Last updated: November 12, 2026
Canopy-ridge is committed to protecting your personal data and respecting your privacy rights under the General Data Protection Regulation (GDPR) and other applicable data protection laws.
This page outlines how we comply with GDPR principles and explains your rights as a data subject.
Canopy-ridge acts as the data controller for the personal information we collect through our website and services. We determine the purposes and means of processing your personal data.
Contact details:
Email: [email protected]
Address: 142 Victoria Street, Melbourne VIC 3000, Australia
We process your personal data only when we have a lawful basis to do so under GDPR Article 6:
As a data subject, you have the following rights:
You have the right to know what personal data we collect, how we use it, and who we share it with. This information is provided in our Privacy Policy.
You can request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within one month of your request.
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction or completion of that data.
Also known as the "right to be forgotten," you can request deletion of your personal data under certain circumstances, such as when:
You can request that we limit how we use your personal data in certain situations, such as when you contest the accuracy of the data or object to our processing.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
You can object to processing of your personal data where we rely on legitimate interests as the legal basis, or where we process your data for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you. We do not currently engage in automated decision making.
To exercise any of your GDPR rights, please contact us at [email protected] with the subject line "GDPR Request." Please provide:
We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you of the extension.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach.
Your personal data is primarily processed and stored in Australia. If we transfer data outside of Australia or the European Economic Area, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the purpose of processing.
Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately so we can delete it.
You have the right to lodge a complaint with a supervisory authority if you believe we have processed your personal data in violation of GDPR. However, we encourage you to contact us first so we can address your concerns directly.
We may update this GDPR compliance notice from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised date.