GDPR Compliance Statement

Last updated: June 16, 2026

Our commitment to data protection

Although our primary operations are based in Australia, we recognise the importance of the General Data Protection Regulation (GDPR) for individuals in the European Economic Area. We apply similar standards of data protection to all users regardless of location.

Legal basis for processing

We process your personal data based on the following legal grounds:

• Consent: When you submit an enquiry form, you provide explicit consent for us to process your information
• Legitimate interests: We have a legitimate interest in responding to your enquiries and providing requested services
• Contractual necessity: Processing is necessary to fulfil our service agreements with you

Data subject rights

Under GDPR principles, you have the following rights:

• Right of access: Request confirmation of what personal data we hold and receive a copy
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data under certain circumstances
• Right to restrict processing: Request limitation on how we use your data
• Right to data portability: Request transfer of your data to another service provider
• Right to object: Object to processing based on legitimate interests
• Rights related to automated decision-making: We do not use automated decision-making or profiling

Exercising your rights

To exercise any of these rights, send an email to [email protected] with "GDPR Request" in the subject line. We will respond within 30 days of receiving your request.

Data transfers

Your data is stored on servers located in Australia. We do not transfer personal data outside of Australia except where necessary to process payment transactions through secure, GDPR-compliant payment processors.

Data protection officer

For questions specifically related to data protection and GDPR compliance, contact our designated representative at [email protected].

Supervisory authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.

Children's privacy

Our services are intended for adults. We do not knowingly collect personal information from individuals under 16 years of age. If we become aware that we have collected such information, we will delete it promptly.

Breach notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals within 72 hours of becoming aware of the breach.