GDPR Compliance

Last Updated: August 5, 2026

General Data Protection Regulation

While plum-crater is based in Australia, we respect the data protection rights of all individuals, including those in the European Economic Area. This page outlines our commitment to GDPR principles.

Lawful Basis for Processing

We process personal data based on one or more of the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for a contract we have with you
• Legal obligation: Processing is necessary to comply with the law
• Legitimate interests: Processing is necessary for our legitimate interests or those of a third party

Your Rights Under GDPR

If GDPR applies to you, you have the following rights:

Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee if your request is clearly unfounded or excessive.

Right to Rectification

You have the right to request correction of inaccurate personal data and to have incomplete personal data completed.

Right to Erasure

You have the right to request deletion of your personal data under certain conditions, including when the data is no longer necessary for the purposes it was collected.

Right to Restrict Processing

You have the right to request restriction of processing of your personal data under certain conditions.

Right to Data Portability

You have the right to request transfer of your personal data to another organization or directly to you under certain conditions.

Right to Object

You have the right to object to processing of your personal data under certain conditions, including processing based on legitimate interests.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or similarly significantly affects you.

Data Protection Officer

For questions about how we process your personal data or to exercise your GDPR rights, you may contact our data protection contact:

Email: [email protected]
Address: 47 Industrial Drive, Eagle Farm QLD 4009, Australia

Data Processing Activities

We process the following categories of personal data:

• Identification data (name, email address)
• Contact information (address, email)
• Project-related information you provide
• Website usage data (IP address, browser type, pages visited)

International Data Transfers

Your data may be transferred to and processed in Australia. We ensure appropriate safeguards are in place when transferring data internationally.

Data Retention Periods

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Inquiry data: 3 years from last contact
• Project data: Duration of project plus 7 years for legal compliance
• Marketing data: Until consent is withdrawn
• Website analytics: 26 months

Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication
• Staff training on data protection

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals within 72 hours of becoming aware of the breach.

Third Party Data Processors

We work with third party service providers who process data on our behalf. All processors are carefully selected and required to maintain appropriate security measures and process data only as instructed.

Supervisory Authority

If you are located in the EEA and believe we have not addressed your concerns appropriately, you have the right to lodge a complaint with your local data protection supervisory authority.

Changes to This Policy

We may update our GDPR compliance information from time to time. Any changes will be posted on this page with an updated revision date.