Last Updated: June 17, 2026
This document explains how periwinkle-moor complies with the General Data Protection Regulation (GDPR) and outlines your rights regarding the personal data we process.
periwinkle-moor is the data controller responsible for processing your personal data. You can contact us at:
Email: [email protected]
Address: Unit 7, Industrial Estate, 142 Workshop Boulevard, Melbourne VIC 3000, Australia
We process your personal data based on the following legal grounds:
As a data subject, you have the following rights:
You have the right to request access to the personal data we hold about you. We will provide you with a copy of your data in a structured, commonly used, and machine-readable format.
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request correction or completion of that information.
You have the right to request deletion of your personal data in certain circumstances, including:
You have the right to request restriction of processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to processing.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
To exercise any of your GDPR rights, please contact us at [email protected] with your request. We will respond to your request within one month of receipt. In complex cases, we may extend this period by an additional two months, in which case we will inform you of the extension.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you without undue delay. We will also notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where applicable.
If we transfer your personal data outside the European Economic Area (EEA), we will ensure appropriate safeguards are in place, such as:
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Our retention periods are based on:
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without parental consent, we will take steps to delete that information.
We do not engage in automated decision-making or profiling that produces legal effects or similarly significantly affects you.
If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local supervisory authority. However, we encourage you to contact us first so we can address your concerns.
We may update this GDPR compliance statement from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically.
For more information about how we process your data, please refer to our Privacy Policy.