GDPR Compliance

Last updated: January 2024

Our Commitment to GDPR

Clear Fountain Pty Ltd is committed to protecting the personal data of all individuals, including those residing in the European Economic Area (EEA). Although we are an Australian company, we recognise the importance of the General Data Protection Regulation (GDPR) and have implemented measures to ensure compliance when processing personal data of EEA residents.

Data Controller

For the purposes of GDPR, Clear Fountain Pty Ltd is the data controller responsible for your personal data. Our contact details are:

Clear Fountain Pty Ltd
142 Greenway Boulevard
Thornbury, VIC 3071
Australia
Email: [email protected]

Legal Basis for Processing

We process personal data only when we have a lawful basis to do so. The legal bases we rely on include:

• Consent: You have given clear consent for us to process your personal data for a specific purpose.
• Contract: Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, provided your rights and interests do not override those interests.
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.

Your Rights Under GDPR

If you are an EEA resident, you have the following rights regarding your personal data:

Right to Access

You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete any information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data, under certain conditions. This is also known as the "right to be forgotten".

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

Right to Object to Processing

You have the right to object to our processing of your personal data, under certain conditions, particularly where we are relying on legitimate interests as our legal basis.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.

If you are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority in your country of residence.

Data Transfers

As an Australian company, your personal data may be transferred to and processed in Australia. We ensure that any such transfers are conducted in compliance with applicable data protection laws and that appropriate safeguards are in place.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. When personal data is no longer needed, we securely delete or anonymise it.

Security Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include:

• Encryption of data in transit and at rest where appropriate
• Regular security assessments and testing
• Access controls and authentication procedures
• Staff training on data protection and security

Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where required by GDPR.

Changes to This Notice

We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.

Contact Us

If you have any questions about this GDPR compliance notice or our data protection practices, please contact us at:

Clear Fountain Pty Ltd
142 Greenway Boulevard
Thornbury, VIC 3071
Australia
Email: [email protected]