GDPR Compliance

General Data Protection Regulation

While our primary operations are in Australia, we recognize the importance of data protection standards established by the General Data Protection Regulation for any European Union residents who may interact with our services.

Legal Basis for Processing

We process personal data on the following legal bases:

• Consent: Where you have explicitly agreed to our processing of your personal data for specific purposes
• Contract: Where processing is necessary to fulfill a contract or service agreement with you
• Legal Obligation: Where we must process data to comply with legal requirements
• Legitimate Interest: Where processing serves our legitimate business interests and does not override your rights

Your Rights Under GDPR

If GDPR applies to you, you have the following rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You may request correction of inaccurate personal data or completion of incomplete data.

Right to Erasure

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restriction of Processing

You may request that we limit how we use your personal data in specific situations.

Right to Data Portability

You may request to receive your personal data in a structured, commonly used format and have it transmitted to another controller.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Data Processing Activities

We process personal data for the following purposes:

• Providing financial management services as requested
• Communicating with clients and responding to inquiries
• Maintaining records required under Australian financial services regulations
• Improving our services and website functionality
• Complying with legal and regulatory obligations

Data Transfers

Personal data is primarily stored and processed in Australia. If data is transferred outside Australia or the European Economic Area, we ensure appropriate safeguards are in place to protect your data in accordance with applicable regulations.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the nature of our relationship with you.

Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.

Data Protection Officer

For questions about data protection or to exercise your rights, contact us at info@nimble-seed.com. We will respond to requests within the timeframes required by applicable law.

Supervisory Authority

If you believe our processing of your personal data violates data protection laws, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Updates will be posted on this page with a revision date.