Last Updated: January 2026
tranquil-gorge is committed to protecting the privacy and security of personal data in accordance with the General Data Protection Regulation (GDPR) and Australian Privacy Principles. This statement outlines how we comply with these regulations.
We process personal data based on the following lawful grounds:
Under GDPR, you have the following rights regarding your personal data:
You can request confirmation of whether we process your personal data and obtain a copy of that data.
You can request correction of inaccurate or incomplete personal information.
You can request deletion of your personal data under certain circumstances, such as when it is no longer necessary for the purposes collected.
You can request limitation of how we process your data in specific situations.
You can request to receive your personal data in a structured, commonly used format and transmit it to another controller.
You can object to processing of your personal data for direct marketing purposes or based on legitimate interests.
Where processing is based on consent, you have the right to withdraw that consent at any time.
We implement appropriate technical and organizational measures including:
We primarily store and process data within Australia. Any transfers of personal data outside Australia are conducted with appropriate safeguards in place, such as standard contractual clauses or adequacy decisions.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant supervisory authorities within 72 hours of becoming aware of the breach, as required by GDPR.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Service inquiries are typically retained for three years, while contractual data may be kept for seven years for legal compliance.
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
To exercise any of your GDPR rights, please contact us at:
Email: [email protected]
Address: Level 4, 285 Collins Street, Melbourne VIC 3000, Australia
We will respond to your request within one month. In complex cases, this period may be extended by two additional months with notification.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or a relevant European supervisory authority.
We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.