Privacy Policy

1. Who We Are

Move Now Group Pty Ltd (ACN pending registration) is a private company incorporated in Australia, operating under Australian law. We provide crisis relocation assistance, emergency travel documentation facilitation, private aviation brokerage, international money transfer services, cryptocurrency exchange facilitation, and satellite communication equipment supply.

Our services are provided globally, with an emphasis on regions experiencing armed conflict, sanctions regimes, civil unrest, or severe humanitarian conditions. Our principal place of business is in Australia. References in this policy to "we," "us," "our," or "Move Now Group" mean Move Now Group Pty Ltd.

For privacy-related enquiries, contact us at: privacy@movenowgroup.com

2. What We Collect

We collect only what is necessary to assess your situation and deliver the service you are requesting. We do not collect data speculatively, for marketing purposes, or for any purpose other than direct service delivery.

We do not collect biometric data, political opinions, religious beliefs, sexual orientation, or medical information unless you voluntarily provide it as context relevant to your situation (for example, describing a medical condition that affects transportation requirements). Even when provided, such information is used solely to better assist you and is subject to the same protections as all other data.

We do not purchase data from brokers, compile profiles from social media, or aggregate your information with any external sources.

3. How We Use Your Data

Your data is used for one purpose: helping you. More specifically:

• Assessing your situation. When you first contact us, we review the information you provide to understand your circumstances and determine what we can offer.
• Delivering the service. Depending on which service you engage us for, your information may be used to book aviation, liaise with document facilitators, arrange money transfers, or coordinate logistics on the ground.
• Communicating with you. We use your contact details to update you on progress, alert you to changes (flight times, border conditions), and respond to your questions.
• Internal records. We maintain encrypted internal records of completed engagements for our own operational continuity and financial compliance purposes. These are not accessible to any third party.
• Safety and fraud prevention. In rare cases, we may review information to identify and block fraudulent enquiries or attempts to abuse our services.

We do not use your data for automated decision-making that produces legal effects. Every assessment of a client's situation involves a human team member. We do not use your data to train any machine-learning model or AI system, including systems operated by third parties.

4. No Third-Party Sharing

We recognise that many of our clients come from countries whose governments they are fleeing. Sharing client data with state actors would directly contradict the reason we exist. No government agency, domestic or foreign, has standing access to our systems or our records.

In the extremely limited circumstances where we must engage operational partners (for example, a ground transportation contractor or a document courier in a specific country), those partners:

• Receive only the minimum information necessary to complete their specific task.
• Are bound by confidentiality obligations at least as strict as those in this policy.
• Do not retain the information after the task is completed.
• Are never given your full profile, financial information, or the nature of your situation beyond what is operationally required.

If we are ever served with a valid legal compulsion order by an Australian court requiring disclosure of specific client data, we will:

1. Immediately engage legal counsel to contest or narrow the scope of the order.
2. Notify the affected client as soon as we are legally permitted to do so.
3. Disclose only the precise data specified by the court order, nothing more.

We have not received any such order since our founding in 2015. We publish this process so that clients understand what would happen in the event we were ever compelled to act against our preferences.

5. Retention & Deletion

We retain your personal data for the minimum period necessary. The following schedule applies:

You may request early deletion of any personal data we hold about you at any time. Subject to our legal record-keeping obligations (such as financial records required under the Corporations Act 2001 (Cth)), we will action deletion requests within 14 days and confirm completion in writing.

6. Security Measures

We operate under the assumption that our clients face adversaries with significant surveillance capabilities. Our security posture reflects this. The following measures are in place:

• Encryption in transit. All data transmitted to and from our systems uses TLS 1.3 or stronger. We do not accept connections over unencrypted protocols.
• Encryption at rest. Client records are stored using AES-256 encryption on servers located in jurisdictions chosen for their strong data protection laws and distance from conflict-zone authorities.
• Access control. Client information is accessible only to team members directly working on your case. All access is logged, time-limited, and reviewed periodically.
• Secure communications. We prefer end-to-end encrypted channels (Signal, WhatsApp, Telegram) for operational communication. Email is used for non-sensitive correspondence only.
• No cloud storage on major US platforms. We do not store client data on AWS, Google Cloud, Microsoft Azure, or similar platforms that are subject to US legal process. Our infrastructure is hosted on privacy-respecting European and Australian providers.
• No third-party analytics. We do not use Google Analytics, Facebook Pixel, or any behavioural tracking tool on this website.

