Last Updated: June 16, 2026
dune-ibis is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR), even though we operate in Australia. We apply GDPR principles to all personal data we process.
We process your personal data under the following legal bases:
You have the right to request copies of your personal data. We may charge a reasonable fee for additional copies.
You have the right to request correction of inaccurate or incomplete personal data.
You have the right to request deletion of your personal data under certain conditions.
You have the right to request that we restrict processing of your personal data under certain circumstances.
You have the right to request transfer of your data to another organisation or directly to you in a structured, commonly used format.
You have the right to object to our processing of your personal data under certain conditions.
We do not use automated decision-making or profiling in our processing of your personal data.
For any questions regarding data protection or to exercise your rights, contact us at:
Email: [email protected]
Address: 127 Bourke Street, Melbourne VIC 3000, Australia
In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and relevant supervisory authorities within 72 hours of becoming aware of the breach.
We do not transfer personal data outside of Australia. Should this change, we will ensure appropriate safeguards are in place and inform you accordingly.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. When data is no longer needed, we securely delete or anonymise it.
Our services are not directed to individuals under 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.
To exercise any of your GDPR rights, please contact us using the details provided above. We will respond to your request within one month. If your request is complex, we may extend this period by two additional months and will inform you of any such extension.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.
We may update this GDPR compliance statement from time to time. Any changes will be posted on this page with an updated revision date.