GDPR Information

Last updated: 1 June 2026

About GDPR

The General Data Protection Regulation (GDPR) is a comprehensive data protection law that governs how organisations collect, process, and store personal data of individuals within the European Union and European Economic Area. Although brightdrift-shore operates primarily in Australia, we are committed to providing GDPR-level protections to all our visitors and customers.

Your Rights Under GDPR

If you are located in the EU/EEA, or if we process your data in connection with EU/EEA activities, you have the following rights:

Right to Access

You have the right to request copies of your personal data that we hold. We will provide this information within one month of your request, free of charge for the first request.

Right to Rectification

You have the right to request that we correct any information you believe is inaccurate. You also have the right to request that we complete information you believe is incomplete.

Right to Erasure

You have the right to request that we erase your personal data under certain conditions, including when the data is no longer necessary for the purpose for which it was collected, or when you withdraw consent.

Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data under certain conditions, such as when you contest the accuracy of the data or object to processing.

Right to Object

You have the right to object to our processing of your personal data under certain conditions, particularly for direct marketing purposes or processing based on legitimate interests.

Right to Data Portability

You have the right to request that we transfer the data we have collected to another organisation, or directly to you, in a commonly used machine-readable format, under certain conditions.

Lawful Basis for Processing

We process personal data based on one or more of the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for a specific purpose.
• Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract.
• Legal obligation: Processing is necessary for us to comply with the law.
• Legitimate interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party, unless there is a good reason to protect your personal data which overrides those interests.

Data Transfers

As an Australian company, data we collect may be transferred to and stored in Australia. When we transfer data outside the EU/EEA, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.

Data Protection Officer

For GDPR-related enquiries, you can contact our designated data protection contact at:

Email: [email protected]
Address: 142 Collins Street, Level 8, Melbourne VIC 3000, Australia

Supervisory Authority

If you are located in the EU/EEA and believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection supervisory authority.

Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes for which we collected it, including to satisfy any legal, accounting, or reporting requirements. The criteria used to determine our retention periods include:

• The length of time we have an ongoing relationship with you
• Legal obligations to retain data for a certain period
• Statute of limitations under applicable law
• Our legitimate business interests

Exercising Your Rights

To exercise any of your rights under GDPR, please contact us using the details provided above. We will respond to your request within one month. In some cases, we may need to verify your identity before processing your request.

Changes to This Information

We may update this GDPR information from time to time. Any changes will be posted on this page with an updated revision date.