GDPR Compliance

Our Commitment to Data Protection

Although Grand Aurora operates primarily in Australia, we recognize the importance of the European Union's General Data Protection Regulation (GDPR) for any European residents who may interact with our services. This page outlines our commitment to GDPR principles and your rights under this regulation.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you explicitly agree to provide your information through our forms
• Contract Performance: When processing is necessary to deliver our consulting services
• Legitimate Interests: When we process data to improve our services, provided your rights are not overridden
• Legal Obligation: When we must process data to comply with applicable laws

Your GDPR Rights

If you are a resident of the European Economic Area (EEA), you have the following rights:

Right to Access

You may request a copy of the personal data we hold about you.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data, subject to certain legal exceptions (such as legal retention requirements for project records).

Right to Restrict Processing

You may request that we limit how we use your personal data in certain circumstances.

Right to Data Portability

You may request a copy of your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You may object to our processing of your personal data where we rely on legitimate interests as the legal basis.

Right to Withdraw Consent

Where we process your data based on consent, you may withdraw that consent at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with your local data protection authority if you believe we have not complied with GDPR requirements.

Data Processing Activities

We engage in the following data processing activities:

• Collection of contact information through website forms
• Storage of client project information and correspondence
• Analysis of website usage data to improve user experience
• Communication with clients and prospective clients
• Maintenance of business records

International Data Transfers

Your personal data is primarily stored and processed in Australia. If data is transferred outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other legally recognized transfer mechanisms

Data Security Measures

We implement technical and organizational measures to protect your personal data, including:

• Secure storage systems with access controls
• Regular security assessments
• Staff training on data protection
• Encryption of data transmission
• Regular data backup procedures

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Typical retention periods include:

• Inquiry data: 2 years from last contact
• Client project data: Duration of project plus 7 years (in accordance with business record requirements)
• Website analytics data: 26 months

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.

Data Protection Officer

For GDPR-related inquiries, please contact us at:

Email: [email protected]
Subject Line: GDPR Inquiry
Address: Level 3, 147 Collins Street, Melbourne VIC 3000, Australia

Exercising Your Rights

To exercise any of your GDPR rights, please submit a request to the contact information above. We will respond within one month of receiving your request. If your request is complex or we receive multiple requests, we may extend this period by an additional two months, and we will inform you of any such extension.

Updates to This Policy

We may update this GDPR compliance statement from time to time to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.