GDPR Information

Last updated: October 2026

The General Data Protection Regulation (GDPR) provides data protection rights to individuals in the European Economic Area (EEA). Although Gorge-badger operates primarily in Australia, we are committed to upholding strong data protection standards for all users, including those who may be visiting from the EEA.

Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you. This includes information about why we process your data, what categories of data we hold, who we share it with, and how long we retain it.

Right to Rectification

You have the right to request that we correct any inaccurate personal data or complete any incomplete data we hold about you.

Right to Erasure

Also known as the "right to be forgotten," you may request that we delete your personal data when:

• The data is no longer necessary for the purposes it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed
• Erasure is required for compliance with a legal obligation

Right to Restriction of Processing

You may request that we restrict the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or when you object to processing pending verification of legitimate grounds.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance.

Right to Object

You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds that override your interests.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you. We do not currently use automated decision-making systems that would fall under this provision.

Legal Basis for Processing

When processing personal data of EEA residents, we rely on the following legal bases:

• Contract: Processing necessary to perform a contract with you or take steps at your request before entering into a contract
• Legitimate Interests: Processing necessary for our legitimate business interests, provided these do not override your rights and freedoms
• Consent: Processing based on your specific, informed consent, which you may withdraw at any time
• Legal Obligation: Processing necessary to comply with applicable laws

International Data Transfers

As Gorge-badger is based in Australia, any personal data you provide may be transferred to and processed in Australia. Australia is not currently subject to an adequacy decision by the European Commission.

When we transfer data from the EEA to Australia, we implement appropriate safeguards to protect your personal data, including standard contractual clauses approved by the European Commission where applicable.

Data Protection Officer

Given the scale and nature of our operations, we have not appointed a formal Data Protection Officer. However, all data protection enquiries and rights requests should be directed to our contact details below.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us with your request. We will respond to your request within one month, although this period may be extended by two further months where necessary, considering the complexity and number of requests.

We may need to verify your identity before processing your request to ensure we are providing personal data to the correct individual.

Complaints

If you are an EEA resident and believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or the place of the alleged infringement.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Retention periods may vary depending on the context of processing and our legal obligations.

Contact Information

For any GDPR-related enquiries or to exercise your rights, please contact us:

• Email: [email protected]
• Address: 42 Workshop Lane, Melbourne VIC 3000, Australia

We take data protection seriously and will endeavour to address your concerns promptly and thoroughly.