GDPR Compliance

Last updated: May 22, 2026

Our Commitment to Data Protection

While sparkling-loom operates primarily in Australia, we recognize that some of our website visitors may be located in the European Union. We are committed to complying with the General Data Protection Regulation (GDPR) for all users whose data falls under its scope.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you explicitly agree to provide information for specific purposes
• Contract Performance: When processing is necessary to fulfill service agreements
• Legitimate Interest: When we have a legitimate business reason to process your data that does not override your rights
• Legal Obligation: When required by law to retain or process certain information

Your Rights Under GDPR

If you are an EU resident, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you.

Right to Rectification

You can request correction of inaccurate or incomplete personal data.

Right to Erasure

You can request deletion of your personal data under certain circumstances, including when it is no longer necessary for the purposes it was collected.

Right to Restrict Processing

You can request that we limit how we use your personal data in specific situations.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time.

Data Transfers

If we transfer your personal data outside the European Economic Area, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Adequacy decisions recognizing equivalent data protection standards
• Binding corporate rules for intra-organizational transfers

Data Protection Officer

For questions related to GDPR compliance or to exercise your rights, please contact us at:

Email: [email protected]
Subject line: GDPR Request

Response Timeline

We will respond to your data subject requests within one month of receipt. In complex cases, we may extend this period by an additional two months and will inform you of the extension.

Right to Lodge a Complaint

If you believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority in the EU.

Data Security Measures

We implement technical and organizational measures to ensure data security, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication procedures
• Employee training on data protection practices
• Incident response and breach notification procedures

Data Retention

We retain personal data only as long as necessary for the purposes outlined in our Privacy Policy or as required by law. When data is no longer needed, it is securely deleted or anonymized.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.

Children's Data

We do not knowingly collect or process personal data from children under 16 years of age without parental consent.

Updates to This Statement

We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Material changes will be communicated through our website.

Contact Information

For any questions about our GDPR compliance or to exercise your rights:

Email: [email protected]
Address: 127 Garden Grove Avenue, Brisbane, QLD 4000, Australia