GDPR Compliance Information

Last Updated: June 2026

Our Commitment to Data Protection

While dune-side operates primarily within Australia, we recognize that our website may be accessed by individuals in the European Union. We are committed to respecting the data protection rights established under the General Data Protection Regulation (GDPR).

Legal Basis for Processing

When we process personal data of EU residents, we rely on the following legal bases:

• Consent: When you voluntarily provide information through contact forms or subscribe to communications
• Legitimate Interests: To operate our website, improve our services, and communicate about sustainability solutions
• Contractual Necessity: To fulfill consultation requests and service agreements
• Legal Obligations: To comply with applicable laws and regulations

Your GDPR Rights

If you are an EU resident, you have the following rights regarding your personal data:

• Right of Access: You may request confirmation of what personal data we process and obtain a copy
• Right to Rectification: You may request correction of inaccurate or incomplete data
• Right to Erasure: You may request deletion of your personal data under certain conditions
• Right to Restrict Processing: You may request limitation of how we process your data
• Right to Data Portability: You may request your data in a structured, commonly used format
• Right to Object: You may object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. When data is no longer needed, we securely delete or anonymize it.

International Data Transfers

Personal data collected through our website is stored and processed in Australia. If you are located in the EU, please be aware that Australia provides data protection standards that may differ from those in your jurisdiction. We implement appropriate safeguards to protect data transferred internationally.

Automated Decision-Making

We do not use personal data for automated decision-making or profiling that produces legal effects or similarly significant impacts on individuals.

Data Protection Officer

For GDPR-related inquiries or to exercise your data protection rights, please contact us at [email protected] with "GDPR Request" in the subject line.

Supervisory Authority

If you are an EU resident and believe we have not addressed your concerns appropriately, you have the right to lodge a complaint with your local data protection supervisory authority.

Children's Privacy

Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without appropriate consent, we will take steps to delete it.

Updates to This Information

We may update this GDPR compliance information to reflect changes in our practices or legal requirements. Material changes will be communicated through our website.