This page is for people in the European Economic Area and the United Kingdom. It explains your rights under the General Data Protection Regulation and the UK GDPR, and how they apply to the Engado website and application. It sits alongside our Privacy Policy, which has the full detail of what we collect and why.

Who is responsible for your data

The data controller is Engado Pty Ltd (ACN 630 792 040), Unit 1B, 185 The Entrance Road, Erina NSW 2250, Australia. You can reach us about data protection at privacy@engado.com.

Our legal bases for processing

We only process your personal data where we have a lawful basis to do so:

  • Consent, for example when you subscribe to our newsletter. You can withdraw consent at any time.
  • Contract, to provide the Engado service you have signed up for.
  • Legitimate interests, to secure and improve our platform and to respond to you, where those interests are not overridden by your rights.
  • Legal obligation, where we are required to process data to comply with the law.

Your rights

Under the GDPR and UK GDPR, where applicable, you have the right to:

  • Access the personal data we hold about you.
  • Rectify data that is inaccurate or incomplete.
  • Erase your data in certain circumstances (the "right to be forgotten").
  • Restrict our processing of your data in certain circumstances.
  • Object to processing based on our legitimate interests, and to direct marketing at any time.
  • Data portability, to receive certain personal data in a portable format or have it sent to another provider where applicable and technically feasible.
  • Withdraw consent at any time, without affecting processing already carried out.
  • Not be subject to decisions based solely on automated processing that produce legal or similarly significant effects. Engado does not make such decisions about you.

How to exercise your rights

Email privacy@engado.com and tell us which right you want to exercise. We may need to verify your identity before we act. We will generally respond within one month, as required by applicable law, and we will tell you if we need an extension for a complex request. Exercising these rights is free unless a request is manifestly unfounded or excessive.

International transfers

Engado is operated from Australia, and some of our service providers may process or store personal data outside the EEA and UK, including in Australia and the United States. More information about the service providers we use and how we handle personal information is available in our Privacy Policy.

How long we keep your data

We keep personal data only as long as necessary for the purposes described in our Privacy Policy, after which we delete or anonymise it.

Your right to complain

We would like the chance to resolve any concern first, so please contact us. You also have the right to lodge a complaint with a supervisory authority. In the UK that is the Information Commissioner's Office (ICO). In the EEA it is the data protection authority in your country.

Contact us

For any GDPR request or question, contact privacy@engado.com or use our contact page.