Privacy Policy

Our privacy approach

MoveDone is designed around transparent, proportionate handling of personal information. Where the Privacy Act 1988 and Australian Privacy Principles apply to MoveDone, we intend to comply with those requirements. We also use those principles as our privacy baseline while the business grows.

Information we collect

• Account information such as your first name and email address.
• A securely derived password hash and salt. MoveDone does not need to store your plain-text password.
• Move details such as dates, origin and destination, property type, bedrooms, bathrooms, pets and selected services.
• Your checklist, task progress and saved moving preferences.
• Essential session and security information, including a session token, device/browser information and timestamps.
• Communications, complaints or support information you choose to send us.

Why we use it

We use personal information to provide and secure MoveDone, generate and save move plans, remember progress, respond to users, prevent abuse, improve the service and, when users request it, facilitate introductions to relevant service providers.

Service providers and disclosure

We may use infrastructure, communications, payment, analytics or operational service providers where reasonably necessary to run MoveDone. When marketplace functionality is enabled, information needed to fulfil a quote or booking request may be shared with the provider the user chooses or asks us to contact.

We do not sell personal information to advertisers.

Marketing

Account or service messages may be sent where needed to provide MoveDone. Marketing email or SMS will be handled separately: we will seek the consent required by law, identify the sender and provide a functional unsubscribe mechanism. Unsubscribe requests for commercial electronic messages will be actioned within the period required by Australian spam law.

Cookies and browser storage

MoveDone currently uses an essential HTTP-only account session cookie and browser local storage to keep a move available on the device while it is being created and synchronised. These are used for core functionality and security. If we later introduce non-essential analytics or advertising technologies, this policy and any consent controls will be updated before they are used where required.

Security

We use measures including hashed passwords, random session tokens, database access controls and server-side ownership checks. Security is an ongoing process rather than a guarantee. Public production launch should use HTTPS/TLS so account and move data are encrypted in transit.

Access, correction and deletion

You may ask us to provide access to personal information we hold about you, correct inaccurate information or delete an account where we are not required to retain information for legal, fraud-prevention, dispute or operational reasons.

Data breaches

We maintain a response approach for suspected data breaches. Where the Notifiable Data Breaches scheme applies and an eligible data breach occurs, MoveDone will follow the notification requirements that apply to affected individuals and the Office of the Australian Information Commissioner.

Overseas processing

Our technology stack may change as MoveDone grows. If personal information is processed or stored outside Australia, we will assess the arrangement and update this policy with meaningful information about cross-border handling where required.

Privacy complaints

Privacy questions or complaints can be raised through our Complaints process or by emailing hello@movedone.com.au. If a privacy complaint is not resolved, eligible individuals may have escalation rights through the Office of the Australian Information Commissioner.