Last Updated: September 2, 2026
Prairie-ibex is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Australian privacy laws including the Privacy Act 1988. This page outlines how we comply with these regulations and your rights under them.
We process personal data only when we have a legal basis to do so. Our legal bases include:
When you provide explicit consent for us to process your personal data for specific purposes, such as receiving marketing communications or participating in surveys.
When processing is necessary to fulfill a contract with you or to take steps at your request before entering into a contract, such as providing requested services.
When processing is necessary for our legitimate business interests, provided these interests do not override your fundamental rights and freedoms. This includes website analytics, fraud prevention, and service improvement.
When we must process your data to comply with legal or regulatory requirements.
Under GDPR, you have the following rights regarding your personal data:
You have the right to request confirmation of whether we process your personal data and to obtain a copy of that data along with information about how we use it.
You can request that we correct inaccurate personal data or complete incomplete data we hold about you.
In certain circumstances, you have the right to request deletion of your personal data. This right applies when the data is no longer necessary for the purpose it was collected, you withdraw consent, or the processing is unlawful.
You can request that we limit how we use your data in specific situations, such as when you contest the accuracy of the data or object to processing based on legitimate interests.
You have the right to receive personal data you provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
You can object to processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we have compelling legitimate grounds that override your interests.
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects on you.
To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month, though this period may be extended by two additional months for complex requests.
When submitting a request, please provide:
Prairie-ibex acts as the data controller for personal information collected through our website and services. Our contact details are:
prairie-ibex
Level 14, Tower Two
201 Sussex Street
Sydney NSW 2000
Australia
Email: [email protected]
For questions specifically related to data protection and privacy compliance, you may contact our Data Protection Officer at: [email protected]
When we transfer personal data outside the European Economic Area (EEA) or Australia, we ensure appropriate safeguards are in place, including:
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you and relevant supervisory authorities within 72 hours of becoming aware of the breach, as required by GDPR.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Retention periods vary depending on:
If you believe we have not complied with data protection laws, you have the right to lodge a complaint with a supervisory authority. In Australia, this is the Office of the Australian Information Commissioner (OAIC).
Office of the Australian Information Commissioner
Website: www.oaic.gov.au
Phone: 1300 363 992
Email: [email protected]
For individuals in the EEA, you may also contact your local data protection authority.
We do not knowingly collect or process personal data from individuals under 16 years of age without parental consent. If you believe we have collected data from a child, please contact us immediately.
We may update this GDPR compliance information periodically to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website and via email where appropriate.
For comprehensive details about our data practices, please refer to our Privacy Policy. For information about our use of cookies, see our Cookies Policy.