Data Protection Information
This page provides information about how we handle personal data, including considerations for international clients and data protection standards.
Data Controller
Savanna-egret operates as the data controller for personal information collected through this website and our service delivery.
Contact for data protection matters: [email protected]
Legal Basis for Processing
We process personal data on the following legal bases:
- Contract performance: To provide services you have requested
- Legitimate interests: To operate our business and improve our services
- Legal obligation: To comply with applicable laws and regulations
- Consent: Where you have provided explicit consent for specific processing activities
Types of Data Processed
We may process the following categories of personal data:
- Identity data: name, title
- Contact data: email address, physical address
- Transaction data: details of services purchased
- Technical data: IP address, browser type, time zone settings
- Usage data: how you interact with our website
Data Subject Rights
You have the following rights regarding your personal data:
- Right of access: Request copies of your personal data
- Right to rectification: Request correction of inaccurate data
- Right to erasure: Request deletion of your personal data under certain conditions
- Right to restrict processing: Request limitation of processing under certain circumstances
- Right to data portability: Request transfer of your data to another service provider
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Withdraw consent at any time where processing is based on consent
International Data Transfers
We primarily operate within Australia. If we transfer data internationally, we ensure appropriate safeguards are in place to protect your personal information in accordance with applicable data protection laws.
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:
- Service delivery and client relationship management
- Compliance with legal, accounting, or reporting requirements
- Resolution of disputes and enforcement of agreements
When personal data is no longer required, we securely delete or anonymize it.
Automated Decision Making
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.
Data Security Measures
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
- Encryption of data in transit and at rest
- Regular security assessments
- Access controls and authentication measures
- Staff training on data protection
Third Party Processing
We may engage third-party service providers to process personal data on our behalf. These processors are contractually obligated to implement appropriate security measures and process data only according to our instructions.
Complaints
If you have concerns about how we handle your personal data, please contact us first at [email protected]. You also have the right to lodge a complaint with the Office of the Australian Information Commissioner or the relevant data protection authority in your jurisdiction.
Updates to This Notice
We may update this data protection information from time to time. Significant changes will be communicated through our website with an updated revision date.