GDPR Compliance

Last updated: May 19, 2026

Our commitment to GDPR

While we are based in Australia, we recognize that some of our website visitors may be located in the European Union. We are committed to complying with the General Data Protection Regulation (GDPR) principles for all users, regardless of location.

Legal basis for processing

We process personal data based on the following legal grounds:

• Consent: You provide explicit consent when submitting forms or accepting cookies
• Contract performance: Processing necessary to deliver requested services
• Legitimate interests: Business operations, fraud prevention, and website improvement
• Legal obligations: Compliance with applicable laws and regulations

Data subject rights

Under GDPR, you have the following rights regarding your personal data:

Right to access

You can request a copy of the personal data we hold about you. We will provide this information in a structured, commonly used, and machine-readable format within one month of your request.

Right to rectification

You can request correction of inaccurate or incomplete personal data. We will update records promptly upon verification.

Right to erasure

You can request deletion of your personal data when:

• The data is no longer necessary for the purposes collected
• You withdraw consent and no other legal basis exists
• You object to processing and no overriding legitimate grounds exist
• The data was unlawfully processed

Note: Legal retention requirements may prevent immediate deletion in some cases.

Right to restriction

You can request restriction of processing when:

• You contest the accuracy of personal data
• Processing is unlawful but you oppose erasure
• We no longer need the data but you require it for legal claims
• You have objected to processing pending verification

Right to data portability

You can receive your personal data in a portable format and transmit it to another controller when processing is based on consent or contract and carried out by automated means.

Right to object

You can object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless compelling legitimate grounds override your interests.

Rights related to automated decision-making

We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.

Data protection officer

For GDPR-related inquiries, contact our data protection contact:

Email: [email protected]

International data transfers

We primarily store and process data within Australia. If data is transferred internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

Data breach notification

In the event of a data breach likely to result in high risk to your rights and freedoms, we will notify you without undue delay and within 72 hours of becoming aware of the breach.

Exercising your rights

To exercise any GDPR rights, contact us at [email protected] with:

• Clear identification of the right you wish to exercise
• Sufficient information to verify your identity
• Specific details about your request

We will respond within one month. In complex cases, we may extend this period by two additional months with explanation.

Right to lodge a complaint

If you believe we have not complied with GDPR, you have the right to lodge a complaint with:

• Your local EU supervisory authority
• The Australian Privacy Commissioner (for Australian residents)

Updates to this notice

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revised date.