GDPR Compliance
Last updated: August 2026
Introduction
Although Vibrant Valley is based in Australia, we are committed to protecting the personal data of all visitors, including those from the European Union and European Economic Area. This page outlines our compliance with the General Data Protection Regulation (GDPR) and your rights under this regulation.
Data Controller
Vibrant Valley acts as the data controller for personal data collected through this website. Our contact details are:
Vibrant Valley
142 Greenfield Drive
Sydney, NSW 2000
Australia
[email protected]
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: When you provide explicit consent for specific processing activities, such as subscribing to communications
- Contract: When processing is necessary to fulfil a contract with you or to take steps at your request before entering a contract
- Legitimate Interests: When processing is necessary for our legitimate interests, provided these do not override your fundamental rights and freedoms
- Legal Obligation: When processing is necessary to comply with our legal obligations
Your Rights Under GDPR
If you are located in the European Union or European Economic Area, you have the following rights regarding your personal data:
Right of Access
You have the right to request a copy of the personal data we hold about you, along with information about how we process it.
Right to Rectification
You have the right to request that we correct any inaccurate personal data we hold about you without undue delay.
Right to Erasure
You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restriction of Processing
You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
Right to Object
You have the right to object to processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
International Data Transfers
As we are based in Australia, any personal data you provide may be transferred to and processed in Australia. Australia has been recognised by the European Commission as providing an adequate level of data protection. Where necessary, we implement appropriate safeguards for international data transfers.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Our retention periods are determined by:
- The nature of the data and the purposes for processing
- Legal, regulatory, and contractual requirements
- Legitimate business needs
Exercising Your Rights
To exercise any of your rights under GDPR, please contact us using the details below. We will respond to your request within one month. In complex cases, this period may be extended by a further two months, in which case we will inform you accordingly.
Complaints
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority. For EU residents, this would be the data protection authority in your country of residence.
Contact Us
For any questions or requests regarding your data protection rights, please contact:
Vibrant Valley
142 Greenfield Drive
Sydney, NSW 2000
Australia
[email protected]