Last updated: August 2026
Introduction
The General Data Protection Regulation (GDPR) is a European Union regulation that governs how personal data of EU residents must be handled. Although root-quail is based in Australia, we are committed to meeting GDPR standards for all users, regardless of location.
Data Controller
root-quail acts as the data controller for personal information collected through our website and services. This means we determine the purposes and means of processing your personal data.
Contact details:
Email: [email protected]
Address: Level 12, 45 Collins Street, Melbourne VIC 3000, Australia
Lawful Basis for Processing
We process personal data under the following lawful bases:
- Consent: When you voluntarily provide information through enquiry forms or subscribe to communications
- Contract: When processing is necessary to fulfil our obligations under a course enrolment agreement
- Legitimate Interests: When processing is necessary for our legitimate business interests, such as improving our services or preventing fraud
- Legal Obligation: When we must process data to comply with applicable laws
Your Rights Under GDPR
If you are an EU resident, you have the following rights:
Right of Access
You may request a copy of the personal data we hold about you. We will respond within one month of receiving your request.
Right to Rectification
You may request correction of any inaccurate or incomplete personal data we hold about you.
Right to Erasure
You may request deletion of your personal data where there is no compelling reason for its continued processing. This right does not apply where we have a legal obligation to retain data.
Right to Restrict Processing
You may request that we limit how we use your data while we verify its accuracy or consider objections you have raised.
Right to Data Portability
You may request that we provide your personal data in a structured, commonly used, machine-readable format so you can transfer it to another controller.
Right to Object
You may object to processing based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision Making
You have the right not to be subject to decisions based solely on automated processing that significantly affect you.
How to Exercise Your Rights
To exercise any of these rights, please contact us at [email protected] with your request. We may need to verify your identity before processing your request.
We will respond to all legitimate requests within one month. If your request is particularly complex, we may extend this period by up to two additional months, and we will inform you of any such extension.
International Data Transfers
When we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly.
Complaints
If you believe we have not handled your data in accordance with GDPR, you have the right to lodge a complaint with a supervisory authority in your country of residence.
Updates to This Notice
We may update this GDPR notice from time to time. Changes will be posted on this page with an updated revision date.