GDPR Compliance
Our commitment to protecting your personal data under the General Data Protection Regulation
Last Updated: September 2026
Introduction
Snow-civet is committed to protecting the privacy and security of personal data in compliance with the General Data Protection Regulation (GDPR). This document outlines how we process personal data and the rights available to data subjects.
Data Controller
Snow-civet acts as the data controller for personal information collected through our website and services. Our contact details are:
Snow-civet
Level 14, 287 Elizabeth Street
Sydney NSW 2000
Australia
Email: [email protected]
Legal Basis for Processing
We process personal data under the following legal bases:
- Consent: When you submit enquiry forms or subscribe to communications, you provide consent for us to process your data for those purposes.
- Contractual Necessity: When you enrol in our programmes, we process your data as necessary to fulfil our contractual obligations.
- Legitimate Interests: We may process data for our legitimate business interests, such as improving our services, provided these interests do not override your rights.
- Legal Obligation: We may process data when required by law.
Types of Data Collected
We collect and process the following categories of personal data:
- Identity data (name)
- Contact data (email address)
- Technical data (IP address, browser type, device information)
- Usage data (information about how you use our website)
- Communications data (enquiry content, preferences)
Your Rights Under GDPR
As a data subject, you have the following rights:
Right to Access
You have the right to request a copy of the personal data we hold about you and information about how we process it.
Right to Rectification
You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
Right to Erasure
You have the right to request deletion of your personal data in certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
Right to Restrict Processing
You have the right to request that we limit the processing of your personal data in certain circumstances.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
Right to Object
You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Exercising Your Rights
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month. We may request verification of your identity before processing your request.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Retention periods vary based on the type of data and the purpose of processing. When data is no longer required, it is securely deleted or anonymised.
International Data Transfers
We are based in Australia. If we transfer personal data outside Australia or the European Economic Area, we ensure appropriate safeguards are in place to protect your data in compliance with GDPR requirements.
Data Security
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:
- Encryption of data in transit
- Regular security assessments
- Access controls and authentication measures
- Staff training on data protection
Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, notify affected individuals without undue delay.
Right to Lodge a Complaint
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. In Australia, this is the Office of the Australian Information Commissioner (OAIC). For European residents, complaints may be lodged with your local data protection authority.
Updates to This Notice
We may update this GDPR compliance notice from time to time. Any changes will be posted on this page with an updated revision date.
Contact Us
For questions about our GDPR compliance or to exercise your data protection rights, please contact us at [email protected].