GDPR Compliance

Introduction

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that applies to organisations processing personal data of individuals in the European Union. Although lush-juniper is based in Australia, we respect the privacy rights of all individuals, including those protected under GDPR.

Our Commitment

lush-juniper is committed to processing personal data in accordance with GDPR principles when handling data of EU residents. We ensure that:

• Personal data is processed lawfully, fairly, and transparently
• Data is collected for specified, explicit, and legitimate purposes
• Data collection is limited to what is necessary for the stated purposes
• Personal data is accurate and kept up to date
• Data is retained only for as long as necessary
• Appropriate security measures protect personal data

Legal Basis for Processing

When processing personal data of EU residents, we rely on the following legal bases:

• Consent: Where you have given clear consent for us to process your personal data for a specific purpose
• Contract: Where processing is necessary for the performance of a contract with you
• Legal Obligation: Where processing is necessary to comply with applicable laws
• Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your fundamental rights

Your Rights Under GDPR

If you are an EU resident, you have the following rights regarding your personal data:

Right to Access

You have the right to request a copy of the personal data we hold about you, along with information about how we process it.

Right to Rectification

You have the right to request correction of inaccurate or incomplete personal data.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request that we limit the processing of your personal data in certain situations.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller.

Right to Object

You have the right to object to the processing of your personal data in certain circumstances, including for direct marketing purposes.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that significantly affect you.

Exercising Your Rights

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month. In complex cases, we may extend this period by a further two months, in which case we will inform you.

International Data Transfers

As we are based in Australia, personal data of EU residents may be transferred outside the European Economic Area (EEA). When such transfers occur, we ensure appropriate safeguards are in place to protect your personal data.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Our retention periods are determined by legal requirements, contractual obligations, and legitimate business needs.

Data Security

We implement appropriate technical and organisational measures to ensure the security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage.

Complaints

If you are an EU resident and believe that we have not handled your personal data properly, you have the right to lodge a complaint with a supervisory authority in your country of residence.

Contact Us

For GDPR-related enquiries or to exercise your rights, please contact us:

Email: [email protected]
Address: Level 12, 180 George Street, Sydney NSW 2000, Australia