Effective Date: January 1, 2026
While stravencha.com operates primarily in Australia, we recognize the importance of the General Data Protection Regulation (GDPR) for individuals in the European Economic Area (EEA). This page outlines our commitment to protecting the personal data of all visitors, regardless of location.
We process personal data only when we have a lawful basis to do so. The legal bases we rely on include:
If you are located in the EEA, you have the following rights regarding your personal data:
You have the right to request copies of your personal data that we hold. We may charge a reasonable fee for additional copies beyond the first request.
You have the right to request correction of any personal data you believe is inaccurate or incomplete.
You have the right to request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes it was collected or when you withdraw consent.
You have the right to request that we limit how we use your personal data under specific conditions, such as when you contest the accuracy of the data or object to our processing.
You have the right to request transfer of your personal data to another organization or directly to you, in a structured, commonly used, and machine-readable format.
You have the right to object to our processing of your personal data where we rely on legitimate interests as the legal basis for processing.
We do not use automated decision-making or profiling processes that produce legal effects or similarly significant effects on individuals.
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month of receipt. In complex cases, we may extend this period by an additional two months and will inform you of any such extension.
For questions specifically related to data protection and GDPR compliance, you may contact our privacy team at [email protected].
Your personal data is primarily stored and processed in Australia. If we transfer data outside of the EEA, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach poses a high risk to your rights, we will also notify you directly without undue delay.
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority in your jurisdiction. For individuals in the EEA, you may contact your local data protection authority.
We do not knowingly collect or process personal data from individuals under the age of 16 without parental consent. If we become aware that we have collected such data, we will take steps to delete it promptly.
We may update this GDPR compliance statement periodically. Any changes will be posted on this page with an updated effective date. We encourage you to review this page regularly to stay informed about how we protect your data.
For questions about GDPR compliance or to exercise your rights, please contact us at:
Email: [email protected]
Address: 47 Collins Street, Melbourne VIC 3000, Australia
Last updated: January 1, 2026