GDPR Information

Last Updated: September 2026

Overview

While leaf-lynx is based in Australia, we respect the data protection rights of individuals in the European Union and European Economic Area. This page provides additional information about how we handle personal data in compliance with the General Data Protection Regulation (GDPR) for applicable individuals.

Data Controller

leaf-lynx acts as the data controller for personal information collected through this Website. Our contact details are:

Email: [email protected]
Address: 45 Collins Street, Level 12, Melbourne VIC 3000, Australia

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: Where you have given explicit consent for specific processing activities
• Contract: Where processing is necessary to fulfil a contract with you or to take pre-contractual steps at your request
• Legal Obligation: Where we are required to process data to comply with legal requirements
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights

Your Rights Under GDPR

If you are a resident of the EU or EEA, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure: You can request deletion of your personal data in certain circumstances
• Right to Restriction: You can request that we restrict processing of your data
• Right to Data Portability: You can request your data in a structured, machine-readable format
• Right to Object: You can object to processing based on legitimate interests or for direct marketing
• Rights Related to Automated Decision-Making: You have rights regarding automated decisions that significantly affect you

Exercising Your Rights

To exercise any of these rights, please contact us using the details provided above. We will respond to your request within one month, or inform you if we require additional time. We may ask you to verify your identity before processing your request.

International Data Transfers

As we are based in Australia, data you provide may be transferred to and processed in Australia. Australia has been recognised by the European Commission as providing adequate protection for personal data. Where we engage third-party processors, we ensure appropriate safeguards are in place.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods are determined based on the type of data, the purpose of processing, and applicable legal requirements.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For EU residents, this would typically be the data protection authority in your country of residence.

Updates to This Information

We may update this GDPR information from time to time. Material changes will be posted on this page with an updated revision date.