Privacy & Data Protection Notice (UK & EU)

1. Introduction

This Privacy & Data Protection Notice explains how Gallivanter Australia Pty Ltd trading as Biz Secure Online (“Biz Secure Online”, “we”, “us”, “our”) collects, uses, and protects personal data when you visit our UK or EU websites or interact with us online.

We are committed to protecting personal data and complying with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and applicable UK and EU data protection laws.

2. Data Controller

3. Individuals Covered by This Notice

This notice applies to:

• Visitors to our UK and EU marketing websites
• Individuals who contact us via website forms or email
• Individuals who subscribe to marketing communications or download content

4. Personal Data We Collect

We may collect personal data including:

• Contact information (name, email address, phone number)
• Communication content (messages submitted via forms or email)
• Technical information such as IP address, browser type, and pages visited

5. Legal Bases for Processing

We process personal data based on one or more of the following legal bases:

• Consent — where you have given clear consent for us to process your personal data for a specific purpose.
• Legitimate interests — processing is necessary for our legitimate interests (e.g. improving our website and services) provided those interests are not overridden by your rights.
• Pre-contractual steps — processing is necessary to take steps at your request prior to entering into a contract.
• Legal obligations — processing is necessary for compliance with a legal obligation to which we are subject.

6. Use of Personal Data

Personal data is used to:

• Respond to enquiries
• Provide service information
• Improve website performance
• Send marketing communications where consent is given
• Maintain website security

7. Cookies and Analytics

We use cookies and similar technologies to help us understand how visitors use our website and to improve the browsing experience. Tools we use include Google Analytics for website analytics and Cloudflare for security and performance. For full details, see our Cookie Policy.

8. Third-Party Service Providers

We use third-party providers including:

• Google Analytics — website analytics
• Resend — transactional email delivery
• Cloudflare — security and performance
• Bright Data — data collection infrastructure

All providers operate under contractual GDPR safeguards including Standard Contractual Clauses where applicable. For full details, see our Sub-Processor List.

9. International Data Transfers

Personal data is transferred to and processed in Australia. Some providers process specific personal data in other countries, including the United States and, for partner-delivered services, South Africa; each is named on our Sub-Processor List. These transfers are protected by Standard Contractual Clauses and equivalent safeguards to ensure your data receives an adequate level of protection.

10. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected and is deleted securely when no longer required.

11. Your Rights

Under UK GDPR and EU GDPR, you have the following rights:

• Access — the right to request copies of your personal data.
• Rectification — the right to request correction of inaccurate personal data.
• Erasure — the right to request deletion of your personal data.
• Restriction of processing — the right to request that we restrict the processing of your personal data.
• Objection — the right to object to our processing of your personal data.
• Data portability — the right to request that we transfer your data to another organisation or directly to you.
• Withdrawal of consent — where processing is based on consent, the right to withdraw consent at any time.

To exercise any of these rights, please contact us at support@bizsecure.online.

12. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with a supervisory authority:

• UK residents: Information Commissioner's Office (ICO) — ico.org.uk
• EU residents: Your local Data Protection Authority

13. Data Security

We apply appropriate technical and organisational security measures to protect personal data against unauthorised access, alteration, disclosure or destruction.

14. Changes

This policy may be updated periodically. The latest version will always be published on our website. Material changes will be notified via our website and the “Last updated” date will change.