GDPR Compliance

Our Commitment to GDPR

brillora-polish is committed to complying with the General Data Protection Regulation (GDPR) for all individuals whose personal data we process, regardless of location. This page outlines how we uphold your rights under GDPR.

Data Controller

brillora-polish acts as the data controller for personal information collected through this website. We determine the purposes and means of processing your personal data.

Contact details:
brillora-polish
42 Greenfield Avenue
Sydney, NSW 2000
Australia
[email protected]

Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of receiving your request.

Right to Rectification

If the personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will update records promptly upon verification.

Right to Erasure

Also known as the "right to be forgotten," you may request deletion of your personal data when it is no longer necessary for the purpose it was collected, or when you withdraw consent.

Right to Restrict Processing

You may request that we limit how we use your personal data while we verify its accuracy or assess your objection to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.

Lawful Basis for Processing

We process personal data under the following lawful bases:

• Consent: Where you have given explicit consent for specific purposes
• Contract: Where processing is necessary to fulfil our contractual obligations
• Legitimate Interests: Where we have a valid business interest that does not override your rights
• Legal Obligation: Where processing is required to comply with applicable laws

Data Transfers

If we transfer personal data outside Australia, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Specific retention periods are outlined in our Privacy Policy.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at:

[email protected]

We will respond to your request within one month. In complex cases, this period may be extended by two additional months, and we will inform you of any such extension.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Australia, you may contact the Office of the Australian Information Commissioner (OAIC).

Updates

This GDPR information page may be updated to reflect changes in regulations or our practices. Please review periodically for the latest information.