Privacy Policy

Gracenote Pty Ltd (ACN 667 820 135) (“Graceview”, “we”, “us”, and/or “our”) is committed to acting with the highest level of integrity in dealing with our customers, investors, employees and other business partners. This Privacy Policy (“Policy”) outlines our data collection, storage, processing, usage and disclosure practices related to your Personal Data. It informs you of the types of Personal Data we gather, the reasons for collecting it, and the legal basis that allows us to do so. This Policy applies to all services provided by us (“Services”), including our website https://graceview.ai and any associated subdomains (“Website”), technology and products, or in the course of other interactions with us, or indirectly from third parties who legally provide your Personal Data to us.

This Policy may be amended or updated occasionally to reflect changes in our practices concerning processing Personal Data or changes in applicable law. Please review this Policy regularly to stay informed about any changes we might make under the terms of this Policy. Your continued use of our Services or Website constitutes your agreement to this Policy, as amended or updated occasionally.

Please note that Graceview collects your Personal Data from the country where you are based and may store it on servers globally, including outside the EU/EEA, where the data protection standards may be lower than in the EU/EEA. In this case, we will use all commercially reasonable efforts to ensure your data is treated securely under this Policy.

1. Personal Data We Process

The categories of Personal Data we may process depend on the nature of your interaction with us and may include the following:

Personal details: Name, gender, date of birth, nationality, tax residency, email address, address, mobile number, social media account;
Corporate details: Company name, registration place and number, transparency register number, articles of association details, shareholders, and/or beneficial owners (including their personal and contact details); and
Technical details: Device and connection information such as IP address, device type, operating system, browser type and settings, language settings, connection times, etc.

The categories of Personal Data we may process depend on the nature of your interaction with us and may include the following:

Personal details: Name, gender, date of birth, nationality, tax residency, email address, address, mobile number, social media account;
Corporate details: Company name, registration place and number, transparency register number, articles of association details, shareholders, and/or beneficial owners (including their personal and contact details); and
Technical details: Device and connection information such as IP address, device type, operating system, browser type and settings, language settings, connection times, etc.

2. Collection of Your Personal Data

We may collect Personal Data about you from:

Direct interaction with you via email, our contact form, telephone, or other communication channels;
Business communication and negotiations;
Publicly available sources, including social media profiles;
Legally permissible third-party sources, like credit reference agencies or law enforcement agencies;
Automated data collection when you visit or use our Website;
Job applications, contracting quotes, partnership proposals, or funding requests;
Subscriptions to our social media accounts.

We may collect Personal Data about you from:

Direct interaction with you via email, our contact form, telephone, or other communication channels;
Business communication and negotiations;
Publicly available sources, including social media profiles;
Legally permissible third-party sources, like credit reference agencies or law enforcement agencies;
Automated data collection when you visit or use our Website;
Job applications, contracting quotes, partnership proposals, or funding requests;
Subscriptions to our social media accounts.

3. Creation of Personal Data

Graceview may create Personal Data about you, such as records of your interactions with us and transaction history details during our relationship.

4. Purposes for Using Your Personal Data

We use your Personal Data to deliver, maintain, and enhance our Services, communicate with you, respond to your inquiries, evaluate job applications, and perform other ordinary business activities.

5. Lawful Basis for Processing Personal Data

We process your Personal Data on the following legal bases, as applicable:

Explicit consent from you for voluntary processing;
Necessary processing concerning a contractual relationship you may enter with us;
The processing required by law;
Processing necessary to protect the vital interests of any individual;
Graceview's legitimate business interests, provided your rights or freedoms do not override these interests.

Explicit consent from you for voluntary processing;
Necessary processing concerning a contractual relationship you may enter with us;
The processing required by law;
Processing necessary to protect the vital interests of any individual;
Graceview's legitimate business interests, provided your rights or freedoms do not override these interests.

