GDPR Compliance

Last updated: May 20, 2026

Our Commitment to Data Protection

Nova Blossom is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Australian privacy laws.

Lawful Basis for Processing

We process your personal data based on the following lawful grounds:

• Consent: You have given clear consent for us to process your personal data for specific purposes.
• Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
• Legal obligation: Processing is necessary for us to comply with the law.
• Legitimate interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those legitimate interests.

Your Rights Under GDPR

As a data subject, you have the following rights:

• Right to access: You can request copies of your personal data.
• Right to rectification: You can request that we correct any inaccurate or incomplete information.
• Right to erasure: You can request that we delete your personal data under certain conditions.
• Right to restrict processing: You can request that we restrict the processing of your personal data under certain conditions.
• Right to data portability: You can request that we transfer your data to another organization or directly to you under certain conditions.
• Right to object: You can object to our processing of your personal data under certain conditions.

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When we no longer need your data, we securely delete or anonymize it.

International Data Transfers

Your personal data may be transferred to and processed in countries outside of Australia. When we do so, we ensure that appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

Data Protection Officer

For questions about our data protection practices or to exercise your rights, please contact us at:

Email: [email protected]
Address: 127 Collins Street, Melbourne VIC 3000, Australia

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or your local supervisory authority.