GDPR Compliance Statement

Last Updated: June 3, 2026

Our Commitment to GDPR

Although Pure Egret is based in Australia, we recognize the importance of the European Union's General Data Protection Regulation (GDPR) and are committed to protecting the personal data of all individuals, including those in the EU and EEA.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you voluntarily provide information through forms or communications
• Contractual necessity: To fulfill service agreements and project contracts
• Legitimate interests: To improve our services and communicate relevant information
• Legal obligation: To comply with applicable laws and regulations

Your Rights Under GDPR

If you are an EU or EEA resident, you have the following rights:

Right to Access

You have the right to request access to the personal data we hold about you and receive a copy of that data.

Right to Rectification

You can request that we correct any inaccurate or incomplete personal data.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances.

Right to Restrict Processing

You can request that we limit the processing of your personal data in specific situations.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format.

Right to Object

You can object to the processing of your personal data for direct marketing purposes or based on legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Active customer data: Duration of the business relationship plus 7 years for legal and accounting purposes
• Inquiry and quote data: 3 years from last contact
• Marketing data: Until consent is withdrawn or 2 years of inactivity

International Data Transfers

As an Australian-based company, your data may be transferred to and processed in Australia. We ensure appropriate safeguards are in place when transferring data internationally, including standard contractual clauses where applicable.

Data Protection Officer

For GDPR-related inquiries, you can contact our Data Protection Officer at:

Email: [email protected]

Supervisory Authority

If you are in the EU or EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

Data Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Employee training on data protection
• Incident response procedures

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at:

Email: [email protected]
Address: 127 Chapel Street, South Yarra VIC 3141, Australia

We will respond to your request within 30 days.

Updates to This Statement

We may update this GDPR Compliance Statement from time to time to reflect changes in our practices or legal requirements. Please check this page periodically for updates.