GDPR Compliance Statement

Last updated: September 10, 2026

Data Controller

For the purposes of the General Data Protection Regulation (GDPR), the data controller is petal-pixel, located at Level 14, 367 Collins Street, Melbourne VIC 3000, Australia.

Legal Basis for Processing

We process personal data on the following legal bases:

• Consent: When you submit a service request form, you consent to our processing of your personal information.
• Legitimate interests: We process data to improve our services and website functionality.
• Legal obligation: We process data when required to comply with legal requirements.

Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can request correction of inaccurate or incomplete data.
• Right to erasure: You can request deletion of your personal data in certain circumstances.
• Right to restrict processing: You can request that we limit how we use your data.
• Right to data portability: You can request your data in a structured, commonly used format.
• Right to object: You can object to processing based on legitimate interests.
• Right to withdraw consent: You can withdraw consent at any time where processing is based on consent.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Service request data is typically retained for three years after the last contact.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area. When we do so, we ensure appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Exercising Your Rights

To exercise any of your GDPR rights, contact us at [email protected]. We will respond to your request within one month. If your request is complex or we receive multiple requests, we may extend this period by two additional months, and we will inform you.

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the relevant supervisory authority in your jurisdiction.