GDPR Compliance

Last Updated: September 29, 2024

Our Commitment to Data Protection

We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws in Australia. This page outlines how we comply with these regulations.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes
• Contract: Where processing is necessary for the performance of a contract with you
• Legal Obligation: Where we need to comply with legal requirements
• Legitimate Interest: Where processing is in our legitimate interests and does not override your rights

Your GDPR Rights

Under GDPR, you have the following rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data under certain circumstances
• Right to Restrict Processing: Request limitation of processing in specific situations
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to processing based on legitimate interests
• Rights Related to Automated Decision Making: Not be subject to decisions based solely on automated processing

Data Protection Principles

We adhere to the following data protection principles:

• We process data lawfully, fairly, and transparently
• We collect data only for specified, explicit, and legitimate purposes
• We ensure data is adequate, relevant, and limited to what is necessary
• We maintain data accuracy and keep it up to date
• We retain data only as long as necessary
• We implement appropriate security measures to protect data

International Data Transfers

When we transfer personal data outside of Australia or the European Economic Area, we ensure appropriate safeguards are in place to protect your information in accordance with data protection laws.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month, though this period may be extended by two additional months for complex requests.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection authority.

Data Protection Officer

For questions regarding data protection and GDPR compliance, please contact us at [email protected].