Subject to applicable laws, when third-party processors are involved, we ensure necessary agreements are in place for data processing in line with Art. 28 GDPR and appropriate safeguards according to Art. 46 – 49 GDPR. You may request the list of third-party processors with whom we share your Personal Data by emailing privacy@graceview.ai.

6. Processing of Special Categories of Personal Data

Graceview strictly refrains from the collection or processing of your sensitive Personal Data unless:

The processing is mandated or permitted by relevant laws;
The processing is essential for establishing, exercising, or defending legal claims;
Your explicit consent, in compliance with applicable laws, has been secured before processing your Sensitive Personal Data.

The processing is mandated or permitted by relevant laws;
The processing is essential for establishing, exercising, or defending legal claims;
Your explicit consent, in compliance with applicable laws, has been secured before processing your Sensitive Personal Data.

This legal basis is exclusively applicable to entirely voluntary processing; it is not utilised for obligatory or necessary processing in any respect.

7. Consequences of Non-Submission of Your Personal Data

To deliver our services and fulfil our contractual obligations towards you, your Personal Data is crucial. Without this information, Graceview may be unable to provide you with the intended services.

8. Consent and Withdrawal

Consent is always given voluntarily. You have the right to withdraw your consent at any time by contacting us at privacy@graceview.ai. The withdrawal of consent does not impact the lawfulness of processing based on consent before its withdrawal. Post-withdrawal, we will cease to process your Personal Data, including storage. This clause applies solely to voluntary processing - it is not relevant for necessary or obligatory processing.

9. Erasure of Your Personal Data

We will erase your Personal Data when it is no longer required for the purposes mentioned above or if further storage is neither necessary nor permitted by applicable laws. We also commit to erasing your Personal Data upon request unless further storage is legally required.

10. Use of Cookies

Graceview may use Cookies on its Website. Cookies are small pieces of information distributed by websites to your browser to remember past browsing activities. We may use Cookies to identify your browser to optimise our Website’s display, document your visits, and enhance our Website’s efficiency. If applicable, you may reject or manage the setting of Cookies at any time via your browser settings.

11. Use of Third-Party Tools

Graceview incorporates tools from other companies into our Website to enhance our Website and evaluate user behaviour. We may also include content from other websites.

12. Your Data Privacy Rights

Subject to applicable laws, you are entitled to the following rights:

Right of access (Art. 15 GDPR): You have the right to confirm whether your Personal Data is being processed and obtain extensive details about this data.
Right to rectification (Art. 16 GDPR): You can have inaccurate Personal Data rectified promptly.
Right to erasure (Art. 17 GDPR): You can request the immediate erasure of your Personal Data, subject to applicable exemptions.
Right to restriction of processing (Art. 18 GDPR): You can request a temporary cessation of further processing of your Personal Data.
Right to data portability (Art. 20 GDPR): You can receive your Personal Data in a standard, machine-readable format and, if necessary, have it transferred to another data controller.
Right to object (Art. 21 GDPR): You can object to the further processing of your Personal Data under specific circumstances.

Right of access (Art. 15 GDPR): You have the right to confirm whether your Personal Data is being processed and obtain extensive details about this data.
Right to rectification (Art. 16 GDPR): You can have inaccurate Personal Data rectified promptly.
Right to erasure (Art. 17 GDPR): You can request the immediate erasure of your Personal Data, subject to applicable exemptions.
Right to restriction of processing (Art. 18 GDPR): You can request a temporary cessation of further processing of your Personal Data.
Right to data portability (Art. 20 GDPR): You can receive your Personal Data in a standard, machine-readable format and, if necessary, have it transferred to another data controller.
Right to object (Art. 21 GDPR): You can object to the further processing of your Personal Data under specific circumstances.

If you have concerns about how we have handled your Personal Data, you can contact us using the details below. Please include your name, email and a description of your complaint. Our team will acknowledge your complaint and respond within a reasonable period. If you think we have failed to resolve your complaint satisfactorily, we will provide you with information about further steps you can take. You also have the right to contact your local data protection authority.