GDPR Compliance

Our Commitment to GDPR

Although Ash-moose is based in Australia, we are committed to protecting the privacy of all individuals, including those residing in the European Economic Area (EEA). This page outlines our compliance with the General Data Protection Regulation (GDPR) for EEA residents who interact with our services.

Data Controller

For the purposes of GDPR, Ash-moose acts as the data controller for personal information collected through this website. Our contact details are:

Ash-moose
Level 12, 88 Walker Street
North Sydney NSW 2060
Australia
Email: [email protected]

Legal Basis for Processing

We process personal data on the following legal bases:

• Consent: Where you have given explicit consent for specific processing activities, such as receiving marketing communications.
• Contractual Necessity: Processing necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
• Legitimate Interests: Processing necessary for our legitimate interests, provided those interests do not override your fundamental rights and freedoms.
• Legal Obligation: Processing necessary to comply with legal requirements.

Your Rights Under GDPR

If you are a resident of the EEA, you have the following rights regarding your personal data:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data in certain circumstances.
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances.
• Right to Data Portability: You may request to receive your personal data in a structured, commonly used format.
• Right to Object: You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time.

Exercising Your Rights

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month of receipt. In certain cases, we may extend this period by up to two additional months where the request is complex or we receive multiple requests.

We may request specific information from you to confirm your identity before processing your request. This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.

International Data Transfers

As we are based in Australia, personal data collected from EEA residents may be transferred to and processed in Australia. We ensure that such transfers are conducted in compliance with GDPR requirements, including implementing appropriate safeguards such as standard contractual clauses where applicable.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Our retention periods are determined based on:

• The nature and sensitivity of the personal data
• The purposes for which we process the data
• Applicable legal, regulatory, tax, accounting, or other requirements

Data Security

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk associated with processing personal data. These measures include encryption, access controls, and regular security assessments.

Supervisory Authority

If you are a resident of the EEA and believe that our processing of your personal data violates GDPR, you have the right to lodge a complaint with a supervisory authority in your country of residence.

Updates to This Information

We may update this GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.