Last Updated: September 2026
This statement outlines how sapphire-crag complies with the General Data Protection Regulation (GDPR) for visitors and clients located in the European Economic Area (EEA) and United Kingdom.
Although headquartered in Australia, we recognise and respect the data protection rights of individuals in the EEA and UK. We have implemented appropriate measures to ensure compliance with GDPR requirements when processing personal data of European residents.
sapphire-crag acts as the data controller for personal information collected through this website and in connection with our services. Our contact details are:
Email: [email protected]
Address: Level 12, 345 George Street, Sydney NSW 2000, Australia
We process personal data of EEA and UK residents only where we have a valid legal basis:
If you are located in the EEA or UK, you have the following rights in relation to your personal data:
Right of Access: You may request a copy of the personal data we hold about you, along with information about how we process it.
Right to Rectification: You may request correction of any inaccurate personal data or completion of incomplete data we hold about you.
Right to Erasure: You may request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restriction: You may request that we restrict processing of your personal data in specific situations, such as while we verify the accuracy of data you have challenged.
Right to Data Portability: You may request to receive your personal data in a structured, commonly used, machine-readable format, and to have it transmitted to another controller where technically feasible.
Right to Object: You may object to processing of your personal data based on our legitimate interests or for direct marketing purposes.
Rights Related to Automated Decision-Making: You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects concerning you.
As we are based in Australia, personal data collected from EEA and UK residents will be transferred outside of those regions. We ensure such transfers are protected by:
You may request information about the specific safeguards in place for transfers of your data.
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. When determining retention periods, we consider the nature of the data, the purposes of processing, and any legal or regulatory requirements.
We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures are designed to ensure a level of security appropriate to the risk.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.
To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month, though this period may be extended by up to two additional months for complex requests.
We may need to verify your identity before processing your request. There is generally no fee for exercising your rights, though we may charge a reasonable fee for manifestly unfounded or excessive requests.
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with a supervisory authority. For EEA residents, this would be the data protection authority in your country of residence. For UK residents, this would be the Information Commissioner's Office (ICO).
We may update this GDPR compliance statement periodically to reflect changes in our practices or legal requirements. Material changes will be communicated through appropriate means.