GDPR Compliance

This page explains how we comply with the General Data Protection Regulation (GDPR) and your rights regarding your personal data.

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you submit a service request form, you consent to us processing your information to respond to your inquiry
• Legitimate interests: We process certain data to improve our services and prevent fraud
• Legal obligation: We may process data to comply with legal requirements

Your GDPR Rights

Right to Access

You can request a copy of the personal data we hold about you. We will provide this information in a commonly used electronic format within 30 days of your request.

Right to Rectification

If your personal information is inaccurate or incomplete, you have the right to request correction.

Right to Erasure

You can request deletion of your personal data when it is no longer necessary for the purposes it was collected, or when you withdraw consent.

Right to Restrict Processing

You can request that we limit how we use your personal data in certain circumstances, such as when you contest the accuracy of the data.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you can withdraw that consent at any time. This does not affect the lawfulness of processing before withdrawal.

Right to Lodge a Complaint

If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority.

Data Controller

The data controller responsible for your personal information is:

noble-atoll
127 Garden Grove Avenue
Sydney, NSW 2000
Australia
Email: [email protected]

Data Processing Activities

We process the following categories of personal data:

• Contact information (name, email address)
• Service preferences and inquiries
• Technical data (IP address, browser information)
• Cookie data (preferences and usage information)

Data Recipients

Your personal data may be shared with:

• Email service providers for communication purposes
• Website hosting providers
• Analytics providers (with anonymized data where possible)

International Data Transfers

Your data is primarily processed and stored within Australia. If data is transferred internationally, we ensure appropriate safeguards are in place as required by GDPR.

Data Retention Periods

We retain personal data only as long as necessary:

• Service inquiry data: 24 months from last contact
• Cookie consent records: 12 months
• Website analytics data: 26 months (anonymized)

Exercising Your Rights

To exercise any of your GDPR rights, send an email to [email protected] with the subject line "GDPR Request". Include details of which right you wish to exercise.

We will respond to your request within 30 days. In complex cases, we may extend this period by an additional 60 days with notification.

Updates to This Information

We may update this GDPR information to reflect changes in our practices or legal requirements. Check this page periodically for updates.