GDPR Compliance

Last updated: January 2024

Our Commitment to GDPR

Although vague-ridge operates primarily in Australia, we respect the privacy rights established by the General Data Protection Regulation (GDPR) for individuals in the European Economic Area (EEA). This page outlines how we comply with GDPR principles for any EEA visitors or clients.

Data Controller

vague-ridge acts as the data controller for personal information collected through our website and services. Our contact details are:

vague-ridge
42 Banksia Avenue, Greenfield NSW 2250, Australia
Email: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: When you submit enquiry forms or subscribe to communications, you consent to processing.
• Contract: Processing necessary to provide services you have requested or agreed to.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving services and website functionality, provided these do not override your fundamental rights.
• Legal Obligation: Processing required to comply with applicable laws and regulations.

Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete data.
• Right to Erasure: You may request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: You may request limitation of how we process your data.
• Right to Data Portability: You may request your data in a structured, commonly used format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

There is no charge for most requests, though we may apply a reasonable fee for manifestly unfounded or excessive requests.

International Data Transfers

Your personal data is primarily stored and processed in Australia. If we transfer data to other countries, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by relevant authorities.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Enquiry data is typically retained for two years unless you become an active client, in which case service records are retained for seven years.

Data Security

We implement technical and organisational measures to protect personal data, including:

• Secure socket layer (SSL) encryption for data transmission
• Access controls limiting data access to authorised personnel
• Regular security assessments and updates
• Secure storage and backup procedures

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.

Supervisory Authority

If you are located in the EEA and believe we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority.

Updates to This Notice

We may update this GDPR compliance notice periodically. Changes will be posted on this page with an updated revision date.

Contact

For any questions about our GDPR compliance or to exercise your rights, please contact:

Email: [email protected]