GDPR information

Effective date: 1 January 2025

This notice explains our compliance with the EU General Data Protection Regulation (GDPR) for individuals in the EEA, UK, and Switzerland.

Controller and contacts

Controller: Nightfall Legends Speaking Academy

Contact: [email protected] • Level 6, 11 York Street, Sydney NSW 2000, Australia

EU/UK representative: available on request for EEA/UK matters.

Legal bases

• Consent for newsletters and optional communications
• Contract to deliver requested services and respond to enquiries
• Legitimate interests for service improvement and security
• Legal obligation where required by law

Your rights

• Access and portability
• Rectification and erasure
• Restriction and objection
• Rights regarding automated decision-making (we do not use automated decisions producing legal effects)

Data transfers

If we transfer data outside the EEA/UK, we use appropriate safeguards such as Standard Contractual Clauses and assess local laws.

We work with processors that offer adequate security and contractual protections.

Retention

We keep personal data only as long as needed for the purposes collected and to meet legal requirements. We maintain a deletion schedule reviewed annually.

Data subject requests

To exercise your rights, email [email protected]. We may verify identity and will respond within one month.

Questions or complaints

Contact: [email protected]. You may also contact your local supervisory authority.