GDPR Compliance Statement

Last Updated: June 2024

Our Commitment to Data Protection

While thicket-serval operates primarily in Australia, we recognize that some of our website visitors and clients may be located in the European Union. We are committed to protecting personal data in accordance with the General Data Protection Regulation (GDPR).

Legal Basis for Processing

We process personal data only when we have a legal basis to do so. Our legal bases include:

Consent: When you have given explicit consent for us to process your personal data for specific purposes
Contract: When processing is necessary to perform a contract with you or take steps before entering into a contract
Legal Obligation: When we must process your data to comply with legal requirements
Legitimate Interests: When processing is necessary for our legitimate business interests, provided these do not override your rights

Your Rights Under GDPR

If you are located in the EU, you have the following rights:

Right to Access: Request a copy of the personal data we hold about you
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data under certain circumstances
Right to Restrict Processing: Request that we limit how we use your data
Right to Data Portability: Receive your data in a structured, commonly used format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

Data Transfers

Our primary operations are based in Australia. If you are located in the EU and provide us with personal data, please be aware that your information may be transferred to and processed in Australia.

Australia has been recognized by the European Commission as providing adequate protection for personal data, ensuring your information receives appropriate safeguards.

Data Protection Officer

For questions regarding data protection or to exercise your GDPR rights, please contact us at:

Email: [email protected]
Address: Level 12, 385 Collins Street, Melbourne VIC 3000, Australia

Complaints

If you are located in the EU and believe we have not handled your personal data appropriately, you have the right to lodge a complaint with your local data protection authority.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements.

Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

Encryption of data in transit and at rest
Regular security assessments
Access controls and authentication requirements
Staff training on data protection principles

Updates to This Statement

We may update this GDPR compliance statement from time to time. Significant changes will be communicated through our website.