Privacy Policy

Website: cjmoves.com.au

Last updated: July 2026

Effective: July 2026

Jurisdiction: Australia

Governing law: Privacy Act 1988 (Cth) & Australian Privacy Principles (APPs)

1. Our Commitment to Your Privacy

C&J Moves takes its obligations under Australian privacy law seriously. This Policy explains what personal information we collect, why we collect it, how we protect it, how long we keep it, and what rights you have.

This Policy complies with the Privacy Act 1988 (Cth) and the 13 Australian Privacy Principles (APPs), as amended by the Privacy and Other Legislation Amendment Act 2024 (Cth), which received Royal Assent on 10 December 2024.

We do not sell, rent, or trade your personal information to third parties for their own commercial purposes.

2. Who This Policy Applies To

This Policy applies to all individuals whose personal information is handled by C&J Moves, including:

• Current, past, and prospective customers
• Visitors to our website
• Anyone who contacts us by phone, email, or our website contact form
• Anyone who requests a quote, even if no booking follows

If you are providing information on behalf of another person — for example, booking a move for a family member — please ensure that person is aware of how their information will be used.

3. What Personal Information We Collect

We collect only what is reasonably necessary to provide our services, as required by APP 3.

Identity and Contact Information

• Full name
• Email address
• Phone number

Address and Location Information

• Pickup address (your current home or business)
• Delivery address (your destination)
• Storage address, where applicable

Booking and Transaction Information

• Move date, inventory details, and service requirements
• Payment records — processed through our secure payment provider (we do not store full card numbers)
• Quote and invoice records
• Communication history (emails, phone call notes)

Website and Device Data

• IP address and browser type (collected automatically via cookies)
• Pages visited, time on site, and referring URL
• Device type and operating system

Sensitive information: We do not intentionally collect sensitive information as defined under the Privacy Act — including health data, racial or ethnic origin, financial account credentials, or government-issued identifiers. If you believe you have provided such information inadvertently, contact us and we will arrange its secure deletion.

4. How We Collect Your Information

We collect personal information:

• Directly from you when you request a quote, confirm a booking, send an email, complete a contact form, or call us
• From an authorised representative where someone books on your behalf
• Automatically via cookies and website analytics when you visit cjmoves.com.au
• From third-party booking platforms where you book through an integrated service — we will note this at the point of collection

Under APP 2, we try to give you the option to deal with us anonymously or under a pseudonym where practicable. However, accurate identity and address information is necessary to perform a physical removal service. We cannot book or complete a move without it.

5. Why We Collect Your Information

We collect personal information for these primary purposes:

• Providing quotes and performing the services you have booked
• Communicating with you about your move — confirmations, updates, delays
• Processing payments and issuing invoices and receipts
• Maintaining records required by Australian law (including tax and accounting obligations)
• Responding to enquiries, complaints, or damage claims
• Improving our services based on customer feedback and analytics

Secondary Use

We may use your information for a secondary purpose only where you have consented, where you would reasonably expect it (such as a post-move satisfaction survey), or where it is required or authorised by law (APP 6).

We will not use your information for any purpose unrelated to our services without your explicit consent.

6. Disclosure to Third Parties

We do not sell your personal information. We may share it with the following categories of third parties, strictly as needed to deliver our services:

Service Providers

• Payment processors for secure transaction handling
• IT and cloud platform providers — email, CRM, booking software, and data storage
• Subcontractors and additional crews where we use specialist labour to assist with your move (only the information needed to complete the job is shared)
• Storage operators where goods are placed in a third-party facility as part of your service
• Insurance providers where you request a referral or a claim arises

Legal and Regulatory Disclosure

• Where required by law, court order, or a regulatory authority
• To protect our legal rights, or the safety of staff or customers
• In the context of a fraud investigation or criminal matter

APP 6 compliance: We only disclose your personal information for the purpose it was originally collected, a directly related secondary purpose, or with your consent.

7. Overseas Disclosure

Some of the platforms and tools we use — including cloud storage, email hosting, analytics, or booking software — may process or store data on servers located outside Australia. Common locations include the United States and the European Union.

Under APP 8, before disclosing your personal information to an overseas recipient, we take reasonable steps to ensure that recipient is subject to a law or binding scheme that provides substantially similar protection to the APPs — or we obtain your informed consent.

We remain accountable for how overseas recipients handle your data and include data handling requirements in our contracts with such providers wherever possible.

8. Direct Marketing

Under APP 7, we may send you information about our services, seasonal offers, or relevant updates where you would reasonably expect to receive them or have given consent.

Every marketing communication we send includes a clear, working opt-out. You can also opt out by:

• Clicking “Unsubscribe” in any email we send
• Contacting us directly and requesting removal from our marketing list

We will act on opt-out requests within 5 business days. After opting out, you may still receive transactional messages related to an active booking (confirmations, invoices, day-of-move updates) — these are not marketing.

We do not send unsolicited SMS marketing without your prior express consent.

9. Cookies & Website Data

Our website uses cookies — small data files stored on your device — to help us understand how the site is used and improve your experience.

Types of Cookies

• Required for the website to function. Cannot be disabled without breaking the site. Essential cookies:
• Track usage patterns in anonymised or aggregated form (e.g. Google Analytics). Do not identify you personally. Analytics cookies:
• Used to show relevant advertising, if applicable. You will be notified and offered opt-out options when in use. Marketing cookies:

Your Choices

You can manage cookie preferences through your browser settings. Disabling all cookies may affect how the website functions. Where we use non-essential cookies, we will seek your consent on first visit.

