Last Updated: June 16, 2026
brightroot-maintain is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR). This page explains how we process personal data in accordance with GDPR requirements.
We process your personal data based on the following legal grounds:
Under GDPR, you have the following rights regarding your personal data:
You can request access to the personal data we hold about you. We will provide a copy of your data in a structured, commonly used format.
If your personal data is inaccurate or incomplete, you have the right to request correction or completion.
You can request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw consent.
You can request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, machine-readable format and to transmit it to another controller.
You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Where processing is based on consent, you can withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
For questions regarding data protection or to exercise your GDPR rights, please contact us at:
We process personal data for the following purposes:
Your personal data is primarily processed and stored within Australia. If data is transferred outside Australia, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR standards.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. When data is no longer needed, it is securely deleted or anonymized.
We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.
We may update this GDPR statement to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.