GDPR Information

Last Updated: January 2026

This page provides information for users located in the European Economic Area (EEA) and United Kingdom regarding how teal-birch processes personal data in compliance with the General Data Protection Regulation (GDPR).

Data Controller

teal-birch acts as the data controller for personal information collected through our website and services. Our contact details are:

teal-birch
42 Harbour Street
Sydney NSW 2000
Australia
Email: [email protected]

Legal Basis for Processing

We process personal data under the following legal bases as defined by GDPR:

Consent: Where you have provided explicit consent for specific processing activities, such as subscribing to communications
Contract: Processing necessary to fulfil our contractual obligations, such as course bookings and service delivery
Legitimate Interests: Processing necessary for our legitimate business interests, provided these do not override your fundamental rights
Legal Obligation: Processing required to comply with applicable laws and regulations

Categories of Personal Data

We process the following categories of personal data:

Identity data (name)
Contact data (email address, postal address)
Technical data (IP address, browser type, device information)
Usage data (website interaction patterns)
Preference data (dietary requirements, course preferences)

Your Rights Under GDPR

If you are located in the EEA or UK, you have the following rights:

Right of Access: Request a copy of the personal data we hold about you
Right to Rectification: Request correction of inaccurate or incomplete personal data
Right to Erasure: Request deletion of your personal data under certain circumstances
Right to Restrict Processing: Request limitation of how we process your data
Right to Data Portability: Receive your data in a structured, commonly used format
Right to Object: Object to processing based on legitimate interests or for direct marketing
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

International Data Transfers

As we are based in Australia, personal data collected from EEA or UK residents may be transferred to and processed in Australia. Australia has been recognised by the European Commission as providing an adequate level of data protection. Where we engage service providers located in other countries, we ensure appropriate safeguards are in place.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

Booking and transaction records: 7 years for tax and legal compliance
Marketing communications: Until you unsubscribe or request deletion
Website analytics data: 26 months from collection

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

Data Protection Officer

Given our current scale of operations, we have not appointed a Data Protection Officer. For all data protection matters, please contact us directly at [email protected].

Supervisory Authority

If you are located in the EEA or UK and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

Updates to This Information

We may update this GDPR information periodically. Any changes will be posted on this page with an updated revision date.