GDPR Compliance Statement

Last updated: August 3, 2026

Introduction

While meadow-signal primarily operates in Australia, we recognize that our website may be accessed by individuals located in the European Economic Area (EEA). This statement explains how we comply with the General Data Protection Regulation (GDPR) when processing personal data of EEA residents.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you provide explicit consent for specific processing activities
• Contract: When processing is necessary to fulfill a contract with you
• Legal obligation: When we must process data to comply with legal requirements
• Legitimate interests: When processing is necessary for our legitimate business interests, provided these do not override your rights

Your Rights Under GDPR

If you are located in the EEA, you have the following rights regarding your personal data:

Right of Access

You have the right to obtain confirmation of whether we process your personal data and to access that data along with specific information about the processing.

Right to Rectification

You have the right to have inaccurate personal data corrected and incomplete data completed.

Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, including when the data is no longer necessary for the purposes for which it was collected.

Right to Restriction of Processing

You have the right to request that we restrict processing of your personal data in certain situations.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.

Right to Object

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw that consent at any time.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority in your country of residence or place of work.

International Data Transfers

Your personal data may be transferred to and processed in Australia, which may not provide the same level of data protection as your home country. When we transfer personal data from the EEA to Australia or other countries, we implement appropriate safeguards, including:

• Standard contractual clauses approved by the European Commission
• Ensuring recipients are certified under approved frameworks
• Obtaining your explicit consent for the transfer

Data Protection Officer

For GDPR-related inquiries or to exercise your rights, you may contact our data protection representative:

Email: [email protected]
Subject line: GDPR Inquiry

Processing Activities

Categories of Personal Data

We may process the following categories of personal data:

• Identity data (name)
• Contact data (email address, postal address)
• Property information (address, type, characteristics)
• Technical data (IP address, browser information)
• Usage data (website interaction patterns)
• Communication data (correspondence records)

Recipients of Personal Data

We may share personal data with:

• Service providers (hosting, email services, analytics)
• Professional advisors (legal, accounting)
• Regulatory authorities when required by law

Data Retention Periods

We retain personal data only for as long as necessary for the purposes outlined in our Privacy Policy or as required by law. Specific retention periods are detailed in our Privacy Policy.

Automated Decision-Making

We do not engage in automated decision-making or profiling that produces legal effects or similarly significant effects on individuals.

Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Pseudonymization and encryption of personal data
• Ongoing confidentiality, integrity, and availability of systems
• Ability to restore access to personal data in a timely manner
• Regular testing and evaluation of security measures

Data Breach Notification

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify you without undue delay, typically within 72 hours of becoming aware of the breach.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected] with "GDPR Request" in the subject line. We will respond to your request within one month, which may be extended by two additional months if necessary.

Updates to This Statement

We may update this GDPR Compliance Statement to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated statement on our website.

Contact Information

For questions about this GDPR Compliance Statement or to exercise your rights, contact us at:

Email: [email protected]
Address: 127 Sustainable Energy Boulevard, Brisbane QLD 4000, Australia