Your data protection rights under the General Data Protection Regulation
Last updated: January 2024
heath-magpie is committed to protecting the personal data of all individuals, including visitors from the European Economic Area (EEA). This page outlines how we comply with the General Data Protection Regulation (GDPR) and the rights available to you.
We process personal data only when we have a lawful basis to do so. Our legal bases for processing include:
Under the GDPR, you have the following rights regarding your personal data:
You have the right to request a copy of the personal data we hold about you. We will provide this information within one month of your request, free of charge.
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. We will respond to such requests within one month.
Also known as the "right to be forgotten", you can request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purpose it was collected.
You have the right to request that we limit the processing of your personal data in certain circumstances, such as while we verify the accuracy of data you have challenged.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that produce legal effects concerning you. We do not currently use automated decision-making.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Specific retention periods vary depending on the type of data and its purpose.
As an Australian business, we may transfer personal data outside the EEA. When we do so, we ensure appropriate safeguards are in place to protect your data, such as standard contractual clauses approved by the European Commission.
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours. If the breach is likely to result in a high risk, we will also notify affected individuals directly.
To exercise any of your GDPR rights, please contact us using the details below. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.
If you are not satisfied with how we handle your personal data or respond to your requests, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would be the data protection authority in your country of residence.
For any questions about GDPR compliance or to exercise your rights, please contact us at:
heath-magpie
47 Craftsman Lane
Collingwood VIC 3066
Australia
Email: [email protected]