GDPR Compliance Statement

Last updated: November 3, 2026

While Turquoise-dusk operates primarily in Australia, we recognize the importance of data protection principles established by the General Data Protection Regulation (GDPR) for any European Union residents who may use our services.

Legal Basis for Processing

We process personal data under the following legal bases:

• Contractual Necessity: Processing is necessary to perform the card retrieval service you have requested
• Legitimate Interests: We have a legitimate interest in providing and improving our services
• Legal Obligation: We may be required to process data to comply with legal requirements
• Consent: Where required, we obtain your explicit consent before processing your data

Your GDPR Rights

If you are an EU resident, you have the following rights regarding your personal data:

Right to Access

You have the right to request copies of your personal data. We may charge a reasonable fee for additional copies beyond the first request.

Right to Rectification

You have the right to request correction of any information you believe is inaccurate or completion of information you believe is incomplete.

Right to Erasure

You have the right to request deletion of your personal data under certain conditions, including when the data is no longer necessary for the purposes for which it was collected.

Right to Restrict Processing

You have the right to request restriction of processing of your personal data under certain conditions.

Right to Object

You have the right to object to our processing of your personal data under certain conditions.

Right to Data Portability

You have the right to request transfer of your data to another organization or directly to you under certain conditions.

Exercising Your Rights

To exercise any of these rights, please contact us at:

Email: [email protected]
Address: Level 14, 207 Kent Street, Sydney NSW 2000, Australia

We will respond to your request within one month. If your request is particularly complex or you have made multiple requests, we may extend this period by two additional months, and we will inform you of any such extension.

Data Protection Officer

For questions specifically related to data protection and GDPR compliance, you may contact our data protection representative at the email address provided above.

International Data Transfers

Your information may be transferred to and maintained on servers located outside of your country. We ensure that appropriate safeguards are in place for such transfers in accordance with GDPR requirements.

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or place of alleged infringement if you believe our processing of your personal data violates applicable law.

Children's Data

We do not knowingly collect or process personal data from individuals under 16 years of age. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete that information.

Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Updates to This Statement

We may update this GDPR compliance statement periodically. We will notify you of any material changes by posting the updated statement on our website with a new "Last updated" date.