GDPR Compliance

Last updated: July 29, 2026

While aura-hollow operates primarily in Australia, we are committed to protecting the privacy rights of all individuals, including those in the European Union. This page outlines how we comply with the General Data Protection Regulation (GDPR) principles.

Data controller

For the purposes of GDPR, aura-hollow acts as the data controller for personal information collected through our website and services.

Contact details:
Email: [email protected]
Address: 127 Brisbane Street, Perth, Western Australia 6000, Australia

Legal basis for processing

We process your personal data under the following legal bases:

• Consent: When you provide explicit consent for specific processing activities, such as receiving marketing communications
• Contractual necessity: When processing is necessary to fulfill our contractual obligations to provide installation and maintenance services
• Legitimate interests: When processing is necessary for our legitimate business interests, such as improving our services, provided these interests do not override your fundamental rights
• Legal obligations: When processing is required to comply with applicable laws and regulations

Your rights under GDPR

If you are located in the European Union or European Economic Area, you have the following rights:

• Right of access: You can request confirmation of whether we process your personal data and obtain a copy of that data
• Right to rectification: You can request correction of inaccurate or incomplete personal data
• Right to erasure: You can request deletion of your personal data in certain circumstances
• Right to restriction: You can request that we limit the processing of your personal data in certain situations
• Right to data portability: You can request to receive your personal data in a structured, commonly used format
• Right to object: You can object to processing of your personal data for direct marketing purposes or based on legitimate interests
• Right to withdraw consent: Where processing is based on consent, you can withdraw that consent at any time
• Right to lodge a complaint: You can file a complaint with a supervisory authority in your jurisdiction

Data transfers

Your personal information is primarily stored and processed in Australia. If we transfer personal data outside of the European Economic Area, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

Data retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Installation and service records: Retained for the duration of warranty periods and as required by electrical safety regulations
• Contact information: Retained until you request deletion or withdraw consent
• Communication records: Retained for up to seven years for business record-keeping purposes

Automated decision-making

We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.

Data security measures

We implement appropriate technical and organizational security measures to protect personal data, including:

• Encryption of data in transit and at rest
• Access controls and authentication requirements
• Regular security assessments and updates
• Employee training on data protection practices
• Incident response procedures for data breaches

Data breach notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach presents a high risk to you, we will also notify you directly without undue delay.

Third-party processors

When we engage third-party service providers who process personal data on our behalf, we ensure they comply with GDPR requirements through appropriate contractual arrangements and security measures.

Children's data

We do not knowingly collect or process personal data from individuals under the age of 16 without parental consent. If you believe we have inadvertently collected such information, please contact us immediately.

Exercising your rights

To exercise any of your GDPR rights or if you have questions about our data processing practices, please contact us at [email protected]. We will respond to your request within one month, though this period may be extended by two additional months for complex requests.

When submitting a request, please provide sufficient information to allow us to verify your identity and locate your personal data. We may request additional information if necessary to confirm your identity.

Updates to this information

We may update this GDPR compliance information periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through our website and, where appropriate, by direct notification.