Your Data Protection Rights
winding-glow is committed to protecting the personal data of all individuals, including those located in the European Economic Area (EEA). While we are based in Australia, we recognise and respect the rights granted under the General Data Protection Regulation (GDPR) for European residents who interact with our services.
We process personal data based on the following legal grounds:
If you are located in the EEA, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 days of your request, free of charge.
You have the right to request that we correct any inaccurate or incomplete personal data. We aim to process such requests within 30 days.
You have the right to request deletion of your personal data in certain circumstances, including:
You have the right to request restriction of processing your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where processing is based on consent or contract.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds.
You have the right not to be subject to decisions based solely on automated processing that produce legal or significant effects. We do not currently use automated decision-making for significant decisions about individuals.
As an Australian business, your data may be transferred to and processed in Australia. Australia has been recognised by the European Commission as providing an adequate level of data protection. Where we transfer data to third parties outside of adequate jurisdictions, we ensure appropriate safeguards are in place.
We retain personal data only for as long as necessary for the purposes for which it was collected. Specific retention periods include:
We implement appropriate technical and organisational measures to protect personal data, including:
While we are not required to appoint a Data Protection Officer under Australian law, we have designated a privacy contact to handle data protection matters:
Email: [email protected]
To exercise any of your rights under GDPR, please contact us with:
We will respond within 30 days. If we require an extension, we will inform you within the initial period.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would be the data protection authority in your country of residence.
We may update this GDPR compliance information from time to time. Significant changes will be communicated through our website or direct notification where appropriate.
For any questions regarding GDPR or your data protection rights:
Email: [email protected]
Address: Level 3, 127 Collins Street, Melbourne VIC 3000, Australia