GDPR Compliance

Last updated: September 29, 2026

Data Controller

Oak-tapir acts as the data controller for personal information collected through this website. We process personal data in accordance with applicable data protection regulations, including the General Data Protection Regulation.

Legal Basis for Processing

We process personal data based on the following legal grounds:

Consent: When you submit a service inquiry, you provide explicit consent for us to process your information.
Legitimate interests: Processing necessary to respond to business inquiries and provide requested services.
Contract performance: When processing is necessary to fulfill service agreements.

Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of access: Request copies of your personal data.
Right to rectification: Request correction of inaccurate data.
Right to erasure: Request deletion of your personal data.
Right to restrict processing: Request limitation on how we use your data.
Right to data portability: Receive your data in a structured, machine-readable format.
Right to object: Object to processing based on legitimate interests.
Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

Data Protection Measures

We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, access controls, and regular security assessments.

Data Transfers

Personal data is stored on servers located in Australia. We do not transfer personal data outside Australia without appropriate safeguards in place.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements.

Exercising Your Rights

To exercise any of your rights or for questions about data protection, contact us at [email protected]. We will respond to requests within 30 days.

Complaints

You have the right to lodge a complaint with your local data protection authority if you believe your data protection rights have been violated.