GDPR Information

Last updated: June 19, 2026

Data protection principles

While our primary operations are based in Australia, we respect the data protection rights of all website visitors, including those from the European Economic Area. We process personal information in accordance with principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, and integrity.

Legal basis for processing

We process personal information based on the following legal grounds:

• Consent: When you submit an inquiry form, you provide explicit consent for us to process your information to respond to your request.
• Legitimate interests: We process technical data from website visits based on our legitimate interest in maintaining website security and improving user experience, balanced against your privacy rights.
• Legal obligation: We retain certain business records to comply with Australian financial and tax reporting requirements.

Your rights under GDPR

If you are located in the European Economic Area, you have the following rights:

• Right of access: You can request confirmation of whether we process your personal data and obtain a copy of that data.
• Right to rectification: You can request correction of inaccurate personal information.
• Right to erasure: You can request deletion of your personal data in certain circumstances.
• Right to restriction: You can request limitation of processing in specific situations.
• Right to data portability: You can request transfer of your data to another controller in a structured, commonly used format.
• Right to object: You can object to processing based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you can withdraw that consent at any time.

Exercising your rights

To exercise any of these rights, contact us at [email protected] with your request. We will respond within one month, though this may be extended by two additional months for complex requests.

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not addressed your concerns appropriately.

International data transfers

Information collected through this website is processed in Australia. If you are located in the EEA, this constitutes a transfer to a country that the European Commission has not determined provides an adequate level of protection. By submitting information through our website, you consent to this transfer.

Data retention periods

We retain inquiry submissions for two years from the date of submission unless an ongoing business relationship develops. Client engagement records are retained for the duration of the relationship plus seven years to meet Australian business records retention requirements.

Automated decision-making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Data controller information

The data controller responsible for your personal information is khaki-dawn, located at Level 3, 142 North Terrace, Adelaide SA 5000, Australia. Contact us at [email protected] regarding data protection matters.