Privacy Policy
We are bound by the Australian Privacy Principles contained in the Privacy Act 1988 (Cth) (subject to exemptions that apply to us under that Act).
We may, from time to time, review and update this policy, including to take account of new or amended laws, new technology and/or changes to our operations. All personal information held by us will be governed by the most recently updated policy.
Information logged when you visit our site
When you visit this site, our server logs the following information:
The type of browser and operating system you are using your top level domain name, such as .com, .gov, .au, .uk, the address of the referring site, such as the previous site that you visited your server’s IP address, a number which is unique to the machine through which you are connected to the internet—usually one of your service provider’s machines, the date and time of your visit, the address of the pages accessed, and the documents downloaded.
This information is used only for statistical analysis and systems administration purposes. No attempt is made to identify users or their browsing activities, except in the unlikely event of an investigation by a law enforcement agency.
Cookies
A cookie is an electronic token that is passed to your browser which passes it back to the server whenever a page is sent to you.
Our server generates one cookie. It is used to keep track of the pages you have accessed while using our server. The cookie allows you to navigate back and forwards through the web site and return to pages you have already visited. The cookie exists only for the time you are accessing our server.
Google Analytics
In addition to web server logs, this website uses Google Analytics, a web analytics service provided by Google Inc. Reports obtained from Google Analytics are used to help improve the efficiency and usability of this web site.
Google Analytics uses ‘cookies’ to help analyse how users use this site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.
By using this website, you consent to Google processing data about you in the manner and for the purposes set out above. Please refer to Google’s Privacy Policy- external site.
Searches
Search terms you enter when using our search engine are collected, but are not associated with any other information that we collect. We use these search terms to ascertain what people are looking for on our site.
What other kind of information we may collect
In general, the personal information we collect and hold about you include (but are not limited to) your name, contact details (including phone numbers and addresses) and possibly financial information, including your credit card information.
We also collect information about you that is not personal information. For example, we may collect information from you in response to a survey. We generally use this information to report statistics, analyse trends, administer our services, diagnose problems and target and improve the quality of our products and services. To the extent this information does not constitute personal information, the Australian Privacy Principles do not apply and we may use this information for any purpose and by any means whatsoever.
How we collect it and hold it
We may collect and hold your personal information when you request or acquire a product or service from us, register with us as a registered user or for part of a training workshop, provide a product or service to us, complete a survey or questionnaire, enter a competition or event, contribute in a fundraising event, participate in our services or when you communicate with us by e-mail, telephone or in writing (for example if you contact customer service to make a complaint or provide feedback).
We hold personal information in paper form and electronic form.
If, at any time, you provide personal or other information about someone other than yourself, you warrant that you have that person’s consent to provide such information for the purpose specified.
Why we collect it
The primary purpose for which we collect information about you is to provide you with products and services you have requested. We also collect information about you for the purposes outlined below.
We may state a more specific purpose at the point we collect your information.
If you do not provide us with the information that we request, we may not be able to provide you with our products or services. For example, if you do not register as a registered user, you will not be able to access features or services that are reserved for registered users only.
How we use it
In addition to the primary purpose outlined above, we may use the personal information we collect, and you consent to us using your personal information for secondary purposes which are related to the primary purpose (including but not limited to):
💜to provide you with news and information about our products and services, and opportunities that we believe you may be interested in;
💜for purposes necessary or incidental to the provision of goods and services to you;
💜to personalise and customise your experiences;
💜to manage and enhance our products and services;
💜to communicate with you, including by email, mail or telephone;
💜to conduct competitions or promotions;
💜to verify your identity;
💜to collect information for the Police (Your personal information will only be disclosed if you expressly consent to such disclosure at the time of providing Your information on the Site);
💜to investigate any complaints about or made by you, or if we have reason to suspect that you are in breach of any of our terms and conditions (including but not limited to our Website Terms and Conditions of Use available here) or that you are or have been otherwise engaged in any unlawful activity; and/or as required or permitted by any law (including the Privacy Act).
How we disclose it
We may disclose personal information, and you consent to us disclosing your personal information, to third parties:
💜engaged by us to perform functions or provide products and services on our behalf, such as processing credit card information, mailouts, debt collection;
marketing, research and advertising;
💜that are our agents, business partners or joint venture entities or partners;
💜that sponsor or promote any competition that we conduct or promote via our services;
💜authorised by you to receive information held by us;
💜as part of any investigation into you or your activity, for example, if we have reason to suspect that you have committed a breach of any of our terms and conditions, or have otherwise been engaged in any unlawful activity, and we reasonably believe that disclosure is necessary to the Police, any relevant authority or enforcement body, or your Internet Service Provider or network administrator;
💜as part of a sale (or proposed sale) of all or part of our business; and/or
💜as required or permitted by any law (including the Privacy Act).
We will not disclose your personal information to any persons located overseas.
Opting in or out
At the point we collect information from you, you may be asked to ‘opt in’ to consent to us using or disclosing your personal information other than in accordance with this policy or any applicable law. For example, you may be asked to opt in to receive further information or communications from our advertisers and supporters.
