Information for European Union visitors
Last Updated: 1 September 2026
The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. Although petal-ocelot is based in Australia, we are committed to complying with GDPR requirements when processing the personal data of EU residents.
petal-ocelot acts as the data controller for personal information collected through our website and services. Our contact details are:
petal-ocelot
142 Harbour Street
Sydney, NSW 2000
Australia
Email: [email protected]
Under GDPR, we must have a valid legal basis to process your personal data. We rely on the following legal bases:
As an EU resident, you have the following rights under GDPR:
You have the right to obtain confirmation as to whether personal data concerning you is being processed, and access to that data along with information about how it is used.
You have the right to have inaccurate personal data corrected and incomplete data completed.
Also known as the "right to be forgotten," you may request deletion of your personal data under certain circumstances, including when the data is no longer necessary for the purpose it was collected.
You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of the data.
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You have the right to object to processing based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing that produce legal effects or similarly significant effects.
As an Australian company, data transferred to us from the EU constitutes an international transfer. We ensure that appropriate safeguards are in place to protect your data during such transfers, including:
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. When determining retention periods, we consider the nature of the data, the purposes of processing, and legal requirements.
To exercise any of your rights under GDPR, please contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive numerous requests, we may extend this period by two further months, and we will inform you of any extension.
We may request specific information from you to help us confirm your identity and ensure your right to access the information or exercise your other rights.
If you believe that our processing of your personal data violates GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.
We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.