Under the Australian Privacy Act 1988 (Cth), you have the right to access personal information we hold about you and to request correction of inaccurate information. You may also make a complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

If you are within the European Union or United Kingdom, you are entitled to the following rights under GDPR: the right to access your data (Article 15); the right to rectify inaccurate data (Article 16); the right to erasure - 'right to be forgotten' (Article 17); the right to restrict processing (Article 18); the right to data portability (Article 20); the right to object to processing (Article 21); and the right to withdraw consent at any time (Article 7(3)) without affecting the lawfulness of processing prior to withdrawal. You also have the right to lodge a complaint with your local data protection authority.

We will retain personal information only as long as necessary to fulfil the purposes described in this policy. Assessment and report data is retained for up to 2 years after your last interaction, then deleted or anonymised. Transaction and billing records are retained for 7 years in accordance with Australian tax law. Marketing consent records are retained until you withdraw consent.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days and may request verification of your identity before processing your request. There is no fee for exercising your rights, except in cases of excessive or manifestly unfounded requests.