GDPR Compliance

Our Commitment to GDPR

bold-lark is committed to protecting the privacy and personal data of all individuals, including those residing in the European Economic Area (EEA). Although we are an Australian company, we recognise the importance of the General Data Protection Regulation (GDPR) and have implemented measures to ensure compliance when processing personal data of EEA residents.

Data Controller

For the purposes of the GDPR, bold-lark acts as the data controller for personal information collected through this website. Our contact details are:

bold-lark
42 Greenview Terrace
Sydney, NSW 2000
Australia
Email: [email protected]

Legal Basis for Processing

We process personal data under the following legal bases as defined by the GDPR:

• Consent: When you voluntarily provide your personal data through our forms or communications, you consent to our processing of that information for the stated purposes.
• Contractual necessity: Processing necessary to perform a contract with you or to take steps at your request prior to entering a contract (e.g., providing quotes or scheduling services).
• Legitimate interests: Processing necessary for our legitimate business interests, such as improving our services and website functionality, where such interests are not overridden by your rights and freedoms.
• Legal obligation: Processing necessary to comply with legal requirements.

Your Rights Under GDPR

If you are a resident of the EEA, you have the following rights regarding your personal data:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request that we correct any inaccurate or incomplete personal data.
• Right to erasure: You may request that we delete your personal data, subject to certain legal exceptions.
• Right to restrict processing: You may request that we limit our processing of your personal data in certain circumstances.
• Right to data portability: You may request to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to our processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month, as required by the GDPR. In some cases, we may need to verify your identity before processing your request.

International Data Transfers

As an Australian company, your personal data may be transferred to and processed in Australia. Australia is not subject to an adequacy decision by the European Commission. However, we implement appropriate safeguards to protect your personal data during such transfers, including standard contractual clauses and ensuring our data processing practices meet GDPR standards.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. When personal data is no longer needed, we securely delete or anonymise it.

Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Complaints

If you believe that we have not complied with the GDPR or have concerns about our data processing practices, you have the right to lodge a complaint with a supervisory authority in the EEA member state where you reside or work, or where the alleged infringement occurred.

Updates to This Information

We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated effective date.