GDPR Compliance Statement

Last Updated: May 11, 2026

Our Commitment to Data Protection

While glisten-berry is based in Australia, we recognize that some of our website visitors may be located in the European Union. We are committed to complying with the General Data Protection Regulation (GDPR) for all EU residents.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you provide explicit consent for us to process your personal data
• Contract: When processing is necessary for the performance of a contract with you
• Legal Obligation: When we must process data to comply with legal requirements
• Legitimate Interests: When processing is necessary for our legitimate business interests

Your Rights Under GDPR

If you are an EU resident, you have the following rights:

Right to Access

You have the right to request copies of your personal data that we hold.

Right to Rectification

You have the right to request correction of any inaccurate or incomplete personal data.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances.

Right to Restrict Processing

You have the right to request restriction of processing of your personal data in specific situations.

Right to Data Portability

You have the right to request transfer of your data to another organization or directly to you.

Right to Object

You have the right to object to our processing of your personal data under certain circumstances.

Rights Related to Automated Decision Making

You have the right not to be subject to decisions based solely on automated processing that significantly affect you.

Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer:

Email: [email protected]

Data Transfers

When we transfer personal data from the EU to Australia or other countries, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specific retention periods vary depending on the type of data and purpose of processing.

Security Measures

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data
• Regular security assessments
• Access controls and authentication
• Staff training on data protection
• Incident response procedures

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware of the breach.

Third-Party Processing

When we engage third-party processors, we ensure they provide sufficient guarantees to implement appropriate technical and organizational measures in compliance with GDPR.

Cookies and Tracking

We use cookies and similar technologies in accordance with GDPR requirements. For detailed information, please see our Cookie Policy.

Exercising Your Rights

To exercise any of your GDPR rights, please contact us at:

Email: [email protected]
Address: Level 12, 87 Wickham Terrace, Brisbane QLD 4000, Australia

We will respond to your request within one month. If your request is complex, we may extend this period by two further months, in which case we will inform you.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, particularly in the EU member state of your habitual residence, place of work, or place of alleged infringement.

Updates to This Statement

We may update this GDPR Compliance Statement periodically. The "Last Updated" date at the top indicates when changes were last made.