GDPR Information

Last updated: January 2024

This page provides additional information for visitors and clients located in the European Economic Area (EEA), United Kingdom, and Switzerland regarding their rights under the General Data Protection Regulation (GDPR) and related data protection laws.

Data Controller

Witty-fable Pty Ltd is the data controller responsible for your personal data. Our contact details are:

Witty-fable Pty Ltd
Level 4, 127 Creek Street
Brisbane QLD 4000
Australia

Email: [email protected]

Legal Basis for Processing

We process personal data on the following legal bases:

• Consent: Where you have given explicit consent for specific purposes, such as receiving communications or the use of non-essential cookies.
• Contract: Where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights and freedoms.
• Legal Obligation: Where processing is necessary to comply with applicable laws.

Your Rights Under GDPR

If you are located in the EEA, UK, or Switzerland, you have the following rights:

Right of Access

You have the right to request a copy of the personal data we hold about you and to receive information about how we process it.

Right to Rectification

You have the right to request that we correct any inaccurate personal data or complete any incomplete data.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.

Right to Restrict Processing

You have the right to request that we limit the processing of your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

International Data Transfers

As we are based in Australia, personal data collected from EEA residents may be transferred to and processed in Australia. Australia is not subject to an adequacy decision by the European Commission. We ensure appropriate safeguards are in place through standard contractual clauses and other mechanisms to protect your data.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods include:

• Inquiry data: 3 years from last contact
• Client project data: 7 years from project completion
• Website analytics: 26 months

Automated Decision-Making

We do not use automated decision-making or profiling in ways that produce legal effects or similarly significantly affect you.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.

Complaints

If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would be the data protection authority in your country of residence. For UK residents, complaints can be made to the Information Commissioner's Office (ICO).

Updates to This Information

We may update this GDPR information from time to time to reflect changes in our practices or applicable law. The date of the last update is shown at the top of this page.