GDPR Compliance

Last updated: July 29, 2026

Our Commitment to Data Protection

While periwinkle-gorge operates primarily in Australia, we recognize that some of our website visitors may be located in the European Union. We are committed to protecting the privacy and personal data of all users in accordance with the General Data Protection Regulation.

Legal Basis for Processing

We process your personal data under the following legal bases:

• Consent: When you submit a form requesting information about our services
• Legitimate interests: To improve our website and services
• Contractual necessity: To fulfill service requests and provide assessments

Data We Collect

When you interact with our website, we may collect:

• Personal identification information (name, email address)
• Service preferences and selections
• Technical data (IP address, browser type, device information)
• Usage data (pages visited, time spent on site)

Your GDPR Rights

If you are located in the EU, you have the following rights regarding your personal data:

• Right to access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request limitation on how we use your data
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing of your data for specific purposes
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Assessment requests are typically retained for 24 months unless you request earlier deletion.

International Data Transfers

Your personal data is primarily stored on servers located in Australia. If your data is transferred outside the EU, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

Data Security

We implement technical and organizational measures to protect your personal data against unauthorized access, loss, or alteration. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Contact and Complaints

To exercise any of your GDPR rights or if you have concerns about how we handle your personal data, please contact us at [email protected].

You also have the right to lodge a complaint with your local data protection authority if you believe we have not complied with applicable data protection laws.

Updates to This Policy

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Material changes will be communicated through our website.