GDPR Compliance Statement

Last updated: May 22, 2026

lively-education is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and applicable data protection laws. This page outlines our approach to data protection and your rights under GDPR.

Our Commitment to Data Protection

We recognize that trust is fundamental to our relationship with clients. We have implemented comprehensive measures to ensure your personal data is processed lawfully, fairly, and transparently in accordance with GDPR requirements.

Legal Basis for Processing

We process your personal data under the following legal bases:

Consent

When you provide explicit consent for specific processing activities, such as receiving marketing communications or newsletters.

Contractual Necessity

Processing necessary to fulfill our service obligations when you engage us for animal care consultations.

Legitimate Interest

Processing necessary for our legitimate business interests, such as improving our services, provided these interests do not override your fundamental rights.

Legal Obligation

Processing required to comply with legal and regulatory obligations.

Your Rights Under GDPR

Under GDPR, you have the following rights regarding your personal data:

Right to Access

You have the right to request access to the personal data we hold about you. We will provide a copy of your data in a commonly used electronic format.

Right to Rectification

You can request correction of inaccurate or incomplete personal data. We will update your information promptly upon verification.

Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data in certain circumstances, such as when:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent and no other legal basis exists
• You object to processing and no overriding legitimate grounds exist
• The data has been unlawfully processed

Right to Restriction of Processing

You can request limitation of processing your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and transmit it to another controller.

Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we can demonstrate compelling legitimate grounds.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal or similarly significant effects. We do not currently engage in automated decision-making.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

How to Exercise Your Rights

To exercise any of these rights, please contact us at:

Email: [email protected]
Subject Line: GDPR Data Request

We will respond to your request within one month of receipt. In complex cases, we may extend this period by two additional months and will inform you of any such extension.

Data Protection Measures

Technical Safeguards

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Secure backup and disaster recovery procedures

Organizational Safeguards

• Data protection training for all staff
• Strict data access policies and procedures
• Confidentiality agreements with employees and service providers
• Regular privacy impact assessments

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations:

• Consultation records: 7 years (professional liability requirements)
• Financial records: As required by Australian tax law
• Marketing communications: Until consent is withdrawn
• Website analytics: 26 months

International Data Transfers

If we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions recognizing equivalent data protection standards
• Binding Corporate Rules for intra-group transfers

Data Breach Notification

In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority within 72 hours of becoming aware
• Notify affected individuals without undue delay if the breach poses a high risk
• Take immediate steps to mitigate the breach and prevent future occurrences

Children's Data

Our services are not directed to individuals under 18 years of age. We do not knowingly collect or process personal data from children. If we become aware that we have collected data from a child, we will delete it immediately.

Third-Party Processors

We work with carefully selected third-party processors who assist us in providing our services. All processors are bound by data processing agreements that require GDPR compliance and implement appropriate security measures.

Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe our processing of your personal data violates GDPR.

For EU residents, you can find your local supervisory authority at:
https://edpb.europa.eu/about-edpb/board/members_en

Updates to This Statement

We may update this GDPR compliance statement from time to time to reflect changes in our practices or legal requirements. Material changes will be communicated through our website and, where appropriate, via email.

Contact Information

For questions about GDPR compliance or data protection:

lively-education
Email: [email protected]
Address: Level 3, Suite 47, 289 Wellington Street, Brisbane QLD 4000, Australia

Return to Home