GDPR Compliance Statement

Last Updated: September 10, 2026

Introduction

This page outlines how tundra-seal complies with the General Data Protection Regulation (GDPR) for individuals located in the European Union. While we primarily serve Australian clients, we recognize the importance of protecting the privacy rights of all website visitors and service users.

Legal Basis for Processing

We process personal data under the following legal bases as defined by GDPR:

Consent: When you provide explicit permission to process your personal information for specific purposes
Contract Performance: When processing is necessary to deliver the services you have requested
Legitimate Interests: When processing is necessary for our legitimate business operations, provided it does not override your rights
Legal Obligation: When required to comply with applicable laws and regulations

Your GDPR Rights

If you are an EU resident, you have the following rights regarding your personal data:

Right to Access: Request confirmation of whether we process your personal data and obtain a copy of that data
Right to Rectification: Request correction of inaccurate or incomplete personal information
Right to Erasure: Request deletion of your personal data under certain circumstances
Right to Restriction: Request limitation on how we process your personal information
Right to Data Portability: Receive your personal data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests or for direct marketing purposes
Right to Withdraw Consent: Withdraw previously given consent at any time without affecting prior processing legality
Right to Lodge a Complaint: File a complaint with your local data protection authority

Data Controller Information

tundra-seal acts as the data controller for personal information collected through our website and services.

Contact details:
Email: [email protected]
Address: Level 12, 345 George Street, Sydney, NSW 2000, Australia

Data Protection Officer

For GDPR-related inquiries or to exercise your rights, please contact our data protection representative at [email protected] with the subject line "GDPR Request."

International Data Transfers

As we operate from Australia, personal data collected from EU residents may be transferred outside the European Economic Area. We ensure such transfers comply with GDPR requirements through appropriate safeguards, including standard contractual clauses where applicable.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, or resolve disputes. Specific retention periods depend on the type of data and applicable legal requirements.

Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects or significantly affects individuals.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information promptly.

Security Measures

We implement technical and organizational security measures appropriate to the risks associated with processing personal data. These measures include encryption, access controls, and regular security assessments.

Data Breach Notification

In the event of a data breach affecting personal information of EU residents, we will notify affected individuals and relevant supervisory authorities within 72 hours when required by GDPR.

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Material changes will be communicated through our website with an updated effective date.

Exercising Your Rights

To exercise any of your GDPR rights, please submit a written request to [email protected]. We will respond to verified requests within one month, with possible extensions for complex requests as permitted by GDPR.