Our Commitment to GDPR
While leaf-dive operates primarily in Australia, we respect the data protection rights of all individuals, including those protected under the European Union's General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR principles when processing data of EU residents.
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: You have given clear consent for us to process your personal data for specific purposes, such as marketing communications.
- Contract: Processing is necessary to fulfill our service agreement with you.
- Legal Obligation: Processing is necessary to comply with legal requirements.
- Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services, provided these interests do not override your rights.
Your Rights Under GDPR
If you are an EU resident, you have the following rights regarding your personal data:
- Right to Access: Request copies of your personal data.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your personal data in certain circumstances.
- Right to Restrict Processing: Request limitation of how we use your data.
- Right to Data Portability: Request transfer of your data to another organization or directly to you.
- Right to Object: Object to processing based on legitimate interests or for direct marketing.
- Rights Related to Automated Decision Making: Not be subject to decisions based solely on automated processing that significantly affects you.
Data Retention
We retain personal data only as long as necessary to fulfill the purposes for which it was collected, including:
- Service records: Retained for up to 7 years for care continuity and legal compliance
- Booking information: Retained for up to 3 years after last service
- Marketing data: Retained until you withdraw consent
- Website analytics: Typically retained for 26 months
International Data Transfers
As we operate in Australia, your data may be transferred to and processed in Australia. We ensure appropriate safeguards are in place when transferring data internationally, consistent with GDPR requirements.
Data Protection Officer
For GDPR-related inquiries or to exercise your rights, you may contact our data protection representative at:
Email: [email protected]
Cookies and Tracking
We use cookies and similar tracking technologies. You can manage your cookie preferences through our cookie banner or browser settings. For detailed information, see our Cookie Policy.
Security Measures
We implement appropriate technical and organizational security measures to protect your personal data, including:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication requirements
- Staff training on data protection practices
Complaints
If you believe we have not handled your data in accordance with GDPR, you have the right to lodge a complaint with your local supervisory authority in the EU.
Contact Information
For questions about our GDPR compliance or to exercise your rights:
Email: [email protected]
Address: 147 Riverside Parkway, Brisbane, QLD 4000, Australia