GDPR Compliance

Last Updated: August 11, 2026

Introduction

While gentle-mist operates primarily in Australia, we recognize the importance of data protection for all individuals, including those in the European Union. This page outlines our commitment to GDPR principles and your rights regarding personal data processing.

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities
• Contract Performance: To fulfill our obligations when providing services you have requested
• Legitimate Interests: For business operations that do not override your fundamental rights
• Legal Obligations: To comply with applicable laws and regulations

Your GDPR Rights

If you are an EU resident, you have the following rights regarding your personal data:

Right to Access

You have the right to request confirmation of whether we process your personal data and to receive a copy of that data.

Right to Rectification

You can request correction of inaccurate or incomplete personal data we hold about you.

Right to Erasure

Under certain circumstances, you have the right to request deletion of your personal data.

Right to Restriction of Processing

You may request that we limit how we use your personal data in specific situations.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used format and to transmit it to another controller.

Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you believe we have violated your data protection rights.

Data Processing Activities

What Data We Collect

• Contact information (name, email address)
• Service inquiries and preferences
• Property information for energy assessments
• Website usage data (IP address, browser type, pages visited)

Purpose of Processing

• Responding to inquiries and providing requested services
• Conducting energy assessments and consultations
• Improving our services and website functionality
• Compliance with legal obligations

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Specific retention periods depend on the nature of the data and legal requirements.

Data Transfers

As our operations are based in Australia, your personal data may be transferred to and processed in Australia. We ensure appropriate safeguards are in place for any international data transfers.

Data Security

We implement technical and organizational measures to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

• Encryption of data in transit and at rest
• Access controls and authentication requirements
• Regular security assessments and updates
• Employee training on data protection

Third-Party Processors

We may engage third-party service providers to process personal data on our behalf. All processors are required to maintain appropriate security measures and process data only according to our instructions.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Cookies and Tracking

Our website uses cookies and similar technologies. You can manage cookie preferences through our cookie banner or your browser settings. For detailed information, please review our Cookies Policy.

Exercising Your Rights

To exercise any of your GDPR rights or for questions about data processing, please contact us at:

Email: [email protected]
Address: 287 Collins Street, Melbourne VIC 3000, Australia

We will respond to your request within one month, though this period may be extended by two additional months in complex cases.

Updates to This Notice

We may update this GDPR compliance notice periodically. Significant changes will be communicated through our website.