GDPR Compliance

Last updated: June 23, 2026

Our Commitment to Data Protection

While leaf wolf operates primarily in Australia, we recognize that some visitors and clients may be located in the European Union or United Kingdom. We respect the data protection principles established by the General Data Protection Regulation.

Legal Basis for Processing

When you submit information through our website forms, we process your personal data based on your consent and our legitimate interest in responding to business inquiries.

For clients with whom we have established consulting relationships, we process data as necessary for contract performance and compliance with legal obligations.

Data Processing Activities

We collect and process the following categories of personal data:

  • Contact information: name, email address, organization details
  • Communication content: inquiry details, project requirements, correspondence
  • Technical data: IP addresses, browser information, access timestamps

All processing activities are documented and reviewed regularly to ensure compliance with data protection principles.

International Data Transfers

Information collected through our website is stored on servers located in Australia. We do not routinely transfer personal data outside Australia except when necessary to communicate with EU-based clients or partners.

When international transfers occur, we implement appropriate safeguards to protect your information in accordance with data protection requirements.

Your Rights Under GDPR

If you are located in the EU or UK, you have the following rights regarding your personal data:

  • Right of Access: Request confirmation of what personal data we hold about you and receive a copy
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data under certain circumstances
  • Right to Restriction: Request limitation of processing activities
  • Right to Data Portability: Receive your data in a structured, commonly used format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw previously given consent at any time

Exercising Your Rights

To exercise any of these rights, contact us at [email protected] with your request. We will respond within one month of receiving a valid request.

We may require additional information to verify your identity before processing requests that involve access to or deletion of personal data.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal retention requirements.

Inquiry data from individuals who do not become clients is typically retained for two years. Client data is retained for seven years following completion of engagements to meet professional and legal obligations.

Automated Decision-Making

We do not use automated decision-making or profiling systems that produce legal or similarly significant effects.

Data Protection Officer

For data protection inquiries or to exercise your rights, contact our data protection representative at [email protected].

Supervisory Authority

If you are located in the EU or UK and believe we have not addressed your data protection concerns adequately, you have the right to lodge a complaint with your local supervisory authority.