Data Protection

Our Commitment to Data Protection

Mellow-elm is committed to protecting your personal data and respecting your privacy rights. This page provides information about how we handle personal data in accordance with applicable data protection laws, including the Australian Privacy Act 1988 and, where applicable, the European General Data Protection Regulation (GDPR).

Data Controller

Mellow-elm is the data controller responsible for your personal data. Our contact details are:

Mellow-elm
Level 12, 45 Market Street
Sydney NSW 2000
Australia
Email: [email protected]

Legal Basis for Processing

We process personal data on the following legal bases:

• Consent: Where you have given us explicit consent to process your data for specific purposes
• Contract: Where processing is necessary for the performance of our services
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights
• Legal Obligation: Where processing is required to comply with applicable laws

Categories of Personal Data

We may process the following categories of personal data:

• Identity data (name, title)
• Contact data (email address)
• Professional data (employment history, qualifications, career goals)
• Technical data (IP address, browser information, usage data)
• Communication data (correspondence and feedback)

Your Data Protection Rights

Under applicable data protection laws, you have the following rights:

Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information free of charge within 30 days of your request.

Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure

You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances, such as while we verify the accuracy of data you have challenged.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have that data transmitted to another controller where technically feasible.

Right to Object

You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.

Right to Withdraw Consent

Where we rely on consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

Exercising Your Rights

To exercise any of your data protection rights, please contact us at:

Email: [email protected]

We will respond to your request within 30 days. In some cases, we may need to verify your identity before processing your request.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against:

• Unauthorised or unlawful processing
• Accidental loss, destruction, or damage
• Theft or misuse

These measures include encryption, access controls, secure storage, and regular security assessments.

International Data Transfers

Your personal data may be transferred to and processed in countries outside Australia. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the purpose of processing.

Data Breaches

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, notify you without undue delay.

Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. In Australia, this is the Office of the Australian Information Commissioner (OAIC):

Office of the Australian Information Commissioner
Website: www.oaic.gov.au

Changes to This Information

We may update this data protection information from time to time. Any changes will be posted on this page with an updated revision date.