Last Updated: September 9, 2026
russet-prairie respects the privacy rights of individuals in the European Union and complies with the General Data Protection Regulation (GDPR) in our handling of personal data from EU residents, even though we are based in Australia.
We process personal data under the following legal bases:
Under GDPR, you have the following rights regarding your personal data:
You may request confirmation of whether we process your personal data and obtain a copy of that data.
You may request correction of inaccurate or incomplete personal data we hold about you.
You may request deletion of your personal data under certain circumstances, such as when data is no longer necessary for the purposes for which it was collected.
You may request that we limit how we use your personal data in specific situations.
You may request to receive your personal data in a structured, commonly used format and have it transmitted to another controller.
You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.
We do not use automated decision-making or profiling that produces legal effects concerning you.
To exercise any of these rights, contact us at [email protected] with your request. We will respond within one month of receiving a valid request. In complex cases, we may extend this period by two additional months and will inform you of such extension.
We may request specific information from you to confirm your identity before responding to rights requests, ensuring we do not disclose personal data to unauthorized parties.
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Retention periods vary based on data type and purpose:
As an Australian-based business, your data may be processed outside the European Economic Area. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses approved by the European Commission where applicable.
For questions about data protection practices or to exercise your rights, contact our data protection representative at [email protected].
If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with your local supervisory authority in the EU. We would appreciate the opportunity to address your concerns directly before you approach a supervisory authority.
We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. Material changes will be communicated through our website and, where appropriate, via direct communication.