Our commitment to data protection and privacy rights
Last Updated: November 2024
Spark-cove is committed to ensuring compliance with the General Data Protection Regulation (GDPR) for all individuals whose personal data we process, regardless of their location. This document outlines our approach to GDPR compliance and the rights available to data subjects.
While Spark-cove is based in Australia, we recognise that visitors to our website and users of our services may be located in the European Union or European Economic Area. We extend GDPR-equivalent protections to all individuals.
Spark-cove acts as the data controller for personal information collected through our website and services. As data controller, we are responsible for deciding how personal data is collected, used, and stored.
Contact Details:
Spark-cove
47 Heritage Lane
Melbourne VIC 3000
Australia
Email: [email protected]
Under GDPR, we must have a valid legal basis for processing personal data. We rely on the following lawful bases:
Where you have given clear consent for us to process your personal data for specific purposes. You may withdraw consent at any time.
Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
Where processing is necessary for our legitimate business interests, provided these interests are not overridden by your rights and interests.
Where processing is necessary to comply with legal or regulatory obligations.
If you are located in the EU/EEA, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you and information about how we process it.
You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.
You have the right to request that we delete your personal data in certain circumstances, including when the data is no longer necessary for its original purpose.
You have the right to request that we restrict the processing of your personal data in certain circumstances.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
You have the right to object to processing of your personal data in certain circumstances, including processing for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or significantly affect you.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month of receipt. If your request is complex, we may extend this period by a further two months, but we will inform you of any extension and the reasons for it.
We may ask you to verify your identity before processing your request. This is to ensure that personal data is not disclosed to unauthorised individuals.
As Spark-cove is based in Australia, any personal data you provide may be transferred to and processed in Australia. Australia is not subject to an adequacy decision by the European Commission.
Where we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, to protect your personal data.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Retention periods vary depending on the type of data and the purpose of processing.
When personal data is no longer required, we securely delete or anonymise it.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk, we will also notify affected individuals without undue delay.
If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. For EU residents, this may be the data protection authority in your country of residence.
We encourage you to contact us first so we can address your concerns directly.
We may update this GDPR compliance information from time to time. We will post any changes on this page and update the "Last Updated" date.
For GDPR-related enquiries or to exercise your rights, please contact us at:
Spark-cove
47 Heritage Lane
Melbourne VIC 3000
Australia
Email: [email protected]