Your data, explained plainly
Privacy Policy
This policy describes how Expelfresh collects, uses, stores and protects personal information, and the rights you hold over your data.
Last updated today
Expelfresh ("we", "us" or "our") respects your privacy and is committed to protecting the personal information you choose to share with us. This Privacy Policy explains, in plain language, what we collect, the reasons we process it, how long we retain it and the rights available to you. It applies to the website expelfresh.world and to enquiries you send us. Our services consist of general informational content about everyday routines and are not a health, medical, legal or financial service.
1. Who we are
For the purposes of the General Data Protection Regulation (GDPR), comparable data protection frameworks and the Australian Privacy Principles, Expelfresh is the controller responsible for your personal data. The controller decides why and how your information is processed. Our full contact details are listed in the table above and repeated in the Contact section below.
We have written this document so that a reader without a legal background can understand it. Where a term has a specific legal meaning, we have tried to explain it in everyday words alongside.
2. What information we collect
We aim to collect as little as possible. The categories of personal data we may process are:
- Contact details you provide. When you complete our contact form, we receive the name, email address and message you submit, together with your confirmation that you agree to this policy.
- Correspondence. If you reply to our messages or write to us, we keep a record of that exchange so we can respond helpfully and maintain continuity.
- Technical and usage data. With your consent, our analytics cookies may record limited, aggregated information such as the pages visited and the general type of device used. You can decline this through the cookie banner.
We do not ask for, and request that you do not send, sensitive information such as health, medical or financial details. Our work does not require it.
3. Why we use your information
We process personal data only for clear and limited purposes:
- To read and respond to the enquiries you send us.
- To hold a relaxed, informational conversation and, where you wish, to draft a short well-being outline based on the everyday context you describe.
- To maintain accurate records of our correspondence with you.
- To understand, in aggregate, how the website is used so we can improve it, where you have allowed analytics cookies.
- To meet our legal and regulatory obligations.
We do not use your information to make automated decisions that produce legal or similarly significant effects, and we do not sell your personal data to anyone.
4. The legal bases we rely on
Under the GDPR we must have a lawful basis for each processing activity. Depending on the situation, we rely on:
- Consent. When you tick the consent box on our form, or enable optional cookies, you give us permission to process the related data. You may withdraw consent at any time.
- Legitimate interests. We have a legitimate interest in responding to enquiries, keeping reasonable records and maintaining the security of our website, balanced against your rights and freedoms.
- Legal obligation. In limited cases we may need to retain information to comply with applicable laws.
5. How long we keep it
We retain personal data only for as long as it is needed for the purpose we collected it, after which we delete or anonymise it. As a general guide:
- Enquiry and correspondence data: kept for up to twenty-four (24) months after our last contact, unless you ask us to remove it sooner or we are required to keep it longer.
- Analytics data: retained in aggregated form for up to fourteen (14) months.
- Cookie consent records: stored on your device and refreshed periodically so we can honour your choice.
When a retention period ends, we securely erase the relevant records.
6. When we share information
We do not sell, rent or trade your personal data. We may share limited information with trusted service providers who help us operate, such as website hosting or email delivery, and only under agreements that require them to protect your data and use it solely on our instructions. We may also disclose information where the law requires it, for example in response to a valid request from a public authority.
7. How we protect your data
We apply reasonable technical and organisational measures designed to keep personal data secure. These include encryption of data in transit through HTTPS, restricted access on a need-to-know basis, and routine review of the tools we use. While no method of transmission or storage is completely secure, we take care to reduce risk and to respond promptly if an issue arises.
8. Your rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you.
- Rectify information that is inaccurate or incomplete.
- Erase your data where there is no overriding reason to keep it.
- Restrict or object to certain processing.
- Withdraw consent at any time, without affecting processing carried out before withdrawal.
- Data portability, where technically feasible.
- Lodge a complaint with a supervisory authority, such as the Office of the Australian Information Commissioner or your local data protection regulator.
To exercise any of these rights, contact us using the details below. We will respond within the timeframe required by law and may need to verify your identity first.
9. International transfers
Where a service provider stores or processes data outside your region, we take steps to ensure an appropriate level of protection, for example through recognised safeguards and contractual commitments. We only work with providers that maintain suitable data protection standards.
10. Children's privacy
Our website and services are intended for adults. We do not knowingly collect personal data from children. If you believe a child has provided us with information, please contact us and we will take appropriate steps to remove it.
11. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will revise the "last updated" date shown at the top of this page. We encourage you to review it periodically.
12. How to contact us
If you have questions about this policy or wish to exercise your rights, please reach us at:
- Expelfresh
- Cnr Logan & Kessels Rd, Upper Mt Gravatt QLD 4122
- Phone: +61 7 3135 5450
- Email reference: team@expelfresh.world
You are also welcome to use our contact form for general questions.