GDPR Compliance

1. Introduction

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. Although bright-synthesis is based in Australia, we respect the privacy rights of all our visitors and clients, including those from the EU.

2. Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
• Legal Obligation: Processing is necessary for us to comply with the law
• Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests

3. Your Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you have the following data protection rights:

3.1 Right to Access

You have the right to request copies of your personal data. We may charge a small fee for this service.

3.2 Right to Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

3.3 Right to Erasure

You have the right to request that we erase your personal data, under certain conditions.

3.4 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

3.5 Right to Object to Processing

You have the right to object to our processing of your personal data, under certain conditions.

3.6 Right to Data Portability

You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

3.7 Right to Withdraw Consent

Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

4. How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at:

Email: [email protected]

We will respond to your request within one month. In some cases, we may need to extend this period by two additional months due to the complexity of your request. We will inform you of any such extension.

5. Data Protection Officer

For any questions regarding GDPR compliance or data protection, you can contact our Data Protection Officer at:

Email: [email protected]
Address: 247 Collins Street, Melbourne VIC 3000, Australia

6. Data We Collect

We collect and process the following categories of personal data:

• Identity data (name, username)
• Contact data (email address, physical address)
• Technical data (IP address, browser type, device information)
• Usage data (how you use our website and services)
• Marketing and communications data (your preferences in receiving marketing from us)
• Financial data (as relevant to our services)

7. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data to:

• Provide services to you
• Manage our relationship with you
• Improve our website and services
• Send you marketing communications (with your consent)
• Comply with legal and regulatory requirements

8. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your data, and applicable legal requirements.

9. International Data Transfers

We are based in Australia. If you are accessing our services from the EEA, please be aware that your information may be transferred to, stored, and processed in Australia.

We ensure appropriate safeguards are in place to protect your data in accordance with this policy and applicable data protection laws.

10. Security Measures

We have implemented appropriate security measures to prevent your personal data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorized way. We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

11. Automated Decision Making

We do not use automated decision-making or profiling in ways that produce legal effects or similarly significantly affect you.

12. Third-Party Links

Our website may include links to third-party websites. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

13. Cookies

Our website uses cookies to distinguish you from other users and to provide you with a good experience. For detailed information about the cookies we use and the purposes for which we use them, please see our Cookies Policy.

14. Changes to This Policy

We may update this GDPR compliance statement from time to time. We will notify you of any changes by posting the new statement on this page and updating the "Last Updated" date.

15. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement.

16. Contact Information

For any questions or concerns regarding GDPR compliance, please contact us:

Email: [email protected]
Address: 247 Collins Street, Melbourne VIC 3000, Australia