Legal

Privacy Policy

Last updated: August 13, 2026

1. Introduction

FORJ Pty Ltd ("we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our website at https://www.forj.net.au, our mobile applications, and our FORJ Core hardware and analytics platform (collectively, the "Services").

We are an Australian entity and comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Where applicable, we also comply with the EU General Data Protection Regulation (GDPR).

2. Information We Collect

2.1 Information You Provide

  • Account information: Name, email address, date of birth, and payment details when you create an account or subscribe.
  • Contact form submissions: When you use our contact forms (processed via Formspree), we collect your name, email, message, and any other details you choose to provide.
  • Marketing preferences: When you opt in to newsletters or promotional communications via HubSpot.

2.2 Automatic Data Collection

  • FORJ Core sensor data: During training sessions, the FORJ Core collects biomechanical measurements including force, velocity, power, displacement, and range of motion. This training performance data may include biometric indicators such as body weight during lifts.
  • Usage analytics: Through Google Analytics, we collect browser type, operating system, device type, referring URLs, pages visited, time spent on pages, IP address, and general geographic location (country/city level).
  • HubSpot cookies: HubSpot sets tracking cookies to recognise repeat visitors and improve marketing relevance. These cookies do not store payment details.
  • Log data: Server logs record access times, HTTP status codes, and referrer URLs.

2.3 Information from Third Parties

We may receive information from trusted partners or public sources where relevant to providing our Services.

3. How We Use Your Information

  • To provide, maintain, and improve FORJ Core hardware, software, and analytics platform.
  • To process payments and manage your subscription billing.
  • To communicate with you about updates, support requests, and account-related matters.
  • To analyse training trends and generate personalised performance insights through our analytics dashboard.
  • To monitor website usage patterns via Google Analytics for the purpose of improving user experience and site performance.
  • To manage marketing campaigns via HubSpot and send newsletters to subscribers who have opted in.
  • To respond to your inquiries submitted through contact forms.
  • To comply with legal obligations and enforce our Terms of Service.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), our legal bases for processing your personal data are:

  • Contractual necessity: Processing required to fulfil our subscription agreement with you.
  • Legitimate interests: Improving our Services, website analytics, and marketing — provided these interests do not override your fundamental rights.
  • Consent: Marketing communications, where you have explicitly opted in.
  • Legal compliance: Obligations under Australian and international law.

5. Data Sharing and Disclosure

We do not sell your personal information. We share data only with trusted service providers necessary to operate the Services:

  • Formspree: Processes contact form submissions.
  • Google LLC (Google Analytics): Provides website usage analytics. Google may combine data across its services per their own privacy policy.
  • HubSpot Inc.: Manages marketing automation, email campaigns, and customer relationship data.
  • Payment processors: Third-party payment gateways handle transaction processing. We do not store credit card numbers.
  • Cloud infrastructure: Amazon Web Services (AWS) hosts our backend services, APIs, and stored training data.

Where required by law (e.g., lawful subpoenas or regulatory requests), we may disclose personal data to government or law enforcement authorities.

6. International Data Transfers

Your data may be transferred to and processed in countries other than Australia, including the United States and within the European Union. We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or adequacy decisions, to protect your data consistent with this Privacy Policy.

7. Data Retention

  • Training data: Stored while your account is active and for up to two years after account closure for backup and analytics purposes.
  • Account information: Retained while your account is active and for up to seven years after closure for legal and tax compliance.
  • Contact form data: Retained for up to three years for customer service reference.
  • Analytics data: Aggregated analytics are retained indefinitely; personally identifiable analytics data is anonymised within 26 months per Google Analytics default settings.

8. Data Security

We implement industry-standard technical and organisational measures to protect your personal information, including:

  • AES-256 encryption at rest for stored data and TLS 1.2+ encryption in transit.
  • Access controls limiting data access to authorised personnel on a need-to-know basis.
  • Regular security audits and penetration testing.
  • Hosted on AWS infrastructure with SOC 2 compliant controls.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

9. Children's Privacy

The Services are not directed to children under 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child under 16, we will take steps to delete it promptly.

10. Your Rights Under Australian Law and GDPR

Under the Australian Privacy Act:

  • Access: You may request a copy of the personal data we hold about you.
  • Correction: You may request correction of inaccurate, incomplete, or outdated personal data.
  • Complaint: You may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

Under the GDPR (for EEA residents):

  • Right of access: Request copies of your personal data.
  • Right to rectification: Request correction of inaccurate data or completion of incomplete data.
  • Right to erasure ("right to be forgotten"): Request deletion of your personal data under certain conditions.
  • Right to restriction of processing: Request that we limit how we use your data under certain conditions.
  • Right to data portability: Receive your data in a structured, machine-readable format.
  • Right to object: Object to processing based on legitimate interests or direct marketing.
  • Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

11. Cookies and Tracking Technologies

Our website uses cookies and similar technologies. Specifically:

  • Google Analytics cookies (_ga, _gat, _gid): Used to distinguish users and throttle request rates. They persist for up to 26 months.
  • HubSpot cookies (__hssrc, __hs_opt_out_persist, hs_tst_com, etc.): Used for marketing attribution, session management, and remembering cookie consent preferences.
  • Essential session cookies: Required for core website functionality (e.g., maintaining state during a session).

You can control cookies through your browser settings. Disabling cookies may affect some features of the website. Note that opting out of Google Analytics tracking does not apply to HubSpot tracking, and vice versa.

12. Third-Party Links

Our website may contain links to third-party websites (including social media platforms and partner sites). This Privacy Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party sites you visit.

13. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act as amended by the CPRA, including the right to know what personal information we collect, use, and share; the right to delete personal information; the right to opt out of the sale or sharing of personal information (we do not sell personal information); and the right to non-discrimination for exercising your privacy rights.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or prominent notice on our website. The "Last updated" date at the top of this page reflects the most recent revision.

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

  • Email: hello@forj.com
  • Address: FORJ Pty Ltd, Brisbane, Queensland, Australia