Last Updated: January 2024
This page provides information about how crimson-pebble handles personal data in accordance with the General Data Protection Regulation (GDPR) for visitors and users from the European Economic Area (EEA) and the United Kingdom.
crimson-pebble acts as the data controller for personal data collected through this website. Our contact details are:
crimson-pebble
42 Commerce Street
Sydney NSW 2000
Australia
Email: [email protected]
We process personal data on the following legal bases:
Where you have given clear consent for us to process your personal data for specific purposes, such as:
Processing necessary for the performance of a contract with you or to take steps at your request before entering into a contract, such as:
Processing necessary for our legitimate interests (or those of a third party), where your interests and fundamental rights do not override those interests, such as:
Processing necessary to comply with legal obligations to which we are subject.
If you are located in the EEA or UK, you have the following rights regarding your personal data:
You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded, repetitive, or excessive.
You have the right to request that we correct any information you believe is inaccurate or incomplete.
You have the right to request that we erase your personal data under certain conditions, including:
You have the right to request that we restrict the processing of your personal data under certain conditions.
You have the right to object to our processing of your personal data under certain conditions, particularly for direct marketing purposes.
You have the right to request that we transfer the data we have collected to another organisation, or directly to you, under certain conditions.
Where we rely on consent as the legal basis for processing, you have the right to withdraw your consent at any time. This does not affect the lawfulness of processing based on consent before its withdrawal.
As we are based in Australia, any personal data you provide may be transferred to and processed in Australia. Australia is not subject to an adequacy decision by the European Commission.
Where we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, which may include:
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.
To determine the appropriate retention period, we consider:
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
We do not currently use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.
Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.
To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month. In complex cases, we may extend this period by two further months, and we will inform you of any extension within the first month.
We may need to verify your identity before processing your request.
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For the UK, this is the Information Commissioner's Office (ICO). For EEA countries, you may contact your local data protection authority.
We may update this GDPR information from time to time. We will notify you of significant changes by updating the "Last Updated" date.
For any questions regarding our GDPR compliance or to exercise your rights, please contact:
Data Protection Contact
crimson-pebble
42 Commerce Street
Sydney NSW 2000
Australia
Email: [email protected]