and it is emailed and then discarded.

Attendance is recorded automatically two nights after each session, and each session is marked as attended unless Lachlan has already recorded a cancellation or a no show against it. It is a default rather than an observation: nobody is ticked off a list at the door, and the record says a session went ahead as scheduled unless something was entered to say it did not.

The wait is deliberate rather than a delay, and it is there so the record can still be put right. Recording a session the very next morning would fix it as attended before Lachlan had been awake a full day to notice anything wrong with it. As it stands he has a full day after the session to enter a cancellation or a no show, and once a day has been recorded, its attendance is not changed afterwards.

This client record lives in a separate database to the booking enquiries described above, so a routine deletion of old enquiries can never reach it by accident.

What we keep, and for how long

There are two different records here, kept for two different lengths of time, and they are not the same thing.

The booking enquiry. A minimal record, your name, the contact details you gave, which session you asked about, and whether the message was delivered, and if it was not, what the provider said, is deleted automatically after 30 days by a nightly job. This has not changed. It exists so that a failed delivery can be spotted and followed up, rather than an enquiry vanishing silently.

The client record. If you are training with Lachlan, his record of you is kept for as long as that continues, and then for 24 months after your last session (ruling, 12 August 2026). After 24 months of inactivity the record is listed for deletion, and Lachlan deletes it himself the next time he reviews the client book. It is not deleted automatically, and that is deliberate: a person checks before a real person's record is destroyed, rather than an unattended job doing it while nobody is watching. The trade is honest and worth stating, because it is the one place this choice costs you something: a reviewed deletion happens when he reviews, so if you want your record gone on a particular day, ask him and it is done that day.

The free-text note is never stored. It is included in the email to Lachlan and then discarded. It is not written to any database and does not appear in any log.

The email itself stays in Lachlan's inbox until he deletes it, the same as any other message someone sends him. We destroy or de-identify personal information once it is no longer needed for the purpose above.

Who else handles it, and where it goes

To run the form, and to keep the client record if you go on to train with Lachlan, we use a small number of service providers. Some of them are overseas, which means your details may be disclosed outside Australia when your enquiry is handled or your client record is stored. We take reasonable steps to use reputable providers, but you should know who they are:

If you would rather your details did not leave Australia, contact Lachlan directly through Instagram instead of using the form.

How we keep it secure

The form is served over HTTPS, submissions are rate limited and bot checked, and both records are limited to what is described above: the enquiry, deleted automatically after 30 days, and the client record, which holds no free text beyond your name and contact details, and is deleted on review after 24 months of inactivity. The pages that show a client's name and phone number sit behind Cloudflare Access, a one time PIN sent to Lachlan's own email address, so no one else can reach them. No payment details are ever collected on this site: the shop checkout is handled entirely by Shopify. We take reasonable steps to protect personal information from loss, misuse and unauthorised access.

The calendar link

Lachlan subscribes his own iPhone calendar to a private link, so he can see his schedule with no signal at the gym. That link is a secret address, not a login: there is no username or password behind it, and it works simply because the address itself is hard to guess.

Because of that, the link is built to carry as little as possible. It shows only a first name and last initial, plus the session time, and nothing else. No phone number, no email address, no client status and no pack balance ever appears on it. Each entry does say whether that session is going ahead or has been called off, because that is what a calendar is for and Lachlan needs to see it at a glance. It never says whether anybody turned up: a missed session and an attended one look identical on that link. Anyone who obtained that address could see who trains when, at that level of detail, and nothing more.

The link can be replaced at any time. The old address stops working within about a minute: the replacement is instant where it is made and takes up to a minute to reach every part of Cloudflare's network, so we would rather tell you "about a minute" than claim "instantly". Lachlan replaces it if he ever suspects it has been shared. Unlike this link, the pages that show a client's full name and phone number are behind Cloudflare Access, which is a login, not a secret address: nobody reaches them without a one time PIN sent to Lachlan's own email.

Getting to your information, and correcting it

You can ask what we hold about you, ask for it to be corrected, or ask for it to be deleted. Contact Lachlan (details below) and we will action it, normally within 30 days and at no charge.

If you only ever sent an enquiry, in most cases the record will already be gone, it is deleted automatically after 30 days. If you are, or have been, a training client, your record is not gone, and you can ask for it to be deleted at any time. It will be, and you do not have to wait out the 24 months. Ask Lachlan and he will action it: an erasure asked for before that point is done by hand rather than by a button in the app, so allow a few days rather than expecting it the same minute. If we ever cannot give you access or make a correction, we will tell you why in writing and explain how to complain.

If something goes wrong

If there were ever a data breach likely to cause serious harm, we would follow the Notifiable Data Breaches scheme: assess it, and where required, notify you and the Office of the Australian Information Commissioner as soon as practicable.

Complaints

If you think we have mishandled your personal information, please tell Lachlan first (details below) so we can try to put it right. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC):

Children

If you are under 18, please have a parent or guardian make the enquiry on your behalf.

Changes

If this policy changes, the date at the top changes with it.

How to contact us

Lachlan Nantes, trading as LMN Method (ABN 91 257 993 884), Gold Coast, Queensland.
Email: lmnmethod@gmail.com
Instagram: @lmn.method

← Back to LMN Method