GDPR Compliance

Our Commitment to GDPR

hazy-canopy Pty Ltd respects the privacy rights of individuals in the European Union and European Economic Area. Although we are an Australian company primarily serving Australian customers, we are committed to complying with the General Data Protection Regulation (GDPR) when processing personal data of EU residents.

Legal Basis for Processing

When we process personal data of EU residents, we do so on the following legal bases:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contractual necessity: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract
• Legal obligation: Where processing is necessary for compliance with a legal obligation
• Legitimate interests: Where processing is necessary for our legitimate interests or those of a third party, provided those interests are not overridden by your rights

Your Rights Under GDPR

If you are an EU resident, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you
• Right to rectification: You can request that we correct inaccurate or incomplete data
• Right to erasure: You can request deletion of your personal data in certain circumstances
• Right to restrict processing: You can request that we limit how we use your data
• Right to data portability: You can request your data in a structured, commonly used format
• Right to object: You can object to processing based on legitimate interests or for direct marketing
• Rights related to automated decision-making: You have the right not to be subject to decisions based solely on automated processing

International Data Transfers

As an Australian company, personal data you provide may be transferred to and processed in Australia. Australia has been recognised by the European Commission as providing adequate protection for personal data.

Where we engage service providers who process data outside Australia or the EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. For enquiries that do not result in a service engagement, we typically retain data for up to 24 months. For customers, we retain data as required by Australian legal and accounting requirements.

You may request deletion of your data at any time, subject to our legal obligations to retain certain records.

Data Protection Officer

Given the nature and scale of our data processing activities, we have not appointed a formal Data Protection Officer. However, our Privacy Officer is responsible for ensuring compliance with data protection requirements.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us using the details below. We will respond to your request within one month. In certain circumstances, we may extend this period by up to two additional months, and we will notify you if this is necessary.

We may need to verify your identity before processing your request. If your request is manifestly unfounded or excessive, we reserve the right to charge a reasonable fee or refuse the request.

Complaints

If you are not satisfied with how we have handled your personal data or responded to your request, you have the right to lodge a complaint with your local supervisory authority. For EU residents, this is the data protection authority in your country of residence.

Contact Information

For GDPR-related enquiries, please contact:

Privacy Officer
hazy-canopy Pty Ltd
42 Sustainability Way
Melbourne VIC 3000
Australia

Email: [email protected]

Updates to This Notice

We may update this GDPR notice from time to time to reflect changes in our practices or legal requirements. The date at the top of this page indicates when it was last revised.