Under Australian privacy law: IP addresses and device identifiers can constitute personal information where they are capable of identifying an individual. We handle all such data consistently with this Policy and the APPs.

10. Security

Under APP 11, we take reasonable steps to protect your personal information from misuse, interference, loss, unauthorised access, modification, and disclosure. Our measures include:

• HTTPS encryption across our website
• Password-protected systems with access limited to authorised personnel
• Secure third-party payment processing — we do not store credit card numbers
• Regular review of data handling and access controls
• Staff awareness of privacy obligations
• Secure deletion of personal information no longer required

No electronic storage or data transmission is completely secure. If you believe your information has been compromised, contact us immediately.

11. Retention & Deletion

We keep personal information only for as long as needed for the purpose it was collected, or as required by law:

• Booking and invoice records are retained for a minimum of 7 years to meet Australian tax and accounting obligations under the Income Tax Assessment Act 1997 (Cth)
• Enquiries that did not convert to a booking are retained for up to 12 months, then deleted
• Website analytics data is retained in aggregated, anonymised form
• Marketing opt-out records are retained indefinitely to ensure we respect your preference

When data is no longer required, we delete it securely — permanent deletion for digital records, secure shredding for physical documents.

12. Your Privacy Rights

Under the Privacy Act 1988 (Cth), you have the following rights:

• Request a copy of personal information we hold about you. Access (APP 12):
• Ask us to correct information that is inaccurate, out of date, or misleading. Correction (APP 13):
• Know why we are collecting your information and how it will be used. Notification (APP 5):
• Withdraw consent for direct marketing at any time. Opt-out of marketing (APP 7):
• Deal with us without identifying yourself where practicable. Anonymity (APP 2):
• Lodge a complaint if you believe we have breached the Privacy Act. Complaint (APP 1):

Exercising Your Rights

To make an access or correction request, contact us using the details in Section 17. We will respond within 30 days. We may ask you to verify your identity before actioning the request.

Access is free in most cases. A reasonable fee may apply where a request requires significant administrative effort — we will advise you before any charge is incurred.

In limited circumstances permitted by the Privacy Act, we may decline an access or correction request. If we do, we will explain why in writing and advise you of available complaint avenues.

Privacy tort (from June 2025): The Privacy and Other Legislation Amendment Act 2024 introduced a statutory tort for serious invasions of privacy. Individuals may now bring a civil claim for damages where privacy has been seriously invaded.

13. Notifiable Data Breaches

Australia’s Notifiable Data Breaches (NDB) scheme — introduced by the Privacy Amendment (Notifiable Data Breaches) Act 2017 — requires us to notify the Office of the Australian Information Commissioner (OAIC) and affected individuals if we experience a data breach likely to result in serious harm.

Our breach response plan includes:

• Containing the breach as quickly as possible
• Assessing whether the breach is likely to result in serious harm
• Notifying the OAIC within 72 hours of becoming aware of an eligible breach
• Notifying affected individuals as soon as practicable
• Taking steps to prevent recurrence

If you believe your personal information held by us may have been compromised, contact us immediately.

14. Children’s Privacy

Our services and website are not directed at children under 18. We do not knowingly collect personal information from children.

The 2024 privacy reforms included a framework for a Children’s Online Privacy Code, which is being developed by the OAIC. We will update our practices as those requirements are finalised and come into effect.

If you are a parent or guardian and believe we have inadvertently collected information about a child, please contact us and we will delete it promptly.

15. Complaints

If you believe we have handled your personal information in breach of this Policy or the Privacy Act, please contact us first. We take all complaints seriously and will investigate within 30 days.

Escalating Your Complaint

If you are not satisfied with our response, you may contact:

Office of the Australian Information Commissioner (OAIC)

Website: oaic.gov.au

Phone: 1300 363 992

Post: GPO Box 5218, Sydney NSW 2001

The OAIC can investigate complaints about privacy under the Privacy Act 1988 (Cth).

16. Policy Updates

We review this Policy regularly to reflect changes in our practices and in Australian privacy law. Staged reforms under the Privacy and Other Legislation Amendment Act 2024 continue to take effect through 2026 — including automated decision-making disclosure obligations due December 2026 — and we will update this Policy accordingly.

Material changes will be reflected in the “Last updated” date at the top of this document. Your continued use of our services after any update constitutes acceptance of the revised Policy.

17. Contact

For privacy enquiries, access requests, correction requests, marketing opt-outs, or complaints:

C&J Moves — Privacy Enquiries

Website: cjmoves.com.au

Email: info@cjmoves.com.au

Use the contact form on our website or email us directly. Mark your message “Privacy Enquiry” or “Privacy Complaint” so it reaches the right person.

Response times: General privacy enquiries — within 5 business days. Formal access or correction requests — within 30 days as required by APP 12 and APP 13.

References: Privacy Act 1988 (Cth) · Privacy and Other Legislation Amendment Act 2024 (Cth) · Australian Privacy Principles, Schedule 1 · Privacy Amendment (Notifiable Data Breaches) Act 2017 · OAIC APP Guidelines (updated May 2026) · Competition and Consumer Act 2010 (Cth), Schedule 2.