Last updated: September 9, 2026
While we are an Australian-based organization primarily serving Australian commercial operations, we recognize that some of our website visitors and potential clients may be located in the European Economic Area. We are committed to protecting personal data in accordance with the General Data Protection Regulation (GDPR) for individuals located in the EEA.
We process personal data only when we have a lawful basis to do so. The legal bases we rely on include:
When you submit inquiries through our website forms or subscribe to communications, you provide explicit consent for us to process your information for the specified purposes. You may withdraw consent at any time by contacting us.
When you engage our services, processing your personal data and operational data is necessary to perform our contractual obligations and deliver the services you have requested.
We may process certain information based on our legitimate business interests, such as improving our services, analyzing service effectiveness, and protecting our legal rights. We balance these interests against your rights and freedoms.
In some cases, we process personal data to comply with legal obligations imposed by applicable laws and regulations.
If you are located in the EEA, you have the following rights regarding your personal data:
You have the right to obtain confirmation of whether we process your personal data and to access that data. You may request a copy of your personal data in a commonly used electronic format.
If your personal data is inaccurate or incomplete, you have the right to request correction or completion of that information.
Under certain circumstances, you have the right to request deletion of your personal data. This right is not absolute and may be limited by legal obligations or legitimate interests that require retention of the information.
You may request that we restrict processing of your personal data in specific situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests.
Where processing is based on consent or contract performance and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you. Our services involve human analysis and decision-making rather than purely automated processes.
To exercise any of these rights, please contact us at [email protected]. Please provide sufficient information to allow us to verify your identity and locate your data. We will respond to your request within one month, though this period may be extended by two additional months in complex cases. We will inform you of any extension and the reasons for it.
You will not be charged a fee for exercising your rights unless your request is manifestly unfounded or excessive, particularly if it is repetitive. In such cases, we may charge a reasonable fee or refuse to act on the request.
While we are not required to appoint a Data Protection Officer under GDPR, we have designated a privacy contact point for data protection inquiries. Questions or concerns regarding data protection may be directed to [email protected].
As an Australian organization, personal data collected from EEA residents may be transferred to and processed in Australia. Australia is not currently recognized by the European Commission as providing an adequate level of data protection. To address this, we implement appropriate safeguards including:
By submitting personal data through our website or engaging our services, you acknowledge and consent to the transfer of your data to Australia under these conditions.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay and, where feasible, within 72 hours of becoming aware of the breach. The notification will describe the nature of the breach, the likely consequences, and the measures taken or proposed to address it.
We engage limited third-party service providers to assist in operating our website and delivering our services. These processors are contractually obligated to process personal data only on our instructions and to implement appropriate security measures. We conduct due diligence to ensure processors can meet GDPR requirements.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Specific retention periods vary based on the type of information and the purpose of processing:
When retention periods expire, we securely delete or anonymize personal data.
If you are located in the EEA and believe we have not addressed your data protection concerns adequately, you have the right to lodge a complaint with your local supervisory authority. A list of supervisory authorities is available at the European Data Protection Board website.
Our services are not directed to children under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16 without parental consent, we will take steps to delete that information promptly.
We may update this GDPR Compliance Statement periodically to reflect changes in our practices or legal requirements. We will post updates on this page with a revised date. Significant changes will be communicated through additional means such as email notification or prominent website notices.
For questions, concerns, or requests related to GDPR compliance and data protection, please contact:
clever-bamboo
Privacy Contact
Level 8, 142 Clarence Street
Sydney NSW 2000
Australia
Email: [email protected]