GDPR Rights & Data Protection

1. Your Data Protection Rights

Under the General Data Protection Regulation (GDPR) and Australian Privacy Act, you have important rights regarding your personal data. Riverstone Budget Solutions is committed to protecting these rights and ensuring full compliance with data protection laws.

2. Right to Access Your Data

You have the right to request copies of your personal data that we hold. This includes:

• Confirmation that we are processing your personal data
• Access to your personal data
• Information about how we use your data
• Information about who we share your data with
• How long we keep your data
• Information about your other rights

3. Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data. This includes:

• Correcting inaccurate personal information
• Completing incomplete personal information
• Updating outdated information
• Correcting information that could affect service delivery

4. Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal data in certain circumstances:

• The data is no longer necessary for the original purpose
• You withdraw consent and there is no other legal basis
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• Erasure is required for compliance with legal obligations

5. Right to Restrict Processing

You can request that we limit how we use your personal data in the following situations:

• You contest the accuracy of the data (during verification period)
• Processing is unlawful but you prefer restriction over deletion
• We no longer need the data but you need it for legal claims
• You have objected to processing (pending verification of legitimate grounds)

When processing is restricted, we will only:

• Store your data
• Process it with your consent
• Process it for legal claims
• Process it to protect another person's rights

6. Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format. This right applies when:

• Processing is based on consent or contract
• Processing is carried out by automated means

7. Right to Object

7.1 General Right to Object

You can object to processing of your personal data based on:

• Legitimate interests
• Performance of public tasks
• Exercise of official authority

7.2 Direct Marketing

You have an absolute right to object to direct marketing, including:

• Marketing emails and newsletters
• Promotional phone calls
• Targeted advertising
• Profiling for marketing purposes

8. Rights Related to Automated Decision-Making

You have rights regarding automated decision-making, including profiling that produces legal effects or significantly affects you:

• Right to human intervention in the decision-making process
• Right to express your point of view
• Right to contest the decision
• Right to obtain an explanation of the decision

Our Practice: We do not use fully automated decision-making systems. All financial advice and recommendations involve human review and consideration.

9. Consent Management

9.1 Withdrawing Consent

Where we rely on your consent to process personal data, you can withdraw consent at any time:

• Marketing communications consent
• Cookie consent
• Data sharing consent
• Special category data consent

9.2 Cookie Consent Management

9.3 Marketing Preferences

10. Data Processing Purposes and Legal Basis

11. Data Retention Periods

12. International Data Transfers

When we transfer your data outside Australia or the EU, we ensure adequate protection through:

• European Commission adequacy decisions
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules where applicable
• Certification schemes and codes of conduct

13. Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify relevant authorities within 72 hours
• Inform affected individuals without undue delay
• Provide clear information about the breach
• Explain the likely consequences
• Describe measures taken to address the breach
• Provide recommendations for protecting yourself

14. Making a Complaint

14.1 Internal Complaints

If you have concerns about how we handle your personal data:

14.2 External Complaints

You also have the right to lodge a complaint with supervisory authorities:

15. Contact Information

16. Quick Action Center