Last updated: September 2026
About GDPR
The General Data Protection Regulation (GDPR) is a European Union regulation that governs data protection and privacy. Although Dawn-ferret is based in Australia, we are committed to complying with GDPR requirements for individuals located in the European Economic Area (EEA) who interact with our website or services.
Data Controller
Dawn-ferret acts as the data controller for personal information collected through this website. Our contact details are:
Dawn-ferret
Level 3, 42 Collins Street
Melbourne VIC 3000
Australia
[email protected]
Lawful Basis for Processing
We process personal data under the following lawful bases as defined by GDPR:
Consent (Article 6(1)(a))
When you submit a contact form or sign up for communications, you provide explicit consent for us to process your data for the stated purposes. You may withdraw consent at any time by contacting us.
Contractual Necessity (Article 6(1)(b))
When you engage our architectural services, processing your personal data is necessary to fulfil our contractual obligations to you.
Legitimate Interests (Article 6(1)(f))
We may process data for our legitimate business interests, such as improving our website and services, provided these interests do not override your fundamental rights and freedoms.
Your Rights Under GDPR
If you are located in the EEA, you have the following rights regarding your personal data:
Right of Access (Article 15)
You have the right to obtain confirmation of whether we process your personal data and to receive a copy of that data.
Right to Rectification (Article 16)
You may request that we correct any inaccurate personal data or complete incomplete data.
Right to Erasure (Article 17)
Also known as the right to be forgotten, you may request deletion of your personal data in certain circumstances.
Right to Restriction of Processing (Article 18)
You may request that we restrict the processing of your data in certain situations.
Right to Data Portability (Article 20)
You have the right to receive your personal data in a structured, commonly used, machine-readable format.
Right to Object (Article 21)
You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision Making (Article 22)
You have the right not to be subject to decisions based solely on automated processing that significantly affect you. We do not currently use automated decision-making.
International Data Transfers
As we are based in Australia, personal data collected from EEA residents may be transferred outside the EEA. Australia has been granted an adequacy decision by the European Commission, meaning Australian privacy laws provide an adequate level of data protection. We also implement appropriate safeguards for any other international transfers.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods are outlined in our Privacy Policy. When data is no longer required, it is securely deleted or anonymised.
Data Security
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security assessments.
Data Breach Notification
In the event of a personal data breach likely to result in high risk to individuals' rights and freedoms, we will notify affected individuals and relevant supervisory authorities as required by GDPR within 72 hours of becoming aware of the breach.
Exercising Your Rights
To exercise any of your GDPR rights, please contact us using the details provided above. We will respond to your request within one month. If your request is complex or numerous, we may extend this period by a further two months, but we will inform you of any extension within the first month.
Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would be the data protection authority in your country of residence.
Updates to This Policy
We may update this GDPR compliance statement periodically. We will notify you of material changes by posting the updated policy on this page with a new effective date.