GDPR Compliance

Last Updated: June 4, 2026

General Data Protection Regulation

Although snug-flow primarily operates in Australia, we respect the data protection rights of all individuals, including those protected under the European Union's General Data Protection Regulation.

Legal Basis for Processing

We process personal data under the following lawful bases:

• Consent: When you provide explicit consent for specific processing activities
• Contract: When processing is necessary to fulfill service agreements
• Legitimate Interests: For business operations that do not override your fundamental rights
• Legal Obligation: When required by applicable laws

Your Rights Under GDPR

If you are a resident of the European Economic Area, you have the following rights:

• Right of Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate information
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation on how we use your data
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Object: Object to certain types of processing
• Rights Related to Automated Decision-Making: We do not use automated decision-making or profiling

Data Protection Officer

For GDPR-related inquiries, please contact:

[email protected]

International Data Transfers

Personal data collected through our website may be transferred to and processed in Australia. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

Data Retention

We retain personal data only for as long as necessary to provide services and comply with legal obligations. Specific retention periods depend on the nature of the data and the purpose for which it was collected.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority in your jurisdiction if you believe your data protection rights have been violated.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month, or inform you if we require additional time.

Security Measures

We implement technical and organizational measures appropriate to the risk, including:

• Encryption of data in transit and at rest
• Regular security assessments
• Access controls and authentication requirements
• Staff training on data protection

Updates to This Notice

We may update this GDPR compliance notice as regulations evolve or our practices change. Material changes will be communicated through our website.