GDPR Compliance Statement

Last Updated: November 3, 2026

Although Fuchsia-spire is based in Australia, we recognize and respect the data protection rights of individuals in the European Union under the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR principles when processing personal data of EU residents.

Data Controller Information

Fuchsia-spire acts as the data controller for personal information collected through our website and services. Contact details:

Email: [email protected]
Address: Level 12, 485 La Trobe Street, Melbourne VIC 3000, Australia

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you provide explicit consent for specific processing activities
• Contract Performance: When processing is necessary to fulfill our service obligations
• Legitimate Interests: For improving our services and website functionality
• Legal Obligations: When required by applicable laws and regulations

Your Rights Under GDPR

If you are an EU resident, you have the following rights regarding your personal data:

• Right to Access: Request confirmation of what personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restriction: Request limitation of processing in specific situations
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw previously given consent at any time

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Service delivery and customer relationship management
• Compliance with legal and regulatory requirements
• Resolution of disputes and enforcement of agreements

When data is no longer required, we securely delete or anonymize it in accordance with our retention policies.

Data Transfers

As an Australian-based organization, personal data may be transferred and stored outside the EU. We ensure appropriate safeguards are in place for such transfers, including:

• Standard contractual clauses approved by the European Commission
• Assessment of the adequacy of data protection in the recipient country
• Technical and organizational security measures

Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or alteration. These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication requirements
• Regular security assessments and updates
• Employee training on data protection

Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant supervisory authorities within 72 hours of becoming aware of the breach, in compliance with GDPR requirements.

Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete such information.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month and provide the requested information free of charge, unless the request is manifestly unfounded or excessive.

Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local supervisory authority in the EU.

Updates to This Statement

We may update this GDPR compliance statement periodically to reflect changes in our practices or legal requirements. Significant changes will be communicated through our website.