GDPR Compliance

Shadow Gleam respects the privacy rights of individuals in the European Union and European Economic Area. This page outlines how we comply with the General Data Protection Regulation (GDPR) when processing personal data of EU residents.

Data Controller

Shadow Gleam Pty Ltd acts as the data controller for personal information collected through this website. Our registered address is:

147 Design Avenue
South Melbourne VIC 3205
Australia

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you submit enquiry forms or subscribe to communications
• Contractual Necessity: When processing is required to deliver services you have requested
• Legitimate Interests: For business operations, security, and service improvement
• Legal Obligation: When required to comply with applicable laws

Your GDPR Rights

As an EU resident, you have the following rights regarding your personal data:

Right to Access

You may request a copy of the personal data we hold about you, along with information about how we process it.

Right to Rectification

You may request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You may request that we limit how we use your personal data while we address your concerns about its accuracy or our processing activities.

Right to Data Portability

You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.

Right to Object

You may object to our processing of your personal data for direct marketing purposes or based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

International Data Transfers

As an Australian company, your personal data may be transferred to and processed in Australia. When we transfer data from the EU, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Assessment of the destination country's data protection adequacy
• Implementation of supplementary security measures where necessary

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, typically:

• Enquiry data: 2 years from last contact
• Client project data: 7 years after project completion
• Marketing data: Until consent is withdrawn

Data Protection Officer

For GDPR-related enquiries, please contact our designated privacy representative:

Email: [email protected]

Complaints

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority. For EU residents, this would be the data protection authority in your country of residence.

Exercising Your Rights

To exercise any of your GDPR rights, please submit a request to [email protected]. We will respond within 30 days and may request verification of your identity before processing your request.