GDPR Compliance Statement

Last updated: June 16, 2026

Introduction

While our primary operations are based in Australia, we recognize that some visitors to our website may be located in the European Economic Area (EEA). This statement outlines how we comply with the General Data Protection Regulation (GDPR) when processing personal data of EEA residents.

Legal Basis for Processing

We process personal data under the following legal bases:

  • Consent: When you voluntarily submit a service request or subscribe to communications
  • Contractual necessity: To fulfill service requests and agreements
  • Legitimate interests: To improve our services and website functionality
  • Legal obligations: To comply with applicable laws and regulations

Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

  • Right of access: Request copies of your personal data
  • Right to rectification: Request correction of inaccurate or incomplete data
  • Right to erasure: Request deletion of your personal data under certain circumstances
  • Right to restrict processing: Request limitation of how we use your data
  • Right to data portability: Receive your data in a structured, commonly used format
  • Right to object: Object to processing based on legitimate interests
  • Rights related to automated decision-making: We do not use automated decision-making or profiling

Data Protection Officer

For GDPR-related inquiries, you may contact our data protection contact at:

Email: [email protected]
Address: 127 Garden View Road, Thornbury VIC 3071, Australia

Data Transfers

Your personal data may be transferred to and processed in Australia. We ensure appropriate safeguards are in place for such transfers in accordance with GDPR requirements.

Data Retention Periods

We retain personal data for the following periods:

  • Service request information: 3 years after last contact
  • Marketing consent records: Until consent is withdrawn
  • Website analytics data: 26 months
  • Cookie data: As specified in our Cookies Policy

Data Security Measures

We implement appropriate technical and organizational measures to ensure data security, including:

  • Encryption of data in transit and at rest
  • Regular security assessments and updates
  • Access controls and authentication procedures
  • Staff training on data protection principles

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach poses a high risk, we will also notify affected individuals without undue delay.

Exercising Your Rights

To exercise any of your GDPR rights, please submit a request to [email protected]. We will respond to your request within one month, though this may be extended by two additional months for complex requests.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or where an alleged infringement occurred. For EEA residents, you may contact your local data protection authority.

Children's Data

We do not knowingly collect or process personal data from individuals under 16 years of age without parental consent, as required by GDPR.

Cookies and Tracking

We use cookies and similar technologies only with your consent, as outlined in our Cookies Policy. You may withdraw consent at any time by adjusting your browser settings.

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website or by email.