Effective date: August 31 2026

Julie Davidson respects your privacy and handles personal information with particular care because Awaken supports women affected by cancer. This policy explains how personal and sensitive information is managed.

1. Who we are

The responsible business is Julie Katherine Davidson ABN 99 055 337 531, trading as Julie Davidson. Contact: hello@juliedavidson.com.au.

2. Information we may collect

• identity and contact information, such as name, email address, age confirmation and state or territory;
• account, membership, attendance and customer-support records;
• transaction details, subscription status and payment references, but not complete card details;
• health and other sensitive information you provide through a safety declaration, email, coaching session, Facebook group, Zoom session or other communication;
• images, voice, display name, chat, questions and personal sharing captured in recorded membership sessions;
• exercise-safety responses and information about requested modifications or accessibility needs;
• marketing preferences, survey responses, feedback and testimonials where supplied;
• technical information such as IP address, device/browser data, login activity, cookies and interaction data; and
• information reasonably needed to investigate a complaint, safety concern, payment issue or suspected misuse.

3. How we collect information

We collect information directly from you when you register, pay, complete forms, book through Calendly, send email, participate in Facebook or Zoom, use the portal, consent to recordings or communicate with us. We may also receive limited information from service providers that process registrations, payments, emails, bookings, analytics or membership access.

4. Why we collect and use it

• to assess eligibility and establish and administer membership;
• to provide portal access, community activities, group coaching, exercise content and customer support;
• to process payments, renewals, cancellations, refunds and accounting records;
• to manage exercise safety, requested modifications and health-related participation concerns;
• to create and provide membership recordings with consent;
• to communicate operational information and, where consent exists, marketing messages;
• to secure the service, investigate complaints and meet legal, insurance and risk-management obligations; and
• to improve Awaken using information that is aggregated or de-identified where practical.

5. Sensitive and health information

Health information is sensitive information. We seek express consent before intentionally collecting it, collect only what is reasonably necessary for Awaken, and ask that you do not provide detailed medical records unless specifically requested for a legitimate purpose.

You choose what to disclose in group settings. Information shared in a Facebook group or recorded Zoom session will be visible to other authorised participants. We require confidentiality but cannot guarantee another participant’s conduct.

6. Recordings

Group sessions may capture identifiable images, voices, chat and sensitive health information. We provide notice and seek express consent. You may keep your camera and microphone off, use your first name and refrain from visible chat. Recordings are ordinarily available only to active members, with downloads disabled where practicable, and deleted within 12 months. They are not used publicly or for marketing without separate written permission.

7. Disclosure and service providers

We may disclose or make information accessible only as reasonably required to providers that support Awaken, including website hosting and WordPress, MemberPress, Stripe, MailerLite, Facebook/Meta, Zoom, Calendly, Google Drive, professional advisers, insurers, and technical contractors subject to appropriate confidentiality and access controls.

Some providers may store or process information outside Australia, including in the United States or other countries described in their privacy materials. Overseas privacy protections may differ. We take reasonable steps appropriate to the circumstances when selecting and configuring providers, but their independent acts and infrastructure are not wholly within our control.

8. Payments

Stripe processes payment-card information. We receive transaction and subscription information but do not intentionally store complete card numbers or security codes. Stripe’s own privacy terms apply to its processing.

9. Cookies, analytics and tracking

The website and member portal use necessary cookies for security, login, preferences and payment functionality. Non-essential analytics or advertising technologies may be used only with appropriate notice and consent. We do not intend to transmit health-form responses or private member content to advertising platforms.

You can control non-essential cookies using the website consent controls and browser settings. Blocking necessary cookies may affect login or payment functionality.

10. Marketing communications

We send marketing emails only where consent or another lawful basis exists. Marketing messages identify the sender and include a functional unsubscribe. Unsubscribe requests are actioned within the period required by law. Necessary service messages about payments, security, sessions or account administration may still be sent and will not contain unrelated marketing unless permitted.

11. Security

We use reasonable administrative and technical measures such as access controls, unique administrator accounts, secure connections, restricted folders, updates, backups and multi-factor authentication where available. No internet service is completely risk-free. Please notify us promptly if you suspect unauthorised access or accidental disclosure.

12. Retention and deletion

We keep information only for as long as reasonably needed for the purposes described, legal and accounting requirements, insurance and dispute management. Membership recordings are ordinarily deleted within 12 months. Health-safety information is reviewed when membership ends and deleted or de-identified when no longer reasonably required. Core acceptance, payment and dispute records may be retained for the applicable legal record-keeping period. Unsubscribed email addresses may be retained on a suppression list to honour the unsubscribe request.

13. Access, correction and complaints

You may request access to or correction of personal information by emailing hello@juliedavidson.com.au. We may need to verify identity and may refuse or limit a request where permitted by law, explaining the reason where required.

Privacy complaints should be sent to the same address. We will acknowledge the complaint within two business days and investigate it fairly. If the Privacy Act applies and you are not satisfied, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.

14. Data breaches

We maintain a response process for suspected data breaches. Where the Notifiable Data Breaches scheme applies and an eligible breach is likely to cause serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner as required.

15. Changes to this policy

We may update this policy as Awaken or the law changes. The current version will be published on the website with its effective date. Material changes affecting sensitive information will be communicated where reasonably appropriate.