Last updated: 29 September 2026
At vibrant-raven, we are committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR requirements and explains your rights under this regulation.
The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. Although we are based in Australia, we extend GDPR protections to all users who interact with our website, regardless of their location.
We are committed to:
If you are a resident of the European Economic Area (EEA), you have certain data protection rights. These include:
You have the right to request copies of your personal data. We may charge a small fee for this service in certain circumstances.
You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.
You have the right to request that we erase your personal data under certain conditions. This is also known as the "right to be forgotten."
You have the right to request that we restrict the processing of your personal data under certain conditions.
You have the right to object to our processing of your personal data under certain conditions.
You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.
We process personal data for the following purposes:
We will only process your personal data when we have a legal basis for doing so. The legal bases we rely on include:
Your information, including personal data, may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those of your jurisdiction.
If you are located outside Australia and choose to provide information to us, please note that we transfer the data, including personal data, to Australia and process it there.
We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this GDPR policy, and no transfer of your personal data will take place to an organisation or a country unless there are adequate controls in place.
We will retain your personal data only for as long as is necessary for the purposes set out in this policy. We will retain and use your personal data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay and, where feasible, within 72 hours of becoming aware of the breach.
To exercise any of your GDPR rights, please contact us using the details below. We will respond to your request within one month. In certain circumstances, we may extend this period by two further months where necessary, taking into account the complexity and number of requests.
If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority. For residents of the EEA, this would be the data protection authority in your country of residence.
If you have any questions about this GDPR policy or wish to exercise your rights, please contact our Data Protection Officer:
Email: [email protected]
Address: Level 12, 456 Collins Street, Melbourne VIC 3000, Australia