Privacy Policy

Last updated: 11 August 2026

1. WHO WE ARE

evermoves is a movement and wellness platform operated from East Corrimal NSW 2518, Australia. Our address for service of documents is 114k Cawley Street, East Corrimal NSW 2518. We operate the evermoves website, member app and admin services.

Legal entity: Angela Saville as trustee for the G & A Saville Family Trust trading as evermoves (business name EVERMOVES), ABN 85 337 091 524. (A trust does not have an ACN.)

Privacy Officer: Angela Saville — info@evermoves.com.au

This policy explains how we handle your personal information under the Privacy Act 1988 (Cth), the Australian Privacy Principles (APPs), and the NSW Health Records and Information Privacy Act 2002 (HRIP Act) and Health Privacy Principles (HPPs).

2. SCOPE

This policy applies to evermoves.com.au, app.evermoves.com.au, our iOS/Android apps, and related services. By creating an account or using our services, you acknowledge this policy.

3. WHAT WE COLLECT

Personal information

Name, email, phone, date of birth, address (if provided), photo (if uploaded), account credentials, payment records (card details are handled by Stripe — we never see or store card numbers), booking and attendance history, video views, signed waiver, and communication preferences.

Health information (sensitive)

We collect health information only where needed to run your practice safely and with your consent:

• Injuries or conditions you choose to tell us
• Exercise screening responses
• Your private movement journal (effort, mood, notes)
• Wearable metrics (heart rate, sleep, mindful minutes) only if you connect Apple Health or Google Health Connect

Health information is treated as sensitive under Australian law.

Technical information

IP address, browser type, device information, session identifiers, and limited app usage data needed to operate the service securely. We do not use advertising trackers or personal analytics on the marketing site (see Section 12).

4. HOW WE COLLECT IT

• Directly from you (signup, account settings, classes, forms, waiver)
• From your device only after you grant permission (Apple Health / Health Connect)
• From Stripe for payment confirmations
• From embedded third-party content only when you interact (for example Google Maps on our contact page, or Spotify playlist embeds in the member app)

We collect only what is reasonably necessary and tell you at the point of collection why we are asking.

5. HOW WE USE IT

Your information is used to:

• Provide services you request (bookings, content access, programs, live classes)
• Keep classes safe and adapted to you (injuries, accessibility)
• Process payments (via Stripe)
• Send transactional communications (receipts, reminders, security codes)
• Send marketing communications only if you separately opt in (unsubscribe any time)
• Improve our services using de-identified analytics where possible
• Meet legal obligations (tax, health-record retention, dispute resolution)

We do not use your health information for a new purpose without asking you first.

6. WHO WE SHARE IT WITH

We never sell your data. We share it only with processors that run the service, under agreements requiring protection to Australian standards:

7. OVERSEAS DISCLOSURE

Because these providers may store or process information outside Australia, this is a cross-border disclosure under APP 8 and HPP 14. There is no ministerial country whitelist published as of August 2026 — we use contractual data-processing protections with our processors and remain accountable to you.

8. HEALTH RECORDS & RETENTION

Because we are a NSW health service provider, records containing your health information are kept for at least 7 years from the last entry (or until your 25th birthday if collected while you were under 18), as required by section 25 of the HRIP Act. When information is no longer needed, we delete or de-identify it.

Account deletion de-identifies your personal details; health records we must retain are segregated and explained in the deletion flow.

9. HOW WE PROTECT IT

Encryption in transit (TLS) and at rest, multi-factor authentication for staff, role-based access (health information visible only to staff who need it), audit logging of access to member records, and regular security review. Payment data is handled exclusively by Stripe (PCI-DSS Level 1).

10. ACCESS, CORRECTION & DELETION

Under APPs 12 & 13 and HPPs 6–8 you can:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account (we de-identify anything we must legally retain)
• Withdraw consent (marketing and health imports) at any time

Email info@evermoves.com.au — we respond within 30 days.

11. COMPLAINTS

If you are unhappy with how we have handled your information, contact us first — we respond within 30 days. You may also complain to:

• Office of the Australian Information Commissioner (OAIC): oaic.gov.au · 1300 363 992
• Information and Privacy Commission NSW (IPC) (health information): ipc.nsw.gov.au · 1800 IPC NSW (1800 472 679)

12. COOKIES & EMBEDDED CONTENT

We use essential cookies only for sign-in, security, and site delivery — no advertising or personal analytics cookies. See our Cookie Notice at /legal/cookies.

If you interact with embedded content (Google Maps on our contact page, Instagram on our home page, or Spotify playlists in the member app), those providers may set their own cookies under their own policies.

13. DIRECT MARKETING

Marketing email requires a separate opt-in at signup (unchecked by default). Marketing SMS requires separate SMS consent — email opt-in does not cover SMS. Every marketing message includes a functional unsubscribe honoured within 5 working days.

14. PHOTOGRAPHY & RECORDING

Classes and events may be photographed or recorded. We collect your image, voice and likeness only with your consent via our Photography & Recording Consent form before marketing use or before your first live-stream class where you may appear on camera.

15. DATA BREACHES

If a data breach is likely to cause serious harm, we will notify affected individuals and the OAIC as soon as practicable under the Notifiable Data Breaches scheme.

16. CHILDREN & AGE

evermoves is for people aged 16 and over. Participants aged 16–17 may join only with verified guardian consent; under-16 signups are blocked outright. We collect date of birth to enforce this standard.

17. UPDATES

We may update this policy. Material changes will be emailed to active members. Last updated: 11 August 2026.

18. CONTACT

Privacy Officer · Angela Saville · info@evermoves.com.au
114k Cawley Street, East Corrimal NSW 2518

Related policies

• Terms of Use
• Participant Waiver
• Subscription Terms
• Cookie Notice
• Refunds & Credits Policy
• Accessibility Statement