GDPR Compliance

Last updated: 1 January 2024

1. Introduction

This page provides additional information for visitors from the European Union (EU) and European Economic Area (EEA) regarding their rights under the General Data Protection Regulation (GDPR).

Sequoia Forge Pty Ltd acts as the data controller for personal information collected through our website and services. While we are an Australian company, we are committed to respecting the data protection rights of all individuals, including those protected under the GDPR.

2. Legal Basis for Processing

We process personal data of EU/EEA residents on the following legal bases:

  • Consent: Where you have given us explicit consent to process your data for specific purposes, such as marketing communications.
  • Contract: Where processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
  • Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these are not overridden by your rights and interests.
  • Legal Obligation: Where processing is necessary to comply with our legal obligations.

3. Your GDPR Rights

If you are an EU/EEA resident, you have the following rights under the GDPR:

3.1 Right of Access

You have the right to request a copy of the personal data we hold about you and to verify that we are processing it lawfully.

3.2 Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

3.3 Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

3.4 Right to Restrict Processing

You have the right to request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data.

3.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.

3.6 Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

3.7 Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

4. International Data Transfers

As we are based in Australia, any personal data you provide to us will be transferred to and processed in Australia. Australia has been recognised by the European Commission as providing an adequate level of data protection.

Where we use third-party service providers that may process data outside Australia or the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or the service provider's participation in recognised data protection frameworks.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

  • Project records: 7 years after project completion (for warranty and legal purposes)
  • Quote requests (no contract): 2 years
  • Marketing contacts: Until you withdraw consent
  • Website analytics: 26 months

6. Exercising Your Rights

To exercise any of your GDPR rights, please contact us using the details below. We will respond to your request within one month. In complex cases, we may extend this period by up to two additional months, but we will inform you of any extension within the first month.

We may request proof of identity before processing your request to ensure we are providing information to the correct person.

7. Complaints

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority. For EU/EEA residents, this would be the data protection authority in your country of residence.

We encourage you to contact us first so we can address your concerns directly.

8. Contact Information

For any GDPR-related enquiries or to exercise your rights:

Data Protection Contact
Sequoia Forge Pty Ltd
142 Crown Street
Surry Hills NSW 2010
Australia
Email: [email protected]