We use cookies to enhance your browsing experience and analyze site traffic. By clicking "Accept", you consent to our use of cookies.

Cloud-trail
Home About Experiences Contact This content is promotional in nature

GDPR Compliance Statement

Last Updated: November 2, 2026

Our Commitment to Data Protection

Cloud-trail is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Australian privacy laws. This statement outlines how we handle your personal information and your rights under GDPR.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Consent: When you provide explicit consent for specific processing activities
  • Contract Performance: When processing is necessary to fulfill our contractual obligations to you
  • Legitimate Interests: When processing is necessary for our legitimate business interests, provided these do not override your fundamental rights
  • Legal Obligation: When processing is required to comply with applicable laws

Your Rights Under GDPR

Right to Access

You have the right to request access to the personal data we hold about you. We will provide you with a copy of your data in a commonly used electronic format.

Right to Rectification

If you believe any information we hold about you is inaccurate or incomplete, you have the right to request correction.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances, including:

  • The data is no longer necessary for the purposes it was collected
  • You withdraw consent and there is no other legal basis for processing
  • You object to processing and there are no overriding legitimate grounds
  • The data was unlawfully processed

Right to Restrict Processing

You have the right to request restriction of processing in certain situations, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

  • Enrollment and participant records: 7 years after program completion
  • Communication records: 3 years from last contact
  • Website analytics data: 26 months
  • Marketing consent records: Until consent is withdrawn

Data Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of data in transit and at rest
  • Access controls and authentication mechanisms
  • Regular security assessments and updates
  • Staff training on data protection principles
  • Incident response procedures

International Data Transfers

We primarily process data within Australia. If we transfer personal data outside of Australia or the European Economic Area, we ensure appropriate safeguards are in place, such as standard contractual clauses or adequacy decisions.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.

Data Protection Officer

For questions about data protection or to exercise your rights, please contact us at:

Email: [email protected]
Address: 127 Bourke Street, Melbourne VIC 3000, Australia

Exercising Your Rights

To exercise any of your rights under GDPR, please submit a written request to the contact information provided above. We will respond to your request within one month, though this may be extended by two additional months in complex cases.

We may request additional information to verify your identity before processing your request.

Updates to This Statement

We may update this GDPR compliance statement periodically to reflect changes in our practices or applicable regulations. Please review this page regularly for updates.

Cloud-trail

Reconnecting people with the art and practice of cooking through immersive, technique-focused experiences.

Quick Links

  • About Us
  • Experiences
  • Contact

Legal

  • Privacy Policy
  • GDPR
  • Cookies Policy
  • Terms of Use

Contact

[email protected]

© 2026 Cloud-trail. All rights reserved.