GDPR Compliance Statement

Last updated: May 20, 2026

Our Commitment

While crimson-storm is based in Australia, we recognize the importance of data protection for all individuals, including those in the European Union. We are committed to handling personal data in accordance with the principles set forth in the General Data Protection Regulation (GDPR).

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you provide explicit consent for us to process your data
• Contract: When processing is necessary to fulfill our service obligations
• Legitimate Interests: For business operations that do not override your rights
• Legal Obligation: When required by law

Your GDPR Rights

If you are located in the EU, you have the following rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate information
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where we rely on consent

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in our Privacy Policy or as required by law. Project-related data is typically retained for seven years following project completion to comply with Australian business record-keeping requirements.

International Data Transfers

As we are based in Australia, your data may be transferred outside the EU. We ensure appropriate safeguards are in place for such transfers in accordance with GDPR requirements.

Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer at:

Email: [email protected]

Supervisory Authority

If you are located in the EU and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Contact Us

For any questions about our GDPR compliance or to exercise your rights, please contact us at:

Email: [email protected]
Address: Level 3, 142 Flinders Street, Melbourne VIC 3000, Australia