Last Updated: August 3, 2026
While maroon-basin is an Australian-based company primarily governed by the Australian Privacy Principles, we recognize the importance of the General Data Protection Regulation for any European Union residents who may interact with our services. This statement outlines how we process personal data in accordance with GDPR principles.
We process personal data under the following legal bases:
Under GDPR, you have the following rights regarding your personal data:
You have the right to request copies of your personal data. We may charge a reasonable fee for multiple copies or manifestly unfounded requests.
You have the right to request correction of inaccurate or incomplete personal data we hold about you.
You have the right to request deletion of your personal data under certain conditions, including when data is no longer necessary for the purposes it was collected or when you withdraw consent.
You have the right to request restriction of processing your personal data under certain circumstances, such as when you contest the accuracy of the data.
You have the right to request transfer of your personal data to another organization or directly to you in a structured, commonly used, machine-readable format.
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
We do not use automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.
We implement appropriate technical and organizational measures to ensure data security, including:
As an Australian company, personal data may be transferred to and processed in Australia. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Specific retention periods vary based on data type and purpose.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected individuals and relevant supervisory authorities within 72 hours of becoming aware of the breach, as required by GDPR.
To exercise any of your GDPR rights, please contact us at:
Email: [email protected]
Address: 147 Industrial Drive, Port Melbourne VIC 3207, Australia
We will respond to your request within one month. In complex cases, we may extend this period by two additional months and will inform you of the extension and reasons.
If you are located in the European Union and believe we have not handled your personal data in accordance with GDPR, you have the right to lodge a complaint with your local data protection supervisory authority.
We may update this GDPR compliance statement to reflect changes in our data processing practices or legal requirements. The last updated date will be modified accordingly.