GDPR Compliance

While Thicket-gazelle is based in Australia, we recognize the importance of data protection standards established by the European Union's General Data Protection Regulation (GDPR). We extend similar protections to all clients regardless of location.

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Contractual necessity: to fulfill our service agreements and deliver requested solutions
• Legitimate interests: to improve our services and maintain business records
• Consent: for marketing communications and non-essential data processing
• Legal obligations: to comply with applicable regulations and industry standards

Your Rights Under GDPR

If you are located in the European Economic Area, you have the following rights:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate information
• Right to Erasure: Request deletion of your data under certain conditions
• Right to Restriction: Request limitation of data processing
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Rights Related to Automated Decision-Making: Not be subject to decisions based solely on automated processing

Data Protection Officer

For questions regarding data protection or to exercise your rights, contact our data protection representative at [email protected]. We will respond to requests within 30 days as required by GDPR.

International Data Transfers

Our operations are based in Australia. If we transfer personal data from the European Economic Area to Australia, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR standards.

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant supervisory authorities within 72 hours of becoming aware of the breach, as required by GDPR.

Third-Party Processors

We work with carefully selected service providers who assist in delivering our services. All third-party processors are bound by data processing agreements that comply with GDPR requirements and ensure appropriate technical and organizational security measures.

Consent Withdrawal

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted before withdrawal. Contact us to withdraw consent for specific processing activities.

Supervisory Authority

If you believe our data processing practices violate GDPR, you have the right to lodge a complaint with your local supervisory authority in the European Economic Area or with the Australian Information Commissioner.

Exercising Your Rights

To exercise any of your GDPR rights, send a detailed request to [email protected]. We may request additional information to verify your identity before processing requests that involve access to or deletion of personal data.