GDPR Compliance Statement

For individuals in the European Union, we comply with the General Data Protection Regulation (GDPR) requirements for data processing, storage, and individual rights.

Legal Basis for Processing

We process EU personal data based on: Consent (for marketing communications), Contract performance (for service delivery), Legitimate interests (for business operations), and Legal obligation (for compliance requirements).

Your Rights Under GDPR

  • Right to access your personal data
  • Right to rectification of inaccurate data
  • Right to erasure ('right to be forgotten')
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time
  • Right to lodge a complaint with a supervisory authority

Data Processing Activities

We process minimal personal data necessary for: Responding to inquiries, Providing requested services, Sending newsletters (with explicit consent), Website analytics, and Legal compliance.

International Data Transfers

As we are based in Australia, data from EU subjects is transferred outside the EU. We ensure appropriate safeguards through Standard Contractual Clauses (SCCs), adequate security measures, and limited data retention periods.

Data Retention

We retain personal data only as long as necessary:
Inquiry data: 2 years from last contact
Client data: 7 years after service completion
Newsletter subscribers: Until unsubscribe
Analytics data: 26 months

Contact for GDPR Matters

For GDPR-related requests or questions:
Email: [email protected] (Subject: GDPR Request)
Mail: Level 12, 201 Elizabeth Street, Sydney NSW 2000, Australia

We will respond to requests within 30 days as required by GDPR.

Supervisory Authority

EU data subjects have the right to lodge a complaint with their local supervisory authority if they believe their data protection rights have been violated.

While we operate from Australia, we respect and comply with GDPR requirements for EU data subjects.