Our Commitment to GDPR

Mellow Surge is committed to ensuring the security and protection of the personal information that we process, and to providing a compliant and consistent approach to data protection. We have always had a robust and effective data protection program in place which complies with existing law and abides by the data protection principles.

We recognise our obligations in updating and expanding this program to meet the demands of the General Data Protection Regulation (GDPR) and the Australian Privacy Principles.

Data Controller

Mellow Surge is the data controller for any personal data collected through our website or services. Our contact details are:

Mellow Surge
Level 4, 88 Creek Street
Brisbane QLD 4000
Australia
Email: [email protected]

Lawful Basis for Processing

We process personal data under the following lawful bases:

Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have certain data protection rights. Mellow Surge aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

You have the following rights:

Data Security

We have implemented appropriate technical and organisational security measures designed to protect the security of any personal information we process. However, please also remember that we cannot guarantee that the internet itself is 100% secure.

Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process your personal data, and the applicable legal requirements.

International Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those of your jurisdiction.

If you are located outside Australia and choose to provide information to us, please note that we transfer the data to Australia and process it there. Your submission of such information represents your agreement to that transfer.

Changes to This Policy

We may update our GDPR compliance statement from time to time. We will notify you of any changes by posting the new statement on this page and updating the "last updated" date.

Contact Us

If you have any questions about this GDPR compliance statement, or if you wish to exercise any of your rights, please contact us at:

Email: [email protected]