GDPR Compliance

Last Updated: 1 June 2026

This page provides additional information for individuals located in the European Economic Area (EEA) regarding their rights under the General Data Protection Regulation (GDPR).

Data Controller

Vibrant Glen Pty Ltd is the data controller responsible for your personal data. Our contact details are:

Vibrant Glen Pty Ltd
Level 4, 127 Creek Street
Brisbane QLD 4000, Australia
Email: [email protected]

Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes, such as receiving marketing communications.
• Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legal Obligation: Where processing is necessary for compliance with a legal obligation to which we are subject.
• Legitimate Interests: Where processing is necessary for our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights.

Your Rights Under GDPR

If you are located in the EEA, you have the following data protection rights:

• Right of Access: You have the right to request copies of your personal data.
• Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• Right to Erasure: You have the right to request that we erase your personal data under certain conditions.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data under certain conditions.
• Right to Data Portability: You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.
• Right to Object: You have the right to object to our processing of your personal data under certain conditions.
• Rights Related to Automated Decision Making: You have the right not to be subject to a decision based solely on automated processing, including profiling.

International Data Transfers

Your personal data may be transferred to and processed in Australia, which is outside the EEA. Australia has been recognised by the European Commission as providing an adequate level of data protection. Where we transfer data to other countries, we ensure appropriate safeguards are in place.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. The retention period may vary depending on the context of the processing and our legal obligations.

Exercising Your Rights

To exercise any of your rights, please contact us at [email protected]. We will respond to your request within one month. This period may be extended by two further months where necessary, taking into account the complexity and number of requests.

Right to Lodge a Complaint

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.

Updates to This Notice

We may update this GDPR notice from time to time. Any changes will be posted on this page with an updated revision date.