Last updated: September 2026
Cove Rhythm acts as the data controller for personal information collected through our services and website. We determine how and why personal data is processed.
We process personal data under the following legal grounds:
Under the General Data Protection Regulation, you have the following rights:
You may request confirmation of whether we process your personal data and obtain a copy of that data.
You may request correction of inaccurate personal data or completion of incomplete data.
You may request deletion of your personal data under certain circumstances, including when data is no longer necessary for its original purpose or when you withdraw consent.
You may request restriction of processing in specific situations, such as while verifying data accuracy or during objection proceedings.
You may request to receive your personal data in a structured, commonly used format and transmit it to another controller.
You may object to processing based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
To exercise any of these rights, contact us at [email protected]. We will respond to requests within one month, though this may be extended by two additional months for complex requests.
For questions specifically related to data protection and GDPR compliance, contact our data protection representative at [email protected].
If personal data is transferred outside Australia, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.
If you believe our processing of personal data violates data protection laws, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.
In the event of a data breach that poses risk to your rights and freedoms, we will notify affected individuals and relevant authorities within the timeframes required by law.