GDPR Compliance

Last Updated: September 10, 2026

General Data Protection Regulation

The General Data Protection Regulation (GDPR) is a European Union regulation governing data protection and privacy. While topaz-snow operates in Australia, we respect the rights of all individuals regardless of location and have implemented practices aligned with GDPR principles.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you provide explicit consent for specific processing activities
• Contract Performance: When processing is necessary to deliver services you've requested
• Legitimate Interests: When we have a legitimate business interest that does not override your privacy rights
• Legal Obligations: When required by applicable law

Your Rights Under GDPR

If you are located in the European Union or European Economic Area, you have specific rights regarding your personal data:

Right of Access

You have the right to request confirmation of whether we process your personal data and to access that data.

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

Under certain circumstances, you may request deletion of your personal data.

Right to Restriction of Processing

You may request that we limit how we use your personal data in specific situations.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.

Right to Object

You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority in your jurisdiction.

Exercising Your Rights

To exercise any of these rights, contact us at [email protected] with "GDPR Request" in the subject line. We will respond to verified requests within one month.

When submitting a request, please provide:

• Your full name
• Email address associated with our services
• Specific right you wish to exercise
• Any relevant details to help us locate your data

Data Protection Officer

For data protection inquiries, contact our designated representative at [email protected]

International Data Transfers

When transferring personal data outside the European Economic Area, we implement appropriate safeguards including:

• Standard contractual clauses approved by the European Commission
• Ensuring recipients are located in countries with adequate data protection
• Other legally approved transfer mechanisms

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Retention periods vary based on:

• The nature of the data
• The purpose of processing
• Legal and regulatory requirements

Security Measures

We implement technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, or damage. These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication
• Regular security assessments
• Staff training on data protection

Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Children's Data

Our services are not directed to children under 16 years of age. We do not knowingly collect or process data from children.

Changes to This Information

We may update this GDPR compliance information periodically. Material changes will be communicated through our website or directly to affected individuals.

Contact Information

For GDPR-related inquiries or to exercise your rights:

Email: [email protected]
Address: 247 Flinders Lane, Melbourne VIC 3000, Australia