THE FIRST PLUNGE 2026

Campaign Privacy Policy

The First Plunge campaign is hosted and managed by PR Studio Pty Ltd trading as Pony Rider (ABN 16 606 234 628) of Unit 3, 10 Tengah Crescent, Mona Vale NSW 2103, referred to in this Privacy Policy as “we”, “us”, “our” and similar grammatical forms. By registering for First Plunge, creating a fundraising page, subscribing to First Plunge updates, or contacting us about the campaign, you consent to our collection, use, disclosure, retention and protection of your personal information as described in this Privacy Policy. We manage your personal information in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs), and we take reasonable steps to ensure the information we collect, use or disclose is accurate, complete, up to date and stored in a secure environment. 1.1 When do we collect information? We collect personal information from you when you: register for First Plunge or create a fundraising page via Raisely; subscribe to First Plunge or Pony Rider email updates; email or otherwise contact us regarding First Plunge; purchase First Plunge merchandise; or fill out a form related to a customer-service feature operating on our website at https://ponyrider.com.au/ (“Website”). We do not automatically collect personal information from you simply by browsing the Website. 1.2 Why do we need to collect personal information? We collect personal information that you volunteer in order to register you for First Plunge, administer your fundraising page, send you updates about the Campaign, respond to your enquiries, fulfil merchandise orders, and otherwise provide the services you have requested. 1.3 What information do we collect? The personal information we may collect includes your name, postal address, email address, telephone number, contact details, and any images, reflections or other content you choose to upload to your First Plunge Raisely page. 1.4 Donations and payment information Donations made through the First Plunge Raisely page are processed via AMCS’s own Stripe account and paid directly to AMCS. AMCS collects, holds and processes donor payment information (including card and billing details) directly, in accordance with AMCS’s own privacy policy. Pony Rider does not collect, receive, store or have access to donor payment or card details, and is not responsible for AMCS’s handling of that information. Donation receipts and payment enquiries are handled directly by AMCS. Raisely, as the fundraising platform provider, may also collect information you provide when registering or setting up a fundraising page, in accordance with Raisely’s own privacy policy. 1.5 Raisely — our fundraising platform The First Plunge registration and fundraising page is hosted on Raisely, at first-plunge-30-day-swim-challenge.raiselysite.com, an independent third-party platform that we use to run the Campaign. When you register, create a fundraising page, or donate through this page, the information you submit — such as your name, email address, fundraising page content and any donation details — is collected and processed by Raisely as well as by us, and Raisely acts as an independent party (not merely our contractor) in respect of its own terms of service, available at raisely.com/terms. We encourage you to read Raisely’s terms of service and privacy policy before registering, as they separately govern how Raisely collects, stores, uses and discloses information submitted through the platform, including any information Raisely may use for its own purposes as permitted under its terms. Pony Rider is not responsible for, and does not control, Raisely’s handling of information under its own terms. 1.6 How do we store your information? We use a range of technologies and procedures to help protect personal information from unauthorised access, loss, alteration, disclosure or misuse, including physical access controls, information firewalls and access-authorisation controls at the data centres where information is held, and data encryption when personal information is transferred to and from our service providers. Our commitment to data security means: we have procedures to limit access to personal information within our organisation; we use security measures and technologies within our organisation to protect your personal information; and we use service providers, such as Raisely, that can demonstrate secure controls relating to software, access and network security. 1.7 What use do we make of your personal information? We will communicate with you in relation to your First Plunge registration, fundraising page, merchandise order, or any customer-service request you make. We may also send you information and updates about First Plunge and other Pony Rider campaigns and events. If you would like to stop receiving future commercial messages from us, each email includes unsubscribe instructions. We may share your personal information with third parties that assist us in organising and delivering First Plunge, including Raisely as our fundraising platform provider. Except as described above in relation to donations processed by AMCS, we do not share your personal information with AMCS unless you have separately consented (for example, by opting in to AMCS updates). We may also release your personal information where we believe it is appropriate to comply with the law, enforce our agreements, website policies or these terms, or protect our rights, property or safety, or the rights, property or safety of others. 1.8 How can I access the personal information you hold? We are happy to provide you with details of the personal information we hold about you. Australian Privacy Principle 12 allows you to access, and Australian Privacy Principle 13 allows you to correct, the personal information we hold about you. To access or correct this information, please contact us using the details below. Please note that information held directly by Raisely or AMCS under their own terms should be accessed or corrected by contacting Raisely or AMCS directly. If you believe your personal information has been misused, you can raise a complaint with us in writing and we will attempt to resolve the matter. If you are not satisfied with the outcome, you may refer the matter to the Office of the Australian Information Commissioner (OAIC) — telephone 1300 363 992, email enquiries@oaic.gov.au, or via the OAIC complaints page at https://www.oaic.gov.au/privacy/privacy-complaints. 1.9 Third-party links and services Our Website and the First Plunge fundraising page may include links to, or embed, third-party services such as Raisely (first-plunge-30-day-swim-challenge.raiselysite.com, operating under raisely.com/terms) and AMCS’s donation pages. We have no responsibility or liability for the privacy practices, content or activities of these third-party services, and encourage you to review their respective terms and privacy policies. Nonetheless, we seek to protect the integrity of our Website and welcome any comment about linked or embedded services. 1.10 Your consent By registering for First Plunge, creating or contributing to a fundraising page, subscribing to First Plunge updates, or otherwise contacting us in relation to First Plunge, you consent to this Privacy Policy, and acknowledge that your use of the Raisely fundraising page is also subject to Raisely’s own terms of service. Contact us Name: Pony Rider Position: Director Email: customerservice@ponyrider.com.au This Privacy Policy was last modified on [DATE].