Effective Date: 25 July 2025
Suburb Stack is committed to protecting your data and complying with all applicable data protection and privacy regulations, including:
- General Data Protection Regulation (GDPR) (EU/UK)
- California Consumer Privacy Act (CCPA) (US)
- Australian Privacy Act 1988 (Cth)
- Any other applicable international privacy laws
1. Data Collection
1.1 We only collect the data that is strictly necessary to deliver our services, such as:
- Account and billing information
- Website usage data and analytics
- Client content submitted through our platform
1.2 We do not knowingly collect data from individuals under the age of 18.
2. Data Storage & Security
2.1 All data is securely stored in data centers that meet industry security standards (ISO 27001 or equivalent).
2.2 Data in transit and at rest is encrypted using industry-standard encryption protocols (e.g. AES-256, TLS 1.2/1.3).
2.3 We conduct regular security audits, penetration testing, and employee security training to reduce the risk of data breaches.
3. Data Access, Portability & Deletion
3.1 You may request:
- Access to the personal data we hold about you
- Correction of any inaccuracies
- Deletion of your personal data (“right to be forgotten”)
- A copy of your data in a portable format
3.2 Requests can be submitted at [email protected]. We will respond within the legally required timeframe (usually 30 days).
4. Data Sharing & Third Parties
4.1 We never sell your data to third parties.
4.2 We only share data with vetted sub-processors necessary for service delivery (e.g. hosting providers, payment processors, analytics tools).
4.3 All sub-processors are contractually bound to maintain strict data security and compliance standards.
5. Data Breach Notifications
5.1 In the event of a data breach that may impact your personal data, we will notify affected individuals and relevant authorities as required by law (usually within 72 hours under GDPR).
6. International Data Transfers
6.1 As we serve clients worldwide, your data may be transferred and processed outside your home country.
6.2 Where required by law, we implement appropriate safeguards (e.g. Standard Contractual Clauses) to protect data transferred internationally.
7. Data Retention
7.1 We retain data only for as long as necessary to provide services or meet legal obligations.
7.2 Data associated with cancelled accounts is securely deleted within 90 days unless retention is required for regulatory compliance.
8. Compliance & Contact
We continually review our policies to ensure compliance with evolving regulations.
For any data compliance inquiries, please contact:
Suburb Stack
Email: [email protected]