You will generally be given the opportunity to ‘opt out’ from receiving communications from us or from third parties that send communications to you in accordance with this policy. For example, you will be given the option to unsubscribe to e-newsletters sent by us.
If you receive communications purporting to be connected with us or our services that you believe have been sent to you other than in accordance with this policy, or in breach of any law, please write to us at the address set out below.
Management and security
We will take all reasonable steps to protect the personal information that we hold from misuse, interference, loss, unauthorised access, modification or disclosure including by means of firewalls, password access, secure servers and encryption of personal information and/or credit card transactions.
However, you acknowledge that the security of online transactions and the security of communications sent by electronic means or by post cannot be guaranteed. You provide information to us via the internet or by post at your own risk. We cannot accept responsibility for misuse or loss of, or unauthorised access to, your personal information where the security of information is not within our control.
You acknowledge that we are not responsible for the privacy or security practises of any third party (including third parties that we are permitted to disclose your personal information to in accordance with this policy or any applicable laws). The collection and use of your information by such third party / ies may be subject to separate privacy and security policies.
If you suspect any misuse or loss of, or unauthorised access to, your personal information, please let us know immediately.
How to make a complaint about a breach of your privacy rights
If you are of the view that we have breached the Australian Privacy Principles, the Privacy Act, or any related privacy code in dealing with your personal information, you may make a complaint by writing to us using the contact details set out below and we will endeavour to provide you with confirmation as to how we propose to deal with the complaint as soon as reasonably practicable. If you are not satisfied with our response to your complaint, you may make a complaint to the Privacy Commissioner.
Direct marketing communications
If you subscribe to one of our mailing lists, we will store your email address, and use it to send you email updates. Each email you receive will include instructions for unsubscribing from our mailing lists; if you unsubscribe, we will remove your email address from the relevant mailing list.
We use an external platform (Hubspot) to send these emails. Each email includes links that allow the collection of information about which links (if any) in the email you click on. We do not use that information. Each email also includes links that allow us to count how many emails have been opened, unopened, clicked on or unsubscribed from, and which mail client was used. We use this information only to prepare aggregate reports on the proportion of emails that have been dealt with in these ways, and which email clients were used
Anonymity and pseudonyms
Under the Australian Privacy Principles, you have the option of not identifying yourself or using a pseudonym when dealing with us. However, this option is not available if we are required or authorised by or under an Australian law, or a court / tribunal order, to deal with individuals who have identified themselves; or it is impractical for us to deal with you if you have not identified yourself or you have used a pseudonym.
Accessing and updating your information
Subject to some exceptions in the Privacy Act, you have the right to seek access to, update and seek correction to the personal information we hold about you. If you make an access request, we will respond to your request within a reasonable period after the request is made. In order to respond to your request, we may ask you to verify your identity.
Registered users of our websites will generally be able to access and update their login details online. We request that you keep your information as current as possible so that we may continue to improve our service to you.
If you would like to seek access to personal information we hold about you, or if you have any questions or complaints about how we collect, use, disclose, manage or store your personal information, you can contact us via the contact details set out below.
Contact details
Bravehearts Foundation Limited
Head Office: 9 Byth Street, Arundel, QLD 4214
Postal Address: PO Box 575, Arundel BC, QLD 4214
ABN: 41 496 913 890
Phone: 07 5552 3000 or 1800 272 831
Fitness apps and activity data
What data we collect
If you choose to connect a third-party fitness device or application (such as Garmin, Strava, Apple Health, or similar) to your fundraising page, we may collect activity data from that device or application. This may include, but is not limited to:
- Distance travelled (steps, kilometres, miles)
- Activity type (walking, running, cycling, swimming)
- Duration and frequency of activity
- Unit-based measurements relevant to your fundraising campaign
This data is collected only with your explicit consent at the point of connection and may be withdrawn at any time by disconnecting your device or application.
How we use this data
Fitness activity data collected through your fundraising page is used to:
- Display your progress on your personal fundraising page
- Update fundraising milestones and campaign goals
- Provide you and your supporters with a meaningful and engaging fundraising experience
- Analyse activity patterns and engagement signals — including through automated or AI-assisted tools — to personalise your fundraising experience, optimise campaign performance, and improve the products and services we offer
Where automated analysis or artificial intelligence is used to process activity data, it is applied solely to enhance your fundraising experience. This may include personalised insights, prompts, or suggestions designed to support your fundraising activity and improve supporter engagement.
Important: Any artificial intelligence or automated processing applied to fitness activity data operates exclusively on anonymised, aggregated data. No personally identifiable information — including your name, contact details, or any data that could be used to identify you as an individual — is shared with or processed by AI systems. Automated processing will not be used to make decisions that have a legal or similarly significant effect on you without your knowledge.
Third-party platforms
When you connect a third-party fitness application, data is transmitted to us via that platform’s authorised API. Your use of any third-party application is governed by that platform’s own terms of service and privacy policy. We are not responsible for the data practices of third-party platforms.
Data retention
Fitness activity data is retained for as long as your fundraising page is active and for a reasonable period thereafter in accordance with our standard data retention practices, or until you request deletion.
Your rights
You may disconnect your fitness device or application at any time. You may also request access to, correction of, or deletion of your activity data by contacting us.
