Last Updated: September 2, 2026
While frosty-basin operates primarily in Australia, we recognize that some website visitors and clients may be located in the European Union. We are committed to respecting the data protection rights established by the General Data Protection Regulation (GDPR) for all individuals, regardless of location.
We process personal data only when we have a lawful basis to do so:
If you are a resident of the European Union, you have specific rights regarding your personal data:
You may request confirmation of whether we process your personal data and obtain a copy of that data along with supplementary information about how it is processed.
You may request correction of inaccurate personal data or completion of incomplete personal data we hold about you.
Under certain circumstances, you may request deletion of your personal data. This right is not absolute and may be subject to legal retention requirements.
You may request that we limit how we use your personal data in specific situations, such as when you contest the accuracy of the data.
You may request to receive personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller.
You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you. We do not currently engage in automated decision-making of this nature.
For questions regarding GDPR compliance or to exercise your data protection rights, please contact us at [email protected]. We will respond to requests within the timeframes required by applicable data protection law.
Personal data collected through our website is stored and processed in Australia. If we transfer personal data outside the European Economic Area, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where required by law. Affected individuals will be notified without undue delay when the breach is likely to result in high risk to their rights and freedoms.
Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.
If you believe we have not adequately addressed your concerns regarding personal data processing, you have the right to lodge a complaint with the appropriate data protection supervisory authority in your jurisdiction.
We may update this GDPR compliance statement to reflect changes in our practices or legal requirements. The most current version will always be available on our website with the revision date clearly indicated.