GDPR Compliance

Our Commitment to GDPR

Although quaint-lark is an Australian-based business, we are committed to protecting the privacy of all individuals, including those residing in the European Union (EU) and European Economic Area (EEA). This page outlines how we comply with the General Data Protection Regulation (GDPR) for applicable individuals.

Scope of Application

This GDPR notice applies to you if:

• You are located in the EU or EEA when accessing our services
• You are an EU or EEA citizen regardless of your current location
• You are processing a matter that involves parties in the EU or EEA

Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

• Consent: Where you have given explicit consent for processing
• Contract: Where processing is necessary to fulfil a contract with you or to take steps at your request before entering a contract
• Legal Obligation: Where processing is necessary to comply with legal requirements
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights

Your Rights Under GDPR

If the GDPR applies to you, you have the following rights:

Right to Access

You may request a copy of the personal data we hold about you and information about how we process it.

Right to Rectification

You may request that we correct any inaccurate personal data or complete any incomplete data.

Right to Erasure

In certain circumstances, you may request that we delete your personal data. This right is not absolute and may be limited by legal retention requirements.

Right to Restrict Processing

You may request that we limit how we use your personal data in specific circumstances.

Right to Data Portability

Where technically feasible, you may request to receive your personal data in a structured, commonly used, machine-readable format.

Right to Object

You may object to the processing of your personal data where we rely on legitimate interests as our legal basis.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently engage in fully automated decision-making.

Data Transfers

As an Australian business, any personal data transferred from the EU or EEA to Australia involves an international data transfer. Australia is not currently subject to an EU adequacy decision. To ensure appropriate safeguards, we:

• Implement standard contractual clauses where required
• Apply technical and organisational security measures
• Only transfer data when necessary for the purposes stated

Data Protection Officer

While we are not required to appoint a Data Protection Officer under the GDPR, we have designated a privacy contact who can address your GDPR-related enquiries:

Email: [email protected]

Please include "GDPR Request" in your subject line.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at the email address above. We will respond to your request within one month. If your request is complex or we receive numerous requests, we may extend this period by two months, in which case we will inform you of the extension and the reasons for it.

Complaints

If you believe we have not handled your personal data in accordance with the GDPR, you have the right to lodge a complaint with a supervisory authority in the EU member state of your residence, place of work, or where the alleged infringement occurred.

Updates to This Notice

We may update this GDPR notice periodically. Any changes will be posted on this page with a revised date.