GDPR Compliance

Last updated: January 2024

Our Commitment to GDPR

Although Frosty Pebble is based in Australia, we are committed to protecting the privacy of all individuals, including those located in the European Union. This page provides additional information about how we comply with the General Data Protection Regulation (GDPR) for EU residents.

Legal Basis for Processing

We process personal data from EU residents under the following legal bases:

• Consent: When you submit an enquiry form or subscribe to our communications, you consent to our processing of your data for specified purposes.
• Contractual necessity: When we need to process your data to provide services you have requested.
• Legitimate interests: When we have a legitimate business interest in processing your data, provided this does not override your rights.
• Legal obligation: When we are required by law to process your data.

Your Rights Under GDPR

If you are a resident of the European Union, you have the following rights regarding your personal data:

Right of Access

You have the right to request a copy of the personal data we hold about you.

Right to Rectification

You have the right to request that we correct any inaccurate personal data we hold about you.

Right to Erasure

You have the right to request that we delete your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw your consent at any time.

International Data Transfers

As Frosty Pebble is based in Australia, any personal data you provide may be transferred to and processed in Australia. Australia is not currently subject to an adequacy decision by the European Commission. However, we implement appropriate safeguards to ensure your data is protected in accordance with GDPR requirements.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. For EU residents, this means:

• Enquiry data: Retained for up to 2 years unless you become a client
• Client data: Retained for the duration of our business relationship plus 7 years for legal and accounting purposes
• Marketing data: Retained until you withdraw consent

Data Protection Officer

For questions about our GDPR compliance or to exercise your rights, please contact us at:

Email: [email protected]
Address: Level 4, 127 Creek Street, Brisbane QLD 4000, Australia

Complaints

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local data protection authority.