GDPR Compliance

Last updated: September 2, 2026

General Data Protection Regulation

While we are based in Australia, we recognize the importance of GDPR principles for protecting personal data of individuals in the European Union. We have implemented practices consistent with GDPR requirements.

Lawful Basis for Processing

We process your personal data based on the following legal grounds:

Consent: When you submit a service request through our website
Contract: To fulfill our service agreement with you
Legitimate interests: To improve our services and prevent fraud
Legal obligation: To comply with applicable laws and regulations

Data Subject Rights

Under GDPR principles, you have the following rights:

Right to access your personal data
Right to rectification of inaccurate data
Right to erasure in certain circumstances
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent

Data Protection Officer

For questions regarding data protection and GDPR compliance, contact us at [email protected] with the subject line "Data Protection Inquiry."

Data Transfers

We primarily operate within Australia. If we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with privacy protection standards.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you without undue delay and in accordance with applicable requirements.

Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal and reporting requirements. Typical retention period is seven years for business records.

Exercising Your Rights

To exercise any of your data protection rights, send a written request to [email protected]. We will respond within 30 days of receiving your request.

Supervisory Authority

If you are located in the EU and believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority.