Privacy Policy

Last updated: 15/10/2026

## 1. Purpose and Scope

River Haven is owned and operated by Drew Nichols and Maia Hart. This policy explains how they collect, hold, use, and disclose personal information. It is prepared in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

## 2. Collection of Personal Information

Drew and Maia collect personal information only where necessary for sessions and events. The types of information collected may include:

- Name, email address, telephone number

- Transaction details relating to purchases, bookings, and payments

- Information provided when subscribing to newsletters or contacting River Haven

- Website usage information (see Section 6 regarding Google Analytics)

Maia Hart is the primary custodian of personal information collected for private sessions and group sessions she facilitates. Sensitive information (including health information) is collected only with your consent, or where otherwise permitted by law.

## 3. Use of Personal Information

Personal information is used only for the purpose for which it was collected. This may include:

- Administering and operating the website

- Providing services and delivering products

- Processing payments and maintaining transaction records

- Communicating with you about bookings, changes, or cancellations

- Sending marketing communications where you have opted in

Drew and Maia do not sell, rent, or trade personal information.

## 4. Disclosure to Third Parties

Drew and Maia may disclose personal information to agents or sub-contractors who provide services on its behalf (for example, MailChimp for newsletter database management). Any such party is required to handle personal information in accordance with this policy and the APPs.

Drew and Maia may also disclose personal information where required or authorised by law, including in connection with legal proceedings or to establish, exercise, or defend legal rights.

## 5. Mandatory Reporting and Other Legal Obligations

Maia Hart treats personal information required for sessions as confidential. However, there are circumstances where disclosure is required or permitted by law.

### 5.1 Child Sexual Abuse — Mandatory Reporting

Under Queensland law, all adults are required to report to police if they reasonably believe that a child has been or is being sexually abused by another adult, unless a reasonable excuse applies. This obligation has applied since 5 July 2021.

- A "child" is a person under 16, or a person under 18 with an intellectual disability.

- "Reasonable belief" means a belief that a rational person, with the same information, would hold.

- A reasonable excuse includes: the matter has already been reported to police or another appropriate authority; or there is a reasonable belief that another person has reported or will report it.

- The maximum penalty for failing to report is 3 years imprisonment.

This obligation applies to all adults in Queensland, including Maia Hart and Drew Nichols.

### 5.2 Serious and Imminent Threat

If Drew and/or Maia believe there is a serious and imminent threat to the life, health, or safety of any person, they may disclose necessary information to emergency services, medical practitioners, or other appropriate parties to reduce that threat.

### 5.3 Court Orders and Legal Process

Drew and Maia will disclose personal information where required by court order, subpoena, or other legal process.

### 5.4 Law Enforcement

Drew and Maia may disclose personal information where required or authorised by law to assist law enforcement agencies.

In all cases, disclosure is limited to the minimum information necessary to satisfy the legal or safety obligation. Where practicable, Drew and/or Maia will discuss the disclosure with the individual concerned before proceeding.

## 6. Google Analytics

River Haven may use Google Analytics to collect information about website usage. This information is used internally to assess visitor traffic, trends, and to improve the website and services.

Google Analytics uses cookies to collect information about pages visited, time spent on the site, referral sources, and user selections. This information (including IP address) is transmitted to and stored by Google on servers in the United States.

By using this website, you consent to Google processing your data as described in Google's Privacy Policy. You may opt out by disabling or refusing cookies, disabling JavaScript, or using Google's opt-out service.

## 7. Data Security

Drew and Maia take reasonable technical and organisational measures to protect personal information from loss, misuse, unauthorised access, modification, or disclosure.

## 8. Cross-Border Data Transfers

Personal information collected by Drew and Maia may be stored and processed in, and transferred between, countries. Information submitted for publication on the website may be available worldwide.

By providing personal information, you consent to such cross-border transfers.

## 9. Access and Correction

You have the right to request access to personal information River Haven holds about you, and to request correction if the information is inaccurate, out of date, incomplete, or misleading.

Drew and Maia will respond within a reasonable period, ordinarily within 30 days.

## 10. Complaints

If you have a concern about how Drew and Maia have handled your personal information, please contact them in the first instance.

If the matter is not resolved to your satisfaction, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

- Website: oaic.gov.au

- Telephone: 1300 363 992

## 11. Changes to This Policy

Drew and Maia may update this policy from time to time by posting a revised version on the website. The "Last updated" date at the top of this page indicates when changes were made.