GDPR Compliance

Our Commitment to Data Protection

While iris-nest operates in Australia, we recognize that some users may be located in or citizens of European Union member states. We are committed to respecting data protection principles consistent with GDPR requirements.

Legal Basis for Processing

We process personal data under the following legal bases:

Consent: When you submit inquiries or register for services, you provide explicit consent for data processing.

Contractual necessity: Processing required to deliver services you have requested.

Legitimate interests: Website analytics and service improvement, balanced against your privacy rights.

Your Rights Under GDPR

Right to access: Request confirmation of what personal data we hold about you and receive a copy.

Right to rectification: Request correction of inaccurate personal information.

Right to erasure: Request deletion of your personal data under certain circumstances.

Right to restrict processing: Request limitation of how we use your data.

Right to data portability: Receive your data in a structured, commonly used format.

Right to object: Object to processing based on legitimate interests.

Right to withdraw consent: Withdraw previously given consent at any time.

Data Retention

We retain personal data only as long as necessary for service delivery and legal compliance. Consultation materials are retained for a period consistent with professional service standards, typically not exceeding seven years unless ongoing service relationships exist.

Website usage data is retained for analytical purposes for a maximum of 24 months.

International Data Transfers

Our servers are located in Australia. If you are accessing our services from the European Union, your data will be transferred outside the EU. We implement appropriate safeguards to protect your information during such transfers.

Data Protection Officer

For GDPR-related inquiries or to exercise your rights, contact our data protection contact at [email protected]. We will respond to requests within one month of receipt.

Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.

Automated Decision Making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.

Contact Information

For data protection inquiries:

iris-nest
Level 12, 485 La Trobe Street
Melbourne VIC 3000
Australia
Email: [email protected]