GDPR Compliance

Our Commitment to Data Protection

While Snug-field operates primarily in Australia, we recognize the importance of the General Data Protection Regulation (GDPR) for any European Union residents who may interact with our services. We are committed to protecting personal data and respecting privacy rights.

Legal Basis for Processing

We process personal data based on the following legal grounds:

• Consent: When you voluntarily provide information through our forms or communications
• Legitimate Interest: For business operations, security measures, and service improvement
• Legal Obligation: When required to comply with applicable laws and regulations

Your GDPR Rights

If you are a resident of the European Union, you have specific rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data.

Right to Rectification

You can request correction of inaccurate personal data or completion of incomplete data.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent.

Right to Restriction

You can request that we limit processing of your personal data in certain circumstances.

Right to Data Portability

You may request to receive your personal data in a structured, commonly used format and transmit it to another controller.

Right to Object

You can object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.

Data Protection Officer

For questions about GDPR compliance or to exercise your rights, contact our data protection representative at [email protected]

Data Transfers

Personal data may be transferred to and processed in Australia. We ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements when transferring data outside the European Economic Area.

Data Breach Notification

In the event of a data breach that may result in risk to your rights and freedoms, we will notify relevant supervisory authorities within 72 hours and inform affected individuals without undue delay.

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected] with your request. We will respond within one month of receiving your request, though this period may be extended by two additional months for complex requests.

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority in your jurisdiction if you believe our processing of your personal data violates GDPR requirements.