We have maintained a zero data-breach record since our founding. We commit to notifying affected clients within 72 hours of discovering any breach that could affect their personal data, consistent with our obligations under the Privacy Act 1988 (Cth) and the Notifiable Data Breaches scheme.

7. Cookies

This website uses cookies sparingly and only where necessary for the site to function correctly. We do not use cookies for advertising, tracking, or analytics. Specifically:

• Session cookies. Used to maintain your session state when using our contact forms. These expire when you close your browser and are not stored persistently.
• Language preference. A small cookie stores your language selection (EN/AR/FA) so you do not have to re-select it each visit. This contains no personal information.
• Emergency bar state. If you close the emergency bar, a cookie records that preference so it does not reappear. Again, this contains no personal information.

No cookies from third-party advertising or tracking networks are set on this site. If you disable all cookies in your browser, the site will continue to function. The live crypto rate ticker uses a direct API call and does not involve cookies.

You can review and delete cookies at any time using your browser's settings.

8. Your Rights

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), you have the following rights with respect to your personal data:

• Access. You may request a copy of the personal information we hold about you. We will respond within 30 days.
• Correction. If any information we hold is inaccurate, incomplete, or out of date, you may ask us to correct it. We will action this promptly.
• Deletion. You may request that we delete your personal data. We will do so except where retention is required by law (for example, financial records). Deletion requests are confirmed in writing.
• Portability. You may request your data in a structured, commonly used format if you wish to transfer it elsewhere.
• Objection. You may object to any specific use of your data. We will either cease that use or explain why we cannot.
• Withdrawal of consent. If you provided consent for a specific use of your data, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at privacy@movenowgroup.com. We do not require you to use any specific form. A plain-language email describing your request is sufficient. We do not charge a fee for any privacy request.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

9. International Data Transfers

The nature of our work means that limited personal information must sometimes move across borders, for example, a name and passport number shared with a ground partner in Turkey to arrange transport. When this occurs, we take the following steps:

• We assess the privacy and security laws of the recipient country before any transfer.
• We transfer only the minimum data necessary for the specific task.
• We obtain contractual commitments from recipients to protect the data at least to the standard of this policy.
• We do not transfer data to countries where we believe it would be accessible to authorities hostile to our clients' interests.

We do not transfer your data to any foreign government, embassy, consular service, international sanctions body, or law enforcement agency under any circumstances.

10. Minors

Our services are available to individuals of all ages, including children in crisis situations, but contracts and service agreements must be entered into by an adult (18 years or older) on behalf of any minor. Where we collect information about a minor (for example, a child included in a family relocation), we apply the same protections as for adult clients, and we take particular care with that information given the heightened vulnerability of children in conflict situations.

We do not knowingly collect personal information from children for any purpose other than facilitating their safe movement as part of a family or guardian's service engagement.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our operations, applicable law, or best practice. When we do, we will update the "Last Updated" date at the top of the page. We will not make material changes that reduce your protections without providing clear notice on this page.

If you have an active service engagement with us at the time of a material change, we will contact you directly to inform you of the change and provide an opportunity to object or withdraw.

Your continued use of our services after a policy update constitutes acceptance of the revised terms.

12. Contact for Privacy Requests

All privacy-related correspondence, access requests, deletion requests, corrections, complaints, or general questions, should be directed to:

We aim to acknowledge all privacy requests within 2 business days and resolve them within 30 days. Complex requests involving retrieval of archived records may take longer; we will inform you of any delay and provide a revised timeline.