GDPR Information

Last Updated: January 2026

Introduction

cliff-echo respects the privacy rights of individuals from the European Union and European Economic Area. Although we are an Australian-based organisation, we recognise our obligations under the General Data Protection Regulation (GDPR) when processing personal data of EU/EEA residents.

This page supplements our Privacy Policy with specific information relevant to your rights under GDPR.

Data Controller

cliff-echo acts as the data controller for personal information collected through this website. Our contact details are:

cliff-echo
Level 4, 125 Collins Street
Melbourne VIC 3000
Australia
Email: [email protected]

Legal Basis for Processing

We process personal data on the following legal bases:

Consent

Where you have given clear consent for us to process your personal data for specific purposes, such as subscribing to communications or submitting enquiry forms.

Legitimate Interests

Where processing is necessary for our legitimate business interests, provided these interests do not override your fundamental rights. This includes:

• Responding to enquiries about our services
• Improving our website and services
• Ensuring website security

Contractual Necessity

Where processing is necessary for the performance of a contract or to take steps at your request prior to entering a contract.

Legal Obligation

Where processing is necessary to comply with legal requirements.

Your Rights Under GDPR

If you are located in the EU/EEA, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you and information about how we process it.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for its original purpose.

Right to Restrict Processing

You have the right to request that we limit how we use your data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.

Right to Object

You have the right to object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. In complex cases, we may extend this period by up to two additional months, and we will inform you of any such extension.

We may need to verify your identity before fulfilling your request. There is generally no fee for exercising these rights, though we may charge a reasonable fee for manifestly unfounded or excessive requests.

International Data Transfers

As an Australian organisation, your personal data may be transferred to and processed in Australia. Australia is not subject to an adequacy decision by the European Commission. Where we transfer data outside the EU/EEA, we implement appropriate safeguards to protect your data, including:

• Standard contractual clauses approved by the European Commission
• Ensuring recipients maintain appropriate security measures

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. When determining retention periods, we consider:

• The nature and sensitivity of the data
• Potential risks from unauthorised use or disclosure
• Purposes for which we process the data
• Applicable legal requirements

Complaints

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority. You may contact the data protection authority in your country of residence, or if you wish to raise a concern with us first, please email [email protected].

Updates to This Information

We may update this GDPR information from time to time. Changes will be posted on this page with an updated revision date.

Contact

For questions about this GDPR information or to exercise your data protection rights, please contact us:

Email: [email protected]
Address: Level 4, 125 Collins Street, Melbourne VIC 3000, Australia