GDPR Compliance

Our Commitment to GDPR

Although Boundless Grove is an Australian company, we are committed to protecting the privacy of all our website visitors, including those from the European Union. This page outlines how we comply with the General Data Protection Regulation (GDPR) for EU residents.

Data Controller

Boundless Grove acts as the data controller for personal information collected through our website. Our contact details are:

Boundless Grove
142 Collins Street
Melbourne VIC 3000
Australia
Email: [email protected]

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you submit a form or subscribe to communications, you provide consent for us to process your data for the stated purposes.
• Contractual Necessity: When you engage our services, we process data necessary to fulfil our contractual obligations.
• Legitimate Interests: We may process data for legitimate business purposes, such as improving our website and services, provided this does not override your rights.

Your Rights Under GDPR

If you are an EU resident, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete data.
• Right to Erasure: You can request deletion of your personal data in certain circumstances.
• Right to Restrict Processing: You can request that we limit how we use your data.
• Right to Data Portability: You can request your data in a structured, machine-readable format.
• Right to Object: You can object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days. We may ask for verification of your identity before processing your request.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Enquiry data is typically retained for 24 months unless you become a client, in which case data is retained for the duration of our business relationship plus any legally required retention period.

International Data Transfers

As an Australian company, your data may be transferred to and processed in Australia. Australia has been recognised by the European Commission as providing an adequate level of data protection. We also implement appropriate safeguards to protect your data during any international transfers.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

Complaints

If you believe we have not handled your data appropriately, you have the right to lodge a complaint with a supervisory authority. For EU residents, this would be the data protection authority in your country of residence.

Updates to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.

Contact

For any questions regarding GDPR or our data protection practices, please contact:

Email: [email protected]
Address: 142 Collins Street, Melbourne VIC 3000, Australia