GDPR and Data Protection

Last updated: November 3, 2026

Introduction

While Link-hollow operates in Australia and is primarily governed by the Australian Privacy Principles, we recognize that some of our website visitors may be subject to the European Union's General Data Protection Regulation (GDPR). This page explains how we handle data for individuals covered by GDPR.

Data Controller

For purposes of GDPR, Link-hollow is the data controller for personal information collected through our website and services.

Contact details:
Email: [email protected]
Address: 127 Collins Street, Melbourne VIC 3000, Australia

Legal Basis for Processing

We process personal data under the following legal bases:

  • Consent: When you provide explicit consent for specific processing activities
  • Contract Performance: When processing is necessary to deliver services you've requested
  • Legitimate Interests: When we have legitimate business interests that do not override your rights
  • Legal Obligation: When we must process data to comply with legal requirements

Your Rights Under GDPR

If you are subject to GDPR, you have the following rights regarding your personal data:

Right of Access

You can request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data when it is no longer necessary for the purposes collected or when you withdraw consent.

Right to Restrict Processing

You can request that we limit how we use your data in certain circumstances.

Right to Data Portability

You can request your data in a structured, commonly used format and transmit it to another controller.

Right to Object

You can object to processing based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

When processing is based on consent, you can withdraw that consent at any time.

Right to Lodge a Complaint

You can file a complaint with your local data protection authority if you believe your rights have been violated.

How to Exercise Your Rights

To exercise any of these rights, contact us at [email protected] with:

  • Your full name and contact information
  • Description of the request
  • Verification of your identity

We will respond to verified requests within one month, though complex requests may require additional time.

Data Transfers

Your personal data is primarily stored and processed in Australia. If data is transferred outside Australia or the EU, we ensure appropriate safeguards are in place through:

  • Standard contractual clauses approved by the European Commission
  • Adequacy decisions recognizing equivalent data protection
  • Other legally approved transfer mechanisms

Data Retention

We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy or as required by law. Typical retention periods include:

  • Service-related data: 7 years after service completion
  • Marketing data: Until consent is withdrawn or 3 years of inactivity
  • Website analytics: 24 months

Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.

Data Security

We implement appropriate technical and organizational measures to protect personal data, including:

  • Encryption of data in transit and at rest
  • Access controls limiting who can view personal data
  • Regular security assessments and updates
  • Staff training on data protection principles

Data Breach Notification

In the event of a data breach that poses risks to your rights and freedoms, we will notify affected individuals and relevant supervisory authorities within 72 hours of becoming aware of the breach, as required by GDPR.

Children's Privacy

Our services are not directed at children under 16. We do not knowingly collect personal data from children. If we learn we have collected data from a child, we will delete it promptly.

Updates to This Policy

We may update this policy to reflect changes in data processing practices or legal requirements. Material changes will be communicated through our website and, where appropriate, directly to you.

Contact and Complaints

For GDPR-related inquiries or complaints:

Email: [email protected]
Address: 127 Collins Street, Melbourne VIC 3000, Australia

You also have the right to lodge a complaint with your local supervisory